Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/IATVpNDVf38DUQn3KVdt-p8ceNc.roa
File: IATVpNDVf38DUQn3KVdt-p8ceNc.roa (raw, json)
Hash identifier: e89X6aq1I1j/mFH5H8JHWK8azFLnFuleG+o8jWEwWfU=
Subject key identifier: 20:04:D5:A4:D0:D5:7F:7F:03:51:09:F7:29:57:6D:FA:9F:1C:78:D7
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01925E12E347CA1139349244FAE63C319519
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/IATVpNDVf38DUQn3KVdt-p8ceNc.roa
Signing time: Sat 05 Oct 2024 19:05:49 +0000
ROA not before: Sat 05 Oct 2024 19:05:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215434
IP address blocks: 2a13:afc0::/29 maxlen: 29
2a14:61c0::/29 maxlen: 29
2a14:69c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5e:12:e3:47:ca:11:39:34:92:44:fa:e6:3c:31:95:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 5 19:05:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2004d5a4d0d57f7f035109f729576dfa9f1c78d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:ec:8a:1e:65:fa:f7:a9:53:1a:55:41:7c:
f6:fd:18:b0:3f:fc:0f:aa:b0:14:ed:12:2f:b6:be:
b0:dc:6b:4c:5d:f0:17:ea:d3:7a:05:95:7a:49:7c:
57:12:a7:2b:9e:dd:90:b0:36:00:b2:4f:c0:7e:12:
35:98:32:f7:a8:d7:49:23:27:42:39:a6:70:f5:d5:
95:d0:ef:62:43:51:da:41:ef:96:9a:9e:c3:fa:93:
20:99:97:35:cd:58:58:ce:65:dd:3b:60:d5:08:63:
e5:9f:f6:91:1a:9e:fc:99:da:84:d4:f9:59:c8:4f:
32:79:a5:a8:2c:69:c0:09:c8:cc:04:90:34:f5:8f:
0c:1d:33:d0:bb:53:7d:60:71:f9:8e:7c:6c:5c:45:
55:57:6c:bb:2e:16:e4:31:a0:0b:c7:ec:52:cf:af:
a9:a5:29:ba:7c:b7:c4:78:96:ca:cf:c2:b7:44:e7:
60:a7:bb:dc:53:3a:23:1f:1e:b4:d2:1d:9e:68:a3:
cb:2d:8b:27:6f:f5:da:6b:fd:36:6d:09:f8:bc:a8:
61:6d:51:e0:ed:06:ca:9e:ab:43:fd:08:d6:ab:ff:
65:50:fe:5e:9a:f0:a8:10:cf:ea:65:12:cf:20:61:
ed:29:2d:e8:dd:d6:11:70:c3:17:aa:df:74:c4:d6:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:04:D5:A4:D0:D5:7F:7F:03:51:09:F7:29:57:6D:FA:9F:1C:78:D7
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/IATVpNDVf38DUQn3KVdt-p8ceNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:afc0::/29
2a14:61c0::/29
2a14:69c0::/29
Signature Algorithm: sha256WithRSAEncryption
1e:30:91:ed:0c:23:d3:17:12:1f:51:21:32:a4:5b:05:35:d5:
19:2c:a6:51:e8:c9:a5:c1:a7:d7:65:b6:39:27:11:25:86:19:
4e:af:44:b1:69:ca:84:80:4d:52:1d:15:82:63:7f:13:9a:e5:
27:75:08:85:77:b5:53:38:8a:b6:6c:a5:ca:b9:09:6b:82:16:
12:7c:30:8f:4b:6d:ff:d2:08:71:2d:2a:80:88:76:13:8a:d7:
9a:75:e2:ad:ee:b4:52:05:ae:e6:9e:f2:c0:be:b2:74:e1:30:
da:40:c0:28:8d:32:21:c8:8c:06:7c:90:98:1e:38:3b:15:0f:
f3:09:48:1f:2f:67:cb:49:40:01:50:81:80:00:c3:ec:0f:9f:
ea:a5:9e:8e:ae:de:dd:8c:fb:58:62:59:3a:bb:2c:c3:5a:ac:
24:a5:63:82:cb:f5:91:67:be:ce:3b:71:3b:5a:9c:89:fb:68:
87:68:28:37:a0:6b:f8:17:ea:85:cc:a2:57:9a:b0:36:37:e5:
c5:37:4d:2f:0d:3a:56:4b:2e:e6:1f:03:c9:2d:40:de:5d:10:
01:24:ca:e1:45:0e:6c:a1:79:25:27:38:46:27:b4:10:fb:b6:
60:98:72:c4:5d:38:d8:5e:fc:e4:21:55:99:c2:01:bf:7a:54:
a4:16:7e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:24:58 2024 by rpki-client on console-ams.rpki-client.org