Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/kVbiJ1IRzjNhg-X9pHDw-O6rudk.roa
File: kVbiJ1IRzjNhg-X9pHDw-O6rudk.roa (raw, json)
Hash identifier: n5+EFntk+vZqzREJ4cL5H/VRkEorHXsknZfsdPD7cyU=
Subject key identifier: 91:56:E2:27:52:11:CE:33:61:83:E5:FD:A4:70:F0:F8:EE:AB:B9:D9
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0192A3D855BF478B4971823B79A7DD4E6794
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/kVbiJ1IRzjNhg-X9pHDw-O6rudk.roa
Signing time: Sat 19 Oct 2024 08:15:16 +0000
ROA not before: Sat 19 Oct 2024 08:15:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208626
IP address blocks: 2a12:1547::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a3:d8:55:bf:47:8b:49:71:82:3b:79:a7:dd:4e:67:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Oct 19 08:15:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9156e2275211ce336183e5fda470f0f8eeabb9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:92:06:73:ea:11:8e:ef:e2:0e:e6:45:fa:47:
49:24:8c:0f:f9:a0:02:1f:f1:7d:d6:44:b3:0c:30:
b7:62:df:26:e5:cf:a4:e0:73:30:4a:b7:fb:2d:b3:
70:5d:c9:82:fc:da:34:c0:85:22:7a:01:30:3a:e9:
cd:cf:78:73:0f:2b:22:71:b2:ec:e7:44:0e:6a:45:
16:35:ad:23:cc:30:6d:9f:90:67:7f:e1:3d:91:ad:
2d:8d:9c:24:7b:20:26:10:9b:e8:21:25:d2:48:4b:
2c:22:7f:e6:4a:ec:e0:b5:7c:03:5d:1b:3b:1f:6b:
b9:70:2a:91:3c:d4:e4:b8:b1:f3:c4:2e:4b:1e:d8:
96:8e:90:36:a1:2a:9a:69:9e:65:bf:d6:99:db:d5:
33:00:11:ad:dd:e2:b0:61:34:5b:7f:47:41:fa:0e:
d1:b3:6f:fc:b0:3d:ca:3f:99:35:cb:34:47:11:48:
e9:9f:bd:1d:53:d5:8e:2c:41:f4:5a:9e:a6:7b:59:
d3:35:01:87:f5:25:f5:42:05:51:ee:d2:84:db:62:
8f:32:05:13:e4:9e:79:4b:8b:e0:a7:80:7b:33:24:
85:16:b5:b1:c9:0e:97:c8:6f:5c:98:5c:89:16:a6:
35:d5:86:de:45:4e:51:22:8a:f3:4f:11:43:a1:f5:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:56:E2:27:52:11:CE:33:61:83:E5:FD:A4:70:F0:F8:EE:AB:B9:D9
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/kVbiJ1IRzjNhg-X9pHDw-O6rudk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1547::/32
Signature Algorithm: sha256WithRSAEncryption
24:66:b0:1f:cc:5b:d6:ed:e3:de:da:43:de:5b:1b:87:f1:b3:
9e:86:ce:7d:a6:a1:bc:9c:22:3b:f4:f4:bd:e9:07:c5:b2:5d:
f1:81:5f:bc:de:f6:88:ef:89:6f:d3:16:58:70:71:ba:e3:b1:
80:73:a3:65:a8:53:43:b7:21:d8:99:81:83:57:c6:e7:89:4d:
c7:5e:b3:e5:79:00:b9:ef:9e:e1:9e:02:54:41:5b:67:22:05:
48:fd:c2:af:d0:3c:f4:91:d5:21:74:91:89:5d:f7:d1:c1:98:
56:7e:1d:29:94:35:8e:e5:e8:41:d5:c2:a6:33:44:15:90:69:
b6:32:c0:e3:ad:b4:ef:b1:ab:62:b3:9e:31:f8:52:95:4d:79:
d5:52:54:dc:79:ed:e6:34:5d:9f:a7:c9:57:95:c7:03:e7:5d:
6f:a9:ae:39:56:ec:74:f7:6e:74:59:f2:0e:47:cd:93:76:9f:
68:23:0b:3c:ba:29:dd:d7:d1:10:e3:7a:b8:df:1d:1a:35:ee:
af:1a:d7:9f:3b:c9:7f:66:36:de:f5:32:f0:91:3a:24:e5:0d:
3d:32:ca:c6:d7:4f:db:c7:a6:8a:30:63:ed:85:08:f1:3d:12:
82:d2:70:de:7a:e4:6f:26:a1:b5:13:eb:da:55:69:87:b7:4c:
13:27:de:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:36 2024 by rpki-client on console-fra.rpki-client.org