Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/TEgkQGovQF9-S2nVtA1OIG55mBA.roa
File: TEgkQGovQF9-S2nVtA1OIG55mBA.roa (raw, json)
Hash identifier: yXWA3HCvzzhqot8OVlMdIMDxrdKWeMYbOvOkO9FCQuQ=
Subject key identifier: 4C:48:24:40:6A:2F:40:5F:7E:4B:69:D5:B4:0D:4E:20:6E:79:98:10
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 018CC94DD16530F31434060D64A364B53A51
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/TEgkQGovQF9-S2nVtA1OIG55mBA.roa
Signing time: Tue 02 Jan 2024 08:32:49 +0000
ROA not before: Tue 02 Jan 2024 08:32:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215926
IP address blocks: 2a13:a5c7:1700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:d1:65:30:f3:14:34:06:0d:64:a3:64:b5:3a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 08:32:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c4824406a2f405f7e4b69d5b40d4e206e799810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:52:1f:4d:4a:4c:7c:c2:a2:a0:cf:12:ff:
d1:0c:06:b5:9a:78:86:ae:89:41:51:29:c3:de:21:
8c:dd:c8:07:b3:f1:58:be:50:38:cb:59:ff:dc:94:
19:04:56:c7:52:39:d8:ee:2d:96:a3:38:bd:9c:4f:
5b:74:d3:97:d2:f2:c2:a6:cf:bb:c1:37:e5:be:67:
90:15:bc:fd:9a:db:6a:24:3b:73:32:45:e9:cc:25:
e7:90:26:b4:18:e3:f5:f0:a6:57:3f:36:2f:d6:62:
96:97:a3:76:89:45:a2:9f:a6:b9:1d:ae:6e:fd:80:
96:64:ff:48:01:fb:62:65:8b:44:9a:e7:07:04:56:
9a:80:a7:ed:e7:10:ca:ee:65:91:5b:12:d5:ed:f3:
6d:8e:26:90:23:3d:8a:ee:ac:a0:c4:1c:72:44:00:
92:ff:73:fb:24:57:60:c3:55:3a:20:9b:8a:ab:e8:
74:9b:f4:52:d7:66:a7:b8:14:fb:e4:f8:84:36:ad:
b0:1d:82:00:3f:42:b1:dd:f3:07:9f:e8:a7:5d:bc:
ed:d3:9b:39:35:33:a0:d5:63:1b:5e:71:90:cd:c8:
4c:94:08:ae:98:82:07:a7:0e:b3:9f:9f:5c:73:c6:
2c:e3:b0:2a:2d:fa:e7:c2:47:5b:85:a8:29:08:c3:
7b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:48:24:40:6A:2F:40:5F:7E:4B:69:D5:B4:0D:4E:20:6E:79:98:10
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/TEgkQGovQF9-S2nVtA1OIG55mBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:1700::/40
Signature Algorithm: sha256WithRSAEncryption
21:89:48:95:07:81:e3:65:a1:82:82:aa:5b:8d:b3:ea:c9:3b:
71:da:01:ed:e9:59:85:63:51:d5:bd:0c:3a:58:72:48:15:d8:
af:d6:73:c7:18:41:cb:db:f2:76:73:38:81:81:2c:9f:d4:e0:
ee:7f:ef:d6:43:ad:8b:a0:39:50:f7:ca:98:9c:72:1f:9f:de:
7f:60:be:86:df:de:6a:2e:51:e6:c8:6e:c3:5e:c0:03:c6:cd:
6e:a9:e5:29:d7:82:01:7b:9d:f8:a0:48:7e:1b:22:60:c2:38:
bd:4b:8c:d6:0b:a3:46:01:b9:4e:a6:86:2c:ce:d7:6f:d2:25:
f3:47:54:0a:b2:3e:c2:e3:99:28:55:45:89:75:eb:09:8d:30:
36:ca:79:f2:f5:a4:e6:a5:41:98:e6:5a:4c:42:07:51:de:6a:
f5:3e:50:b3:6c:88:62:fe:db:ca:59:b3:b7:10:22:a9:8f:ab:
37:c5:bf:ea:26:03:92:89:46:9a:77:36:c5:5a:37:bf:e2:41:
99:00:b0:bb:61:54:aa:96:8a:cf:d0:d5:b3:ba:3a:d9:95:94:
15:51:66:c5:b5:28:61:a3:83:30:f7:62:96:71:ce:c5:a7:3d:
e1:72:65:49:c2:d5:1d:1d:5f:27:02:e6:66:a3:e1:4e:a7:e0:
3d:ec:cd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:12:46 2024 by rpki-client on console-fra.rpki-client.org