Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/tSVqSSLyY11CpJ3vJIzDgPOSYmw.roa
File: tSVqSSLyY11CpJ3vJIzDgPOSYmw.roa (raw, json)
Hash identifier: 3go/ocxpYw6LQfRfrqSiPfVamqMQZFqCOaT1gDq6lkQ=
Subject key identifier: B5:25:6A:49:22:F2:63:5D:42:A4:9D:EF:24:8C:C3:80:F3:92:62:6C
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01933EF0F7A80E9B051C94C01DBA66391CB9
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/tSVqSSLyY11CpJ3vJIzDgPOSYmw.roa
Signing time: Mon 18 Nov 2024 11:03:19 +0000
ROA not before: Mon 18 Nov 2024 11:03:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212722
IP address blocks: 2a06:cac0::/29 maxlen: 48
2a11:f140::/29 maxlen: 48
2a12:ec0::/29 maxlen: 48
2a12:1900::/29 maxlen: 48
2a12:28c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:f0:f7:a8:0e:9b:05:1c:94:c0:1d:ba:66:39:1c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Nov 18 11:03:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5256a4922f2635d42a49def248cc380f392626c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5b:71:8d:de:10:50:76:e6:1d:61:79:6e:51:
7d:b9:f1:d7:53:03:9b:29:9b:ca:32:13:23:a2:c8:
6e:fa:26:82:7a:39:89:c8:23:b8:3d:37:f3:03:d9:
9f:9c:4c:65:5f:40:ce:4c:4d:a3:05:f2:a0:0e:00:
0b:27:10:3e:56:35:a0:8b:b8:07:19:78:5d:90:52:
62:9d:cd:63:86:ee:6f:74:91:3a:bb:f7:8b:6a:d0:
0d:3a:09:ff:43:5d:6c:08:7c:d9:fc:e8:ed:89:fd:
4e:c4:c8:5c:4a:46:cb:31:a5:91:a4:3a:6a:fc:49:
df:3c:f3:06:48:bd:64:b8:c0:f9:b9:69:af:58:21:
70:e7:2d:13:e3:97:06:89:38:8e:1a:7d:58:4d:e1:
06:d0:6f:60:d9:8a:1b:58:8b:0c:9d:b4:e5:6f:1c:
82:ec:89:4f:c1:b4:71:d0:fd:14:5d:ff:d4:93:57:
c2:35:75:ee:ff:9d:d2:b9:0c:2d:1c:bd:f5:b3:0e:
74:c6:db:13:f9:12:42:1f:7b:b0:2f:8f:b1:07:06:
a7:d0:11:5a:80:27:cb:30:f7:03:6b:80:a2:98:a9:
01:a7:4a:be:ce:d6:ee:94:90:55:a4:a0:de:b4:f2:
0e:d1:25:3a:c4:95:fc:2c:84:9b:c0:9a:78:71:08:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:25:6A:49:22:F2:63:5D:42:A4:9D:EF:24:8C:C3:80:F3:92:62:6C
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/tSVqSSLyY11CpJ3vJIzDgPOSYmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:cac0::/29
2a11:f140::/29
2a12:ec0::/29
2a12:1900::/29
2a12:28c0::/29
Signature Algorithm: sha256WithRSAEncryption
26:c7:4c:5e:46:bd:ea:0d:16:ac:e6:2e:40:4a:ae:19:4a:d4:
f6:8f:5d:57:84:0d:32:78:50:ad:81:1f:48:82:0f:6e:77:bb:
c6:64:e6:22:93:b4:a9:66:20:7f:8f:b9:bf:61:f8:e6:fe:1d:
21:43:d6:bf:21:94:48:ca:eb:55:4a:f5:81:b6:4f:9d:c5:36:
83:ee:8c:34:c6:9e:ce:22:e4:06:2b:b2:47:b6:42:bf:36:be:
e0:95:f3:d7:73:3e:0f:ef:56:15:7c:ab:a7:3d:d2:a6:5a:c3:
6d:df:aa:c7:be:e8:b8:2f:b7:c5:0b:1c:c1:20:7b:e6:5e:f3:
b0:5e:92:e5:e2:ad:f6:ee:99:60:eb:8d:93:38:60:8d:61:bb:
23:21:bf:31:f5:a5:e4:d5:b6:75:fe:b1:0e:24:cf:15:1f:3a:
15:e2:eb:39:93:76:92:8b:b5:f1:e9:9c:5a:fb:b3:43:bf:39:
f3:15:60:1a:61:6a:46:fa:d6:f0:39:04:7a:4e:0f:6b:13:3c:
28:c8:20:8b:68:66:da:3e:80:99:3c:b0:1c:96:71:61:63:db:
53:02:b0:7b:ff:05:e0:3f:28:6e:70:9c:4e:c3:ec:e3:e3:ab:
0c:bc:32:cb:16:c2:53:9d:aa:08:03:b4:26:40:0e:f5:9a:6e:
85:d2:70:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:53:22 2024 by rpki-client on console-ams.rpki-client.org