Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/409r4FTmvCNaaZy8TGynMtRlPvE.roa
File: 409r4FTmvCNaaZy8TGynMtRlPvE.roa (raw, json)
Hash identifier: SqPUHo+iI/MiHCjEYNNax3VWc88UhmhyadijI80tOPQ=
Subject key identifier: E3:4F:6B:E0:54:E6:BC:23:5A:69:9C:BC:4C:6C:A7:32:D4:65:3E:F1
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 018CC6B94EAFEB54FBD3C3489EEC0E62DA95
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/409r4FTmvCNaaZy8TGynMtRlPvE.roa
Signing time: Mon 01 Jan 2024 20:31:22 +0000
ROA not before: Mon 01 Jan 2024 20:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62874
IP address blocks: 2a03:f87:daa4::/48 maxlen: 48
2a03:f87:daac::/48 maxlen: 48
2a03:f87:caac::/48 maxlen: 48
2a03:f87:daa1::/48 maxlen: 48
2a03:f87:daa3::/48 maxlen: 48
2a03:f87:daab::/48 maxlen: 48
2a03:f87:caab::/48 maxlen: 48
2a03:f87:daad::/48 maxlen: 48
2a03:f87:caad::/48 maxlen: 48
2a03:f87:daa2::/48 maxlen: 48
2a03:f87:caaa::/48 maxlen: 48
2a03:f87:daaa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:57:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:4e:af:eb:54:fb:d3:c3:48:9e:ec:0e:62:da:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 1 20:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e34f6be054e6bc235a699cbc4c6ca732d4653ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:d1:49:52:e0:92:45:f2:83:4c:4c:b8:e0:
f8:fc:d9:96:e1:f7:8c:23:64:fb:8d:e0:11:81:d0:
4c:6b:37:01:46:75:97:a3:cb:d2:38:10:e1:44:14:
d2:a7:52:51:54:ad:84:4d:97:50:85:9e:43:fb:0b:
7f:10:88:c5:06:0d:ba:e8:6d:00:78:24:8a:03:f1:
4b:d2:77:d8:c9:4c:e2:6e:bb:3a:21:a9:4d:9e:00:
02:7b:54:25:26:69:a0:80:9a:3b:d6:9b:eb:e6:0a:
af:9a:0f:2f:df:bf:65:bd:62:e8:c1:98:64:7c:22:
f9:e2:78:8e:9e:fe:78:c1:ff:e0:a4:ed:db:5b:41:
e4:e5:f1:ce:a0:6f:6c:00:1c:aa:26:c7:e3:c6:74:
01:d3:2b:55:86:d1:76:3c:e2:0e:76:f6:66:5e:ea:
e1:f8:a9:a5:3b:99:47:0d:94:16:5e:24:19:7a:81:
dd:bf:23:7b:1e:e4:4e:c5:82:b4:82:3d:0c:f4:26:
e8:5f:ec:40:f9:57:2c:a5:36:d6:d0:cc:1f:1b:a0:
4c:93:de:19:f4:aa:56:14:62:37:b0:f6:5f:78:3a:
6c:00:23:e9:a0:fa:9b:b9:9d:aa:f6:1f:9e:84:d7:
23:5d:a4:c1:6f:ef:22:d4:54:ce:28:a1:2f:10:39:
1d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4F:6B:E0:54:E6:BC:23:5A:69:9C:BC:4C:6C:A7:32:D4:65:3E:F1
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/409r4FTmvCNaaZy8TGynMtRlPvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f87:caaa::-2a03:f87:caad:ffff:ffff:ffff:ffff:ffff
2a03:f87:daa1::-2a03:f87:daa4:ffff:ffff:ffff:ffff:ffff
2a03:f87:daaa::-2a03:f87:daad:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
40:59:e8:38:c7:42:ca:f2:e6:6f:a9:c9:0f:0e:af:18:5c:dc:
bc:ab:f4:33:b6:fa:b2:5e:28:a7:39:80:a4:14:b0:5f:c6:ed:
64:d6:26:82:55:87:4f:b1:d3:b1:2c:d5:04:af:ce:68:cf:bf:
f7:87:aa:d6:19:15:ce:95:40:35:af:76:95:97:9d:f8:fc:71:
b6:ef:24:a1:19:f6:91:5b:56:f0:d6:2b:88:50:a2:b5:ab:2d:
12:31:f1:78:7a:1e:0d:85:d4:97:7d:cb:49:ae:05:0a:58:83:
4f:a5:05:ed:0c:1f:04:89:3c:91:f7:6e:bf:10:b8:5f:5a:0e:
6e:cf:c1:24:c1:72:7b:8f:a3:7b:2f:39:04:ba:b8:08:52:c4:
fc:02:28:b8:91:07:6f:f5:cf:21:c5:f0:d8:75:d4:56:b0:a8:
2a:b4:21:c9:3b:1b:6f:e6:e4:16:00:dd:ed:60:45:6c:c2:38:
c8:ad:48:0e:19:42:8f:ed:43:9c:40:26:28:61:16:3a:73:5c:
ba:a9:35:33:a9:a7:aa:99:1b:9a:4d:de:3a:72:0b:4b:d1:92:
41:2c:d6:7b:3f:e7:0d:93:d5:76:e4:b8:29:a9:35:e5:11:35:
15:e8:ca:b5:77:6e:80:ba:40:9d:ad:d0:3c:61:09:56:e0:af:
32:bf:61:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:07:17 2024 by rpki-client on console-fra.rpki-client.org