Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/ib1xhJyzsB-yVVuxZ6E5DP3CUfc.roa
File: ib1xhJyzsB-yVVuxZ6E5DP3CUfc.roa (raw, json)
Hash identifier: eb4GRVuyGWDSeJnQnkyK6xTSGWJkFzpj15Q8PR8uY88=
Subject key identifier: 89:BD:71:84:9C:B3:B0:1F:B2:55:5B:B1:67:A1:39:0C:FD:C2:51:F7
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 01901592B5068730607F089390B76E2B2EBD
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/ib1xhJyzsB-yVVuxZ6E5DP3CUfc.roa
Signing time: Fri 14 Jun 2024 07:07:34 +0000
ROA not before: Fri 14 Jun 2024 07:07:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207137
IP address blocks: 2a13:240::/48 maxlen: 48
2a13:240:1::/48 maxlen: 48
2a13:240:2::/48 maxlen: 48
2a13:240:3::/48 maxlen: 48
2a13:240:4::/48 maxlen: 48
2a13:240:5::/48 maxlen: 48
2a13:240:6::/48 maxlen: 48
2a13:240:7::/48 maxlen: 48
2a13:240:8::/48 maxlen: 48
2a13:240:9::/48 maxlen: 48
2a13:240:4200::/40 maxlen: 40
2a13:240:4300::/40 maxlen: 40
2a13:240:4400::/40 maxlen: 40
2a13:240:4500::/40 maxlen: 40
2a13:240:4600::/40 maxlen: 40
2a13:240:4700::/40 maxlen: 40
2a13:240:4800::/40 maxlen: 40
2a13:240:4900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 19:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:15:92:b5:06:87:30:60:7f:08:93:90:b7:6e:2b:2e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jun 14 07:07:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89bd71849cb3b01fb2555bb167a1390cfdc251f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:34:78:80:4e:b4:d9:4a:05:82:58:44:77:
ad:ab:47:ba:cf:d1:e7:0f:6b:7d:e1:da:dc:81:d3:
c8:0b:5a:e7:32:5e:3e:f9:b2:3f:ce:ff:db:b8:b3:
b0:4e:05:87:ca:cc:57:48:4f:75:a6:d4:72:b0:39:
e3:52:ba:d8:e9:16:5c:aa:26:6b:44:59:a0:6e:73:
36:ad:6b:ad:51:a3:74:6a:1a:11:ad:98:84:eb:93:
cc:d2:0b:53:ac:f3:de:24:3e:cf:81:64:2f:7d:12:
5c:13:a0:d8:4d:ec:b0:df:c0:a1:81:38:85:e8:6d:
dd:53:e7:cb:32:7e:40:9d:f8:22:6b:14:72:ad:7d:
1d:20:46:83:77:41:41:03:b5:d3:f9:08:5b:71:fb:
23:6a:29:db:3d:00:eb:fd:5a:a1:35:35:29:a0:80:
16:52:57:5b:d4:50:eb:87:c9:90:69:56:3f:a3:68:
ac:b7:11:7a:ac:45:49:0b:24:c7:e7:99:e6:41:e9:
f7:49:ba:67:94:1b:50:60:55:6a:7f:52:0d:ff:4b:
49:ae:53:f9:78:f9:42:3c:68:1e:a7:15:2b:22:8c:
44:6f:f2:86:8d:7f:86:87:f1:45:08:9e:b5:42:a1:
0e:96:ea:2f:47:25:c3:2b:58:22:ed:7d:3e:a3:fa:
9e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BD:71:84:9C:B3:B0:1F:B2:55:5B:B1:67:A1:39:0C:FD:C2:51:F7
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/ib1xhJyzsB-yVVuxZ6E5DP3CUfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:240::-2a13:240:9:ffff:ffff:ffff:ffff:ffff
2a13:240:4200::-2a13:240:49ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
52:c2:9f:43:e4:fb:7b:73:2c:c3:26:f2:2d:7d:3b:72:ed:20:
f9:89:a2:e1:d5:d4:e1:2c:76:77:b4:a8:be:6e:96:ac:0f:0a:
18:08:95:55:a2:c3:45:29:4a:1a:52:05:51:59:0b:ad:ac:4f:
5f:ac:cb:23:1d:7e:26:62:da:6b:d1:95:1a:0d:d5:85:14:98:
d0:7f:4a:d6:1d:ea:7a:94:1b:3b:95:05:5c:ce:f6:66:49:17:
37:df:a8:d3:b6:03:af:c9:91:6b:f0:39:a0:e9:5e:27:79:86:
d8:d0:1a:00:d6:72:c1:85:bc:2e:13:77:3c:78:3e:cd:5c:10:
f7:cf:6e:8f:a9:6e:f3:7d:6e:44:94:c2:7a:b4:46:4f:ae:82:
dd:f6:ed:29:70:2c:ba:90:f6:a7:a6:29:54:f9:3d:fe:3b:e7:
2b:b4:db:de:ad:d7:0f:c5:f1:f3:68:5b:1b:80:a9:dc:a1:60:
78:73:f4:ae:da:2b:a3:f4:5f:31:b3:28:0e:3a:e1:da:d6:a0:
6d:35:cd:8e:1e:4f:79:f1:63:e4:59:08:98:e5:54:5a:dc:94:
5a:ba:d3:c7:4f:1c:c9:9a:da:40:1d:f7:dd:b7:51:05:02:09:
d5:19:ba:a9:48:5e:32:1b:e9:a3:cf:ba:69:2d:a2:e4:3e:c6:
a4:84:a9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:33:39 2024 by rpki-client on console-fra.rpki-client.org