Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/97e463-3519-40df-bebc-4ebc0cffaa1d/1/Duldlyx3o9SRcg2nIAxBT9jJnf8.roa
File: Duldlyx3o9SRcg2nIAxBT9jJnf8.roa (raw, json)
Hash identifier: RWzqvbIW98NsTndc3sPjID46BdVUOqe/fbbTP3wXxAE=
Subject key identifier: 0E:E9:5D:97:2C:77:A3:D4:91:72:0D:A7:20:0C:41:4F:D8:C9:9D:FF
Certificate issuer: /CN=0f107eacdd0dd2e6169d0fd31303f6c8b0304b66
Certificate serial: 018CCB5339B3D4D09461C60C08698AAD9AFE
Authority key identifier: 0F:10:7E:AC:DD:0D:D2:E6:16:9D:0F:D3:13:03:F6:C8:B0:30:4B:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxB-rN0N0uYWnQ_TEwP2yLAwS2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/97e463-3519-40df-bebc-4ebc0cffaa1d/1/Duldlyx3o9SRcg2nIAxBT9jJnf8.roa
Signing time: Tue 02 Jan 2024 17:57:58 +0000
ROA not before: Tue 02 Jan 2024 17:57:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216398
IP address blocks: 2a13:ef45::/32 maxlen: 32
2a13:ef40::/29 maxlen: 29
2a13:ef44::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/97e463-3519-40df-bebc-4ebc0cffaa1d/1/DxB-rN0N0uYWnQ_TEwP2yLAwS2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/97e463-3519-40df-bebc-4ebc0cffaa1d/1/DxB-rN0N0uYWnQ_TEwP2yLAwS2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxB-rN0N0uYWnQ_TEwP2yLAwS2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cb:53:39:b3:d4:d0:94:61:c6:0c:08:69:8a:ad:9a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f107eacdd0dd2e6169d0fd31303f6c8b0304b66
Validity
Not Before: Jan 2 17:57:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ee95d972c77a3d491720da7200c414fd8c99dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:df:cb:56:f9:e9:87:1c:04:ce:03:97:c1:
ee:61:28:cc:27:7b:01:fb:0e:fc:e1:7a:35:b6:a2:
84:80:9c:25:dd:64:8f:eb:ab:9e:c0:e9:0d:b6:14:
4a:3a:f4:2d:99:60:66:24:95:e1:eb:4e:83:de:75:
aa:7a:e1:48:11:75:0f:e4:e2:8f:d5:73:62:25:cd:
fc:51:fb:3c:75:a6:f1:cc:d5:c8:c4:bf:2e:3f:cc:
d5:a8:7a:c2:c8:5f:e6:df:7f:f7:9f:36:5d:b2:30:
cb:a1:d1:d8:a3:e2:4c:de:be:09:aa:a6:f7:24:98:
c0:04:54:7e:fb:41:74:e3:26:4d:8e:fa:f1:3e:3d:
c3:ee:ff:ac:d3:fc:d1:9d:6a:09:85:b9:69:b6:de:
cb:2d:aa:d1:0c:1a:09:6c:42:14:a4:50:97:c0:34:
89:04:2b:01:26:42:68:41:44:1d:0a:da:65:0f:5b:
38:34:78:dc:85:68:6b:4a:9a:b4:ec:11:0b:71:c4:
8b:61:05:38:fb:ea:25:e2:5a:87:20:07:e8:3a:f0:
38:66:48:0d:d4:ae:04:46:9d:7c:fc:95:0d:51:be:
ff:51:a7:fa:3b:01:55:b0:cd:8d:94:c8:49:6d:55:
dd:b0:14:57:c4:da:53:8c:ce:5e:0f:e9:1b:fa:d5:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E9:5D:97:2C:77:A3:D4:91:72:0D:A7:20:0C:41:4F:D8:C9:9D:FF
X509v3 Authority Key Identifier:
keyid:0F:10:7E:AC:DD:0D:D2:E6:16:9D:0F:D3:13:03:F6:C8:B0:30:4B:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxB-rN0N0uYWnQ_TEwP2yLAwS2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/97e463-3519-40df-bebc-4ebc0cffaa1d/1/Duldlyx3o9SRcg2nIAxBT9jJnf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/97e463-3519-40df-bebc-4ebc0cffaa1d/1/DxB-rN0N0uYWnQ_TEwP2yLAwS2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
47:1f:1c:be:e8:e8:06:97:82:e2:40:26:fd:9a:4d:5b:80:db:
0c:c6:ea:13:77:8c:19:4e:1c:9c:43:e1:c7:fe:11:2a:89:eb:
c2:94:0a:da:31:84:1f:f6:05:a9:b5:e0:b1:36:8a:06:28:29:
44:52:0d:0b:bb:d2:17:20:57:b7:22:45:01:fe:4f:18:99:5e:
e6:68:16:73:3b:49:4a:b0:a4:a8:e2:4d:04:be:2a:93:14:a6:
3a:0b:c4:e2:89:a4:0a:4e:f9:cb:4d:b1:79:26:6c:76:e6:1a:
81:6e:e8:a1:7b:29:ec:b4:88:4a:27:d3:3b:0b:be:a0:2f:05:
3f:45:17:d7:15:38:5c:ef:21:81:93:f8:a7:17:ef:5b:59:69:
e1:db:73:36:15:36:1c:f7:8c:b7:e9:f4:bc:b7:04:9b:6e:da:
92:b5:24:39:5d:38:b8:a6:ca:b9:58:a1:f4:ee:16:b5:7c:f9:
0b:38:cd:d2:24:e3:15:b6:4a:50:4a:53:58:b4:32:bf:05:c3:
d0:f8:84:ec:8e:e8:42:65:d0:42:84:aa:87:44:dd:75:c1:a0:
35:c1:95:f5:b0:84:48:97:89:c5:a4:99:e5:74:d8:5b:5c:cf:
56:87:5c:97:d7:32:98:da:df:86:33:96:7f:c6:f8:50:4a:fa:
e1:02:a5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 13:39:12 2024 by rpki-client on console-fra.rpki-client.org