Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/B1cQLLROQr3Ft5yoLLTHzifKPMY.roa
File: B1cQLLROQr3Ft5yoLLTHzifKPMY.roa (raw, json)
Hash identifier: oKrYoY5FzbNcm+xJPzzbHPqwHmIMejL+yGEtFOjGoEg=
Subject key identifier: 07:57:10:2C:B4:4E:42:BD:C5:B7:9C:A8:2C:B4:C7:CE:27:CA:3C:C6
Certificate issuer: /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Certificate serial: 018CC80126F405BC4719F656396699D74469
Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/B1cQLLROQr3Ft5yoLLTHzifKPMY.roa
Signing time: Tue 02 Jan 2024 02:29:27 +0000
ROA not before: Tue 02 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a13:141:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:26:f4:05:bc:47:19:f6:56:39:66:99:d7:44:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Validity
Not Before: Jan 2 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0757102cb44e42bdc5b79ca82cb4c7ce27ca3cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:e0:48:67:60:7e:ee:85:3f:b2:f7:a7:81:
e6:0e:9c:e3:f2:3b:9e:fe:38:04:ed:f0:dd:8a:d3:
31:14:bb:5d:7a:4b:07:26:62:5d:84:48:61:e0:a1:
fc:1b:fa:05:5e:41:70:06:3b:ac:ad:92:d2:55:29:
05:28:d4:cc:27:84:7e:30:f5:5d:71:8b:19:df:11:
86:91:4f:bc:6c:18:8a:3d:47:67:7c:1f:f2:a4:ec:
73:55:9d:33:c3:37:43:f6:14:c8:d2:67:b7:d4:c6:
7c:a5:b7:7c:93:d1:05:22:6c:b5:a1:e2:58:5d:8c:
f5:f6:e9:3b:6b:62:95:9a:5d:bb:c9:fc:87:b9:ca:
f4:41:fe:64:bd:fe:4b:48:c3:06:5e:61:f0:bd:50:
ba:39:08:7f:41:e6:58:ba:0b:41:ba:c5:a9:c0:33:
b3:4a:02:45:6e:b4:25:ce:ac:39:a1:ff:c1:64:12:
bf:c2:50:e1:fb:91:4f:0a:0a:75:55:c4:55:aa:2a:
1d:da:6f:46:4d:1f:cd:40:db:91:91:a8:a8:20:4a:
97:99:36:65:36:36:78:f1:f1:e7:bb:c0:94:12:03:
47:4e:8e:65:2e:dc:e9:7a:ed:a3:6c:2c:16:f1:24:
fa:17:fb:4c:d0:f4:b6:27:d3:aa:4b:25:d1:7c:e0:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:57:10:2C:B4:4E:42:BD:C5:B7:9C:A8:2C:B4:C7:CE:27:CA:3C:C6
X509v3 Authority Key Identifier:
keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/B1cQLLROQr3Ft5yoLLTHzifKPMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:141:2::/48
Signature Algorithm: sha256WithRSAEncryption
81:c2:a2:3b:a2:86:2f:d1:2d:17:79:a4:f4:64:9a:28:00:8a:
3f:7c:d5:b3:48:1e:27:ef:3c:82:ef:ca:a0:d4:a1:7f:f3:16:
a9:19:91:a5:32:3d:e7:49:46:4b:9e:10:ff:a1:f0:4c:85:43:
16:1a:f1:7e:07:d9:9a:0a:6f:85:ef:3a:ff:c2:0f:d8:ab:bf:
26:5d:8e:dd:bf:62:3e:d9:d1:74:fc:92:1a:35:d5:a8:d4:a0:
bc:28:b0:00:b2:fe:b7:06:3a:1e:83:9a:69:f6:36:7f:cb:60:
f2:44:c8:d8:77:1c:ef:99:1b:d9:1f:67:5a:ac:b2:f5:96:ae:
42:11:94:f7:75:b7:8e:96:14:d1:46:4d:6c:5b:c5:ed:e3:18:
1d:57:f1:eb:b6:6a:8e:4e:70:29:2c:be:53:05:cc:a6:0c:e3:
13:13:4d:49:6d:cf:7f:d3:d6:6f:53:ce:5b:43:dd:94:b2:a2:
da:91:b9:b2:c5:2e:2b:99:48:42:b4:bb:ae:c9:ee:53:95:13:
77:a6:c0:f1:dc:41:85:23:77:fe:a0:f7:44:51:ca:e9:44:81:
51:93:b4:0b:1b:fe:0f:28:5f:c0:0b:94:f0:46:c8:0e:cf:33:
ab:a1:14:ac:81:33:bb:b6:0e:eb:fe:b6:93:02:f0:d2:60:e4:
3f:0d:8c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:14:32 2024 by rpki-client on console-ams.rpki-client.org