Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/9WiqSJGC7fv6aR9IbTKiBCRdpc8.roa
File: 9WiqSJGC7fv6aR9IbTKiBCRdpc8.roa (raw, json)
Hash identifier: PKgUqzwBaR+bF+KvDIK2A/VNj/jptG9ZBoDt0uEvuuI=
Subject key identifier: F5:68:AA:48:91:82:ED:FB:FA:69:1F:48:6D:32:A2:04:24:5D:A5:CF
Certificate issuer: /CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Certificate serial: 018FD4F97083780F3E3CC2CF96234C07A789
Authority key identifier: 48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/9WiqSJGC7fv6aR9IbTKiBCRdpc8.roa
Signing time: Sat 01 Jun 2024 18:04:28 +0000
ROA not before: Sat 01 Jun 2024 18:04:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216344
IP address blocks: 2a11:8a80:9000::/36 maxlen: 36
2a11:8a85:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d4:f9:70:83:78:0f:3e:3c:c2:cf:96:23:4c:07:a7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Validity
Not Before: Jun 1 18:04:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f568aa489182edfbfa691f486d32a204245da5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:33:81:a3:4c:6d:e3:b0:23:6d:53:61:ee:
de:b6:34:38:95:d4:0f:b9:5a:40:30:83:58:c2:2a:
dc:10:2b:6a:74:ab:ee:80:d6:e2:e4:70:bd:8d:fa:
e1:ae:e8:1b:88:6a:c8:c7:ad:72:cf:10:f3:b0:60:
76:85:40:d8:2b:c2:11:66:85:45:df:0b:f1:1a:ff:
0d:1f:4c:80:7f:46:31:96:ec:cb:5f:fb:ef:e8:9a:
87:bb:38:9c:08:f5:71:ab:65:a4:b2:26:4e:24:e4:
b9:8a:03:cb:f3:a9:53:c0:37:0f:5e:9f:81:19:b5:
ec:0d:45:a9:ac:68:42:e0:94:75:8d:8e:98:a2:a7:
43:03:6b:d3:61:21:64:f4:6c:c2:65:4a:6b:9e:cb:
6d:56:f0:b6:1a:3f:6a:54:79:9b:21:c5:53:67:26:
bf:8b:99:15:c8:40:20:6d:48:53:23:5d:7d:63:cc:
90:b7:86:84:55:47:7c:1e:75:c4:cb:24:bd:a2:f9:
10:c6:2f:28:65:43:84:f0:8f:c4:96:f1:50:dd:d5:
01:02:53:73:10:59:10:d6:d0:28:2c:c4:4b:14:0c:
05:06:ef:7b:ff:20:dc:31:81:a3:60:23:ff:32:89:
e8:ab:a0:b5:4f:15:ef:14:bb:1c:26:bf:a2:61:a0:
f5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:68:AA:48:91:82:ED:FB:FA:69:1F:48:6D:32:A2:04:24:5D:A5:CF
X509v3 Authority Key Identifier:
keyid:48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/9WiqSJGC7fv6aR9IbTKiBCRdpc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8a80:9000::/36
2a11:8a85:400::/38
Signature Algorithm: sha256WithRSAEncryption
68:41:3a:b5:fc:3a:14:08:3e:b2:fd:42:1b:38:9e:b2:93:5f:
48:60:08:c2:1e:04:c8:1e:15:1f:43:5b:35:48:3e:3a:5c:14:
2a:2b:83:71:b3:e9:3e:1a:0c:f9:fa:2c:44:e6:3d:b3:1c:ca:
ee:a5:30:88:b5:b9:bf:c0:0b:53:73:48:8b:ea:69:e4:fb:bd:
64:11:35:1e:d8:30:ac:d2:a2:97:45:95:8c:7c:61:81:03:f8:
4d:0e:cd:9e:62:09:90:6d:2e:9c:93:07:db:a8:88:e0:b7:ba:
d4:e4:cd:ac:e6:da:1a:68:48:c0:28:d1:37:a2:84:ff:29:ab:
58:16:ec:2f:f1:b0:72:8f:d1:3c:89:10:2e:be:2b:c0:ac:d9:
6b:ba:b7:f6:19:f3:3d:d3:6d:23:e3:73:34:41:d4:16:f5:54:
a1:b2:40:9d:1f:07:ee:98:3f:78:e6:98:b5:8f:71:ba:35:80:
65:3f:e0:a1:2e:15:a0:c8:ed:80:cb:56:f7:56:92:73:88:c0:
8e:c5:e5:46:aa:e4:a0:3a:d0:25:fd:64:99:da:05:69:6f:fa:
65:d2:80:ad:17:1e:c6:3b:5b:17:92:83:08:90:02:d3:cb:65:
dc:7f:45:b4:d4:e5:26:5f:88:37:c4:9b:e7:ca:bb:09:80:29:
a6:a1:b2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:44:47 2024 by rpki-client on console-fra.rpki-client.org