Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/sexOBqtt-VrOziqQUSf2QXVB05U.roa
File: sexOBqtt-VrOziqQUSf2QXVB05U.roa (raw, json)
Hash identifier: 9rLLEoAok2nMfEcC8mlja10nS6YrX3iUdSsjZ7qGPAc=
Subject key identifier: B1:EC:4E:06:AB:6D:F9:5A:CE:CE:2A:90:51:27:F6:41:75:41:D3:95
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 01932266EB4A02041CA34700EB0534506124
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/sexOBqtt-VrOziqQUSf2QXVB05U.roa
Signing time: Tue 12 Nov 2024 22:03:10 +0000
ROA not before: Tue 12 Nov 2024 22:03:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397515
IP address blocks: 2a01:488:bb06::/48 maxlen: 48
2a01:488:bb07::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 07:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:22:66:eb:4a:02:04:1c:a3:47:00:eb:05:34:50:61:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Nov 12 22:03:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1ec4e06ab6df95acece2a905127f6417541d395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:7a:34:d3:66:4c:23:48:74:f8:b4:8f:37:
02:47:09:1d:23:95:38:63:1d:f5:80:20:a0:cd:e4:
ea:c7:c6:99:e2:11:7e:cf:0d:f9:ed:e0:52:06:b7:
f2:f5:a9:e9:b8:37:19:e9:e9:69:a2:e9:47:9b:fd:
bf:c4:b3:99:94:cf:ad:c6:23:bc:b6:c6:78:36:4c:
30:25:38:35:a2:c9:0e:5b:43:33:d2:98:bd:f2:6b:
1f:99:b2:70:82:d0:da:b5:fe:b6:d7:0b:3f:30:c6:
1e:9e:b9:75:d9:27:5e:dd:a5:85:f2:f6:6f:81:a1:
30:8d:6c:f4:da:f6:48:a1:5c:8a:d6:93:3b:d1:7e:
ba:bb:eb:d0:08:2f:0e:41:11:2a:f5:50:fc:50:62:
09:12:23:74:28:66:a2:af:d0:e1:89:32:a1:ac:14:
84:d1:39:ee:fb:e7:b0:6e:66:d1:40:db:a4:15:78:
01:12:fb:6d:b3:35:ad:74:01:c8:0b:fb:09:be:27:
f8:41:32:7a:2a:f6:cb:28:2f:a4:5e:1b:07:5a:66:
2e:c1:c5:01:c6:81:56:0d:db:96:dd:3f:ba:cf:09:
99:1f:a0:7e:0f:c8:37:0f:65:0f:e7:f6:d0:66:d4:
e7:d0:1a:c4:d3:6f:4e:53:dd:d1:25:40:4b:53:a3:
d5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EC:4E:06:AB:6D:F9:5A:CE:CE:2A:90:51:27:F6:41:75:41:D3:95
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/sexOBqtt-VrOziqQUSf2QXVB05U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb06::/47
Signature Algorithm: sha256WithRSAEncryption
84:fd:53:46:8d:2f:b2:f3:99:07:ae:24:09:7c:85:c4:e3:50:
4a:dc:a7:f2:87:2b:e0:6d:29:16:62:00:63:78:a5:3d:bd:ca:
c3:7f:82:be:e5:78:c2:67:53:01:7d:8d:02:8e:6b:8e:d9:05:
00:40:e8:5c:2b:98:92:88:a6:a2:5d:cf:8e:dc:e5:bf:10:aa:
2e:35:b5:c4:cf:d3:38:80:35:19:4c:52:09:59:77:21:25:7b:
f3:d5:08:68:cf:94:52:d2:95:0d:77:b4:15:c6:c4:16:15:ba:
24:cf:58:38:3f:68:89:18:2b:51:b3:67:83:50:b3:63:c0:7e:
06:93:e8:7f:bd:32:08:f1:80:aa:12:b7:d4:03:29:dc:a0:7f:
45:bf:b9:da:78:eb:f9:6c:70:35:79:02:a6:1b:f4:91:e5:0f:
b8:84:ea:9e:50:28:59:36:b7:9d:73:73:9d:80:cc:e2:04:d3:
6a:99:f6:6b:67:4f:8d:ab:ee:2f:1e:92:41:cd:bf:b6:cc:fa:
47:75:91:ec:cd:bd:59:39:98:b3:a8:7a:c4:07:13:f7:a2:44:
94:58:e4:ac:83:22:42:3e:b0:ef:31:02:c3:28:97:28:55:5f:
92:67:d0:17:c5:a4:b0:fc:91:86:47:91:3f:89:33:24:c2:35:
d5:0e:42:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:39:16 2024 by rpki-client on console-ams.rpki-client.org