Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/aW3HJnsvUPVlXelg86eje0KAIAg.roa
File: aW3HJnsvUPVlXelg86eje0KAIAg.roa (raw, json)
Hash identifier: Ando3nlBEhY+CpXhKd6vcHjuKybvfiR0e6d1DPz5F3Q=
Subject key identifier: 69:6D:C7:26:7B:2F:50:F5:65:5D:E9:60:F3:A7:A3:7B:42:80:20:08
Certificate issuer: /CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717
Certificate serial: 018F06A4B5B37668EFC61A74E8DD30ACED29
Authority key identifier: 41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/aW3HJnsvUPVlXelg86eje0KAIAg.roa
Signing time: Mon 22 Apr 2024 16:30:08 +0000
ROA not before: Mon 22 Apr 2024 16:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216304
IP address blocks: 2a06:9080::/29 maxlen: 48
2a06:9087::/36 maxlen: 48
2a06:9087:1000::/36 maxlen: 48
2a06:9087:2000::/36 maxlen: 48
2a06:9087:3000::/36 maxlen: 48
2a06:9087:4000::/36 maxlen: 48
2a06:9087:5000::/36 maxlen: 48
2a06:9087:6000::/36 maxlen: 48
2a06:9087:7000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:06:a4:b5:b3:76:68:ef:c6:1a:74:e8:dd:30:ac:ed:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717
Validity
Not Before: Apr 22 16:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=696dc7267b2f50f5655de960f3a7a37b42802008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8c:44:f1:10:ad:66:98:44:66:45:9a:a4:bf:
bb:31:ab:f9:66:b9:66:de:b4:7c:41:e0:d8:f1:f9:
52:48:f2:c1:b4:58:f4:76:62:f1:11:fb:ea:74:f5:
f4:98:cd:c4:a4:d4:d4:c5:ca:82:f2:7f:04:09:ab:
1a:5d:ba:0c:30:32:73:3a:8b:91:60:31:2d:c5:75:
34:7d:93:03:f0:67:ba:2e:28:2b:80:c5:cc:04:31:
fc:77:87:c3:a5:03:3d:c2:96:a0:07:8e:49:e0:d4:
f0:51:d8:60:22:44:5d:46:85:75:74:7b:22:e6:c2:
84:d6:41:5d:d7:14:13:50:2a:a6:18:37:52:21:b4:
4a:b9:18:b4:ff:ef:df:e1:04:db:90:9e:5a:26:98:
84:56:0f:35:19:35:6f:54:88:b7:f7:00:25:73:e4:
7c:49:42:49:44:d6:66:9b:75:20:2f:c8:16:6f:49:
d6:b0:4d:6e:87:3e:a1:14:f2:d0:37:f6:ed:9e:c2:
f0:e3:89:a6:c4:27:09:18:34:99:23:f9:1a:97:b4:
94:6f:0e:f8:5c:7a:c6:d2:22:5c:77:71:1a:7f:39:
88:04:7d:c4:5f:ec:37:8a:4c:9b:34:e5:61:a3:9d:
e9:30:9f:58:a7:71:0b:7e:24:f6:9d:3b:bd:f8:b6:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6D:C7:26:7B:2F:50:F5:65:5D:E9:60:F3:A7:A3:7B:42:80:20:08
X509v3 Authority Key Identifier:
keyid:41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/aW3HJnsvUPVlXelg86eje0KAIAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9080::/29
Signature Algorithm: sha256WithRSAEncryption
2f:8c:7d:3c:e8:bb:d4:c9:c4:de:c1:90:44:54:30:42:f1:16:
79:6e:57:02:fd:2d:9e:b3:67:c9:ba:df:75:1d:3a:81:39:b5:
62:df:21:4d:b1:a5:97:df:6a:ae:3f:87:ca:e2:3b:e2:44:b8:
03:e4:84:26:28:3a:e2:e8:72:e5:02:8d:3c:b7:9d:b5:74:a9:
bd:4f:d5:fa:8e:ae:bc:51:48:bf:3a:5f:04:31:a8:92:93:c4:
2b:05:5d:c4:0c:ee:00:48:6f:e7:e0:5a:61:a7:6d:45:27:c9:
95:26:a9:92:b5:46:86:1a:2f:90:54:ed:da:53:ac:ec:bc:6d:
5b:58:7e:3b:b4:42:04:e7:d2:fa:f8:ce:91:50:43:c3:6d:3e:
1c:3f:24:73:d8:6b:f1:90:d7:d1:dc:86:60:c9:34:ac:56:18:
89:63:4f:e7:f2:4b:89:13:1e:20:08:5f:d1:36:2c:98:89:a4:
9d:e4:c0:5c:5a:65:06:bf:44:8f:4a:00:3b:d1:53:98:5a:f0:
48:eb:a1:4e:f7:0b:eb:ad:52:bb:d3:47:bc:ec:37:28:a3:dc:
a3:57:56:86:95:97:50:5f:29:2a:1d:77:3a:f2:70:ce:04:37:
c0:e4:91:63:a6:c0:b2:52:a0:a1:7e:9f:cc:d1:16:f4:04:da:
10:de:8e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:40:42 2024 by rpki-client on console-fra.rpki-client.org