Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/ajWayDIMdZp3qMNs9TNTxPIxFZM.roa
File: ajWayDIMdZp3qMNs9TNTxPIxFZM.roa (raw, json)
Hash identifier: hfJ9wYadBznnrEW9ldNwsFJgWMukbwbfJNuyikUPd5o=
Subject key identifier: 6A:35:9A:C8:32:0C:75:9A:77:A8:C3:6C:F5:33:53:C4:F2:31:15:93
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 018CC26D2D5C7B105830B09212BFB958696A
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/ajWayDIMdZp3qMNs9TNTxPIxFZM.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35744
IP address blocks: 2a03:3060:5353::/48 maxlen: 48
2a02:40c0:5353::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2d:5c:7b:10:58:30:b0:92:12:bf:b9:58:69:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a359ac8320c759a77a8c36cf53353c4f2311593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:40:c1:56:39:38:31:a5:59:5e:31:17:ca:
0d:f7:76:3c:c7:54:d7:84:24:fb:fd:d9:0a:1e:3d:
38:a3:c9:31:69:44:fc:cc:33:ca:b5:22:3f:bc:61:
6c:af:8f:c7:67:88:85:c6:f8:fc:2a:3a:07:ef:1e:
bf:f8:e3:48:73:7a:7f:05:9d:76:58:be:90:f9:96:
80:4a:1e:49:08:6b:fe:e6:85:93:db:f6:37:d6:6b:
1e:63:68:73:19:c1:2f:a1:1b:f8:11:04:c7:95:5f:
31:e1:34:bc:f0:08:80:56:06:6a:9b:2f:af:cf:73:
f8:66:fc:a0:13:0d:84:1a:fa:8f:53:e1:7a:3a:d4:
9c:85:3e:d5:67:ce:c5:45:08:ea:db:d2:71:0a:91:
e8:50:37:15:2d:ce:d0:70:2b:9e:8d:df:60:e2:1e:
34:97:08:85:bb:e8:80:e8:91:be:dc:79:c3:11:88:
88:e2:d0:da:40:a4:9f:ba:6b:93:88:f6:d7:e5:f7:
80:3c:5b:8a:cf:13:ea:68:31:9e:f4:4c:c8:f0:02:
0d:7d:42:11:35:07:df:9d:c7:ab:6b:cc:15:e2:40:
15:77:9c:cb:9b:f6:95:23:23:21:e9:fc:0b:0a:38:
97:7e:c8:60:1e:ae:8d:23:d7:70:f1:27:39:4e:a5:
03:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:35:9A:C8:32:0C:75:9A:77:A8:C3:6C:F5:33:53:C4:F2:31:15:93
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/ajWayDIMdZp3qMNs9TNTxPIxFZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:40c0:5353::/48
2a03:3060:5353::/48
Signature Algorithm: sha256WithRSAEncryption
51:93:a5:bc:2b:d4:0e:69:44:f2:c8:0e:54:37:bf:12:8c:36:
93:b6:f9:f9:bb:b9:75:9c:e3:e5:d4:84:56:c3:4e:13:57:53:
9b:7e:43:b1:97:e6:94:5b:ea:85:ae:fa:8e:59:28:f8:00:38:
0d:1e:85:95:f7:f8:43:1f:52:85:72:90:43:ec:3e:89:c8:17:
77:fb:3c:83:42:7e:be:f7:c0:18:4f:77:5a:7b:93:ab:35:f3:
bd:26:20:ce:be:f2:d7:02:41:2b:b3:44:eb:af:16:a2:bb:e6:
ac:a6:db:34:d8:b2:77:45:c7:b4:46:4d:96:18:d5:28:5b:8f:
b6:b1:65:7a:eb:65:b3:44:41:eb:49:96:e0:f3:6f:38:f4:4f:
8a:e3:89:5f:07:e7:f1:f2:82:ff:5f:63:99:db:d5:4d:cb:5c:
ae:cd:2b:9b:3f:0a:4c:db:3e:38:62:a7:ea:4a:0c:4a:01:8b:
de:20:ba:73:97:1b:6d:33:42:d1:a2:ff:bf:6d:10:6c:0a:91:
48:b5:a6:c6:d5:ee:e6:8d:f3:43:d7:eb:cc:51:ae:ab:59:8b:
4f:99:86:c2:84:e0:ea:be:a1:2a:2d:bf:bb:52:30:28:fe:4f:
23:1b:fc:59:ee:0e:d8:2c:86:74:27:19:db:75:05:c3:f2:4e:
4a:11:10:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:36:04 2024 by rpki-client on console-ams.rpki-client.org