Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/rtFDYQVIkAHl98KjdeyVSb2kf8U.roa
File: rtFDYQVIkAHl98KjdeyVSb2kf8U.roa (raw, json)
Hash identifier: NDCvtobhGwMaMlukj/PGwVFEQkkyfYGj6St5MkpGXSw=
Subject key identifier: AE:D1:43:61:05:48:90:01:E5:F7:C2:A3:75:EC:95:49:BD:A4:7F:C5
Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial: 019001C329C4C7C7D7D9A919461D8EF68A7A
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/rtFDYQVIkAHl98KjdeyVSb2kf8U.roa
Signing time: Mon 10 Jun 2024 10:48:05 +0000
ROA not before: Mon 10 Jun 2024 10:48:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215846
IP address blocks: 2a06:5d81::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:c3:29:c4:c7:c7:d7:d9:a9:19:46:1d:8e:f6:8a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Validity
Not Before: Jun 10 10:48:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aed1436105489001e5f7c2a375ec9549bda47fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:b0:bf:d8:71:b8:2c:c2:33:78:62:a5:62:
7b:7a:23:7c:eb:5f:ea:94:cf:94:34:41:09:55:04:
39:91:ed:28:2e:c5:08:71:ac:68:65:1b:51:60:ab:
10:64:81:d0:3d:00:10:f1:4f:17:97:cd:b0:1f:4d:
d8:ea:ac:63:43:b5:46:44:80:4d:76:df:a4:b4:9d:
f0:9e:67:c6:e5:a7:78:5c:e3:1f:79:04:0a:99:f4:
f1:eb:c4:90:cb:8a:4c:86:61:df:cb:44:88:b2:5d:
18:82:31:7e:8d:96:5e:05:15:20:62:40:2e:41:41:
04:f6:4f:f0:fc:e1:f1:6a:b2:11:3b:fc:1c:00:0d:
ec:bd:cd:d5:62:80:b7:bf:a3:7b:8f:e7:36:2d:97:
cd:c1:1c:24:6f:64:bc:b5:4b:6a:38:4b:10:42:19:
24:71:39:be:f4:f8:66:87:91:7c:89:d2:a3:10:00:
62:54:01:3d:1a:06:19:e2:09:a1:72:35:f0:11:cc:
8e:b0:16:7e:12:e2:54:d7:1c:02:fa:97:44:b6:e0:
40:5d:47:f4:3e:8b:93:4c:1e:a1:2a:1c:a3:59:5e:
98:04:b5:05:75:95:3d:af:24:42:c5:39:1a:47:11:
ab:0d:9d:51:1e:ce:5d:71:63:67:4c:5d:fc:85:2e:
22:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D1:43:61:05:48:90:01:E5:F7:C2:A3:75:EC:95:49:BD:A4:7F:C5
X509v3 Authority Key Identifier:
keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/rtFDYQVIkAHl98KjdeyVSb2kf8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5d81::/32
Signature Algorithm: sha256WithRSAEncryption
49:aa:d5:13:16:ac:cc:6b:05:87:68:9f:83:7a:e3:67:be:8d:
64:d8:1c:13:46:2a:b5:eb:e2:49:94:80:24:51:d5:98:5e:57:
b4:8c:e3:4e:2c:dd:9f:7b:5b:a4:71:0a:15:c7:0b:3b:19:1b:
f2:71:87:91:8f:b9:3e:42:ec:3f:38:29:63:af:4c:e1:33:7d:
94:83:7d:5b:02:1c:aa:44:1d:2e:11:8f:d8:5b:dc:e7:6b:83:
ba:7f:62:4f:ae:0d:05:61:14:86:39:25:12:72:7f:e4:f4:fd:
1c:cf:04:ab:14:1d:6c:65:69:4c:19:b0:62:2a:67:fb:6e:4e:
53:be:dd:ee:a0:f8:1b:b7:b8:f9:a2:f7:76:6a:d7:ba:ec:0c:
32:08:dc:7d:81:43:d8:52:6b:db:43:d7:d8:b6:67:3e:e3:1f:
2b:01:be:e7:b7:62:62:40:a0:3d:7c:4a:37:87:37:72:2a:01:
be:bf:6e:03:81:b0:e6:fe:63:38:a4:a8:0b:90:20:58:1e:2b:
3c:2a:67:f0:32:38:21:4a:11:41:96:fe:75:4a:22:b9:9a:4d:
94:15:bc:f9:ef:53:d6:44:84:8e:83:c5:43:4a:ed:2a:82:4a:
8d:3b:1f:a0:9c:84:86:64:8d:03:02:4d:83:eb:6b:dc:b2:b6:
6f:fc:7c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:59:34 2024 by rpki-client on console-ams.rpki-client.org