Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/dZtfjAXTRUBZbezgDfObMsSThHU.roa
File: dZtfjAXTRUBZbezgDfObMsSThHU.roa (raw, json)
Hash identifier: g64ENRFg1EwYVdFuK/RP94wm81uPccowMIiGMiHPsv4=
Subject key identifier: 75:9B:5F:8C:05:D3:45:40:59:6D:EC:E0:0D:F3:9B:32:C4:93:84:75
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 019348197C10E64D6BE4F4B4528EFF90F31F
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/dZtfjAXTRUBZbezgDfObMsSThHU.roa
Signing time: Wed 20 Nov 2024 05:44:09 +0000
ROA not before: Wed 20 Nov 2024 05:44:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48606
IP address blocks: 2a0c:5705::/32 maxlen: 48
2a0c:5705:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:48:19:7c:10:e6:4d:6b:e4:f4:b4:52:8e:ff:90:f3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Nov 20 05:44:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=759b5f8c05d34540596dece00df39b32c4938475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:3e:5a:8c:b6:2a:58:31:ae:d3:4d:49:ec:
96:ad:eb:8e:6f:f5:95:7c:b3:3c:8b:46:81:3b:31:
49:79:2d:4d:f8:15:f6:83:bf:a5:03:c0:78:4b:8e:
3c:af:92:ed:f2:2b:b3:d8:d7:2c:6f:80:1e:ad:5f:
31:dc:12:13:1c:a2:47:14:1e:35:24:0f:b4:fc:e6:
19:06:cc:61:69:ef:2e:04:ea:7a:e1:e0:67:43:26:
2d:a0:76:77:49:11:2c:96:56:68:8b:b5:4b:8a:6b:
56:c3:11:53:5a:bd:c7:04:81:fe:e6:bc:db:b5:8f:
53:bf:0a:79:8a:a9:95:a5:fd:7c:e0:9c:65:e4:f6:
b2:ed:3b:91:b5:e8:f9:1a:84:e4:5b:65:3f:55:1f:
63:a0:56:70:2b:d9:3f:c9:19:46:6a:a5:a4:72:21:
99:f0:0e:cf:0a:6b:ee:a0:6c:cf:6d:3b:d1:e5:39:
95:ee:08:85:55:82:45:c4:6a:cd:77:3d:74:fe:13:
61:72:7c:20:19:74:5e:28:21:d8:98:e5:47:de:91:
29:ac:5c:95:89:f2:40:85:99:f6:2f:7c:e0:b4:0b:
a8:88:68:38:78:ea:9f:53:82:88:3a:ac:67:d9:78:
15:d5:1f:2e:1b:12:07:57:17:77:ad:4b:50:28:03:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9B:5F:8C:05:D3:45:40:59:6D:EC:E0:0D:F3:9B:32:C4:93:84:75
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/dZtfjAXTRUBZbezgDfObMsSThHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:5705::/32
Signature Algorithm: sha256WithRSAEncryption
5d:1f:61:60:56:25:bf:81:c3:da:0a:54:fe:da:bc:28:8f:c4:
97:2b:4c:22:17:81:f2:68:09:ea:bc:95:cc:4f:10:45:f7:9e:
c1:07:6b:e1:5a:39:f4:e9:08:6c:80:cf:92:e5:2e:c9:54:4d:
ac:6b:01:41:be:2b:2d:9e:92:18:e3:98:8d:54:6e:be:81:02:
8d:bb:6d:e9:50:68:45:a6:82:5a:23:38:a4:c0:b5:b6:3d:70:
c9:58:64:15:26:22:e5:b6:98:8f:2b:2c:42:0b:c1:92:42:d6:
8f:f3:ab:27:63:9c:aa:a9:00:2a:4c:41:41:a2:5b:cb:dd:e2:
8d:fe:9b:ef:7d:cf:2f:7e:3c:10:b6:1f:aa:65:45:81:c3:87:
bd:d0:04:e3:c5:f4:4c:c0:8a:56:fd:c3:80:c9:30:f9:8c:0e:
65:0d:19:e2:44:b4:45:fd:6e:f3:cb:d1:64:0b:1d:0b:6c:8e:
92:b7:90:c3:9e:01:01:99:9a:7e:e1:f5:da:66:31:32:1a:33:
8a:af:52:01:1d:12:98:a2:14:8d:1d:81:5a:dd:41:ce:84:10:
72:e6:6e:03:a3:97:79:f6:74:71:08:ba:7e:b8:9d:ea:c7:42:
03:61:4d:12:aa:bd:e3:6c:7e:55:eb:bd:f8:d5:4e:92:06:4d:
18:2b:c8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:45:35 2024 by rpki-client on console-ams.rpki-client.org