Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/FR49L_tM6WAVKT5hGH3KS3K2Oh0.roa
File: FR49L_tM6WAVKT5hGH3KS3K2Oh0.roa (raw, json)
Hash identifier: 1LGqgjKFOMp1FwtVtC5CiL9qlyqtaWMN4BBWXKAonoA=
Subject key identifier: 15:1E:3D:2F:FB:4C:E9:60:15:29:3E:61:18:7D:CA:4B:72:B6:3A:1D
Certificate issuer: /CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Certificate serial: 01917AB4000447AF9AEDB76A052561593E78
Authority key identifier: 2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/FR49L_tM6WAVKT5hGH3KS3K2Oh0.roa
Signing time: Thu 22 Aug 2024 15:28:22 +0000
ROA not before: Thu 22 Aug 2024 15:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 2a0b:5f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7a:b4:00:04:47:af:9a:ed:b7:6a:05:25:61:59:3e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Validity
Not Before: Aug 22 15:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=151e3d2ffb4ce96015293e61187dca4b72b63a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:40:6e:32:9b:c0:af:b7:e6:7f:f2:ae:da:b6:
61:38:06:ff:a5:cd:17:0b:12:9b:8c:9d:cf:4e:e2:
19:27:a7:88:71:dd:d4:eb:7b:32:a9:76:dc:3e:1f:
ac:03:4d:70:96:4e:0d:44:d4:2a:6d:b8:97:81:72:
fc:fd:bd:92:49:3b:89:0e:9e:e5:7f:ae:a1:27:c3:
57:a7:12:35:47:c3:e0:08:61:4d:ee:0a:b3:6a:90:
25:e1:49:fd:c1:91:60:88:c6:05:eb:1c:30:96:23:
4a:9a:8b:61:53:01:73:49:5e:c1:9a:ed:67:2d:1a:
e8:d7:35:a1:ae:d2:43:82:0a:74:7c:5c:b1:4d:89:
a7:f7:84:06:a7:0e:97:ee:a4:15:dd:df:eb:72:f8:
72:f0:63:42:d4:88:7e:c7:b2:66:aa:ac:6a:63:0f:
cc:cb:5b:a4:21:11:13:25:70:19:06:d6:c2:11:94:
5c:e3:40:54:43:0c:c2:f0:ca:e4:1c:8e:37:0d:3b:
79:fd:f5:ca:04:87:7a:61:d7:e6:2a:64:14:6f:18:
80:3f:16:cb:9b:ea:32:1d:c4:e3:97:31:39:21:fb:
bd:c6:9c:3d:bf:d8:09:d0:da:59:5c:70:74:79:11:
94:65:23:26:b7:bc:09:98:8c:9b:f0:88:81:26:a3:
a8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1E:3D:2F:FB:4C:E9:60:15:29:3E:61:18:7D:CA:4B:72:B6:3A:1D
X509v3 Authority Key Identifier:
keyid:2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/FR49L_tM6WAVKT5hGH3KS3K2Oh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:5f00::/29
Signature Algorithm: sha256WithRSAEncryption
01:e9:1c:b3:31:c8:45:59:e7:a2:a4:3f:ad:a8:6c:df:4c:80:
ae:e9:0c:91:a5:69:72:26:57:da:a5:20:22:cf:5c:aa:c9:73:
be:1d:42:88:1e:7b:82:14:19:f1:27:9f:43:27:16:6e:1a:3c:
56:4c:21:18:df:df:1b:8f:2e:12:a8:e6:5e:4d:61:a3:61:1d:
82:a7:29:8e:b1:2d:ef:1d:25:1e:ac:ea:0b:6c:9f:98:62:bd:
dd:d1:10:b7:87:09:3c:c4:11:64:75:3a:ca:d3:e6:f0:35:55:
92:a1:45:93:08:f6:fb:8a:fe:0c:e2:16:b8:74:a6:fb:80:b5:
c5:07:39:6b:a0:10:94:0a:69:29:19:8a:bf:8e:c0:74:f4:f3:
c1:4a:cc:cd:98:8d:8c:6b:c6:c6:56:5b:1b:64:d1:de:33:e2:
e4:11:2a:bf:fd:44:c2:ec:db:20:58:b1:62:21:6a:0a:cb:dc:
b6:7e:a8:c8:7b:ac:40:12:0e:8e:b3:13:62:1d:9b:c0:3b:98:
e1:07:b2:f7:10:14:25:dc:c8:8e:6c:89:9f:fd:52:02:84:e4:
94:05:75:57:3a:d3:f5:d6:93:eb:11:b8:f9:56:13:3b:b7:27:
ca:25:0d:c8:8a:0a:4b:81:e6:02:2b:0a:c6:ab:ae:9b:5a:e3:
e2:38:c9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:19:40 2024 by rpki-client on console-ams.rpki-client.org