Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/VSSckGEqXstuuFDYO9JSgAT22pg.roa
File: VSSckGEqXstuuFDYO9JSgAT22pg.roa (raw, json)
Hash identifier: fvSQiG4zcLMbsSOCKZXW0Ir4LRQU2vP5c8EtOmvrbXM=
Subject key identifier: 55:24:9C:90:61:2A:5E:CB:6E:B8:50:D8:3B:D2:52:80:04:F6:DA:98
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 01917A3A3CA694C129B2A79042A0DF4938E3
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/VSSckGEqXstuuFDYO9JSgAT22pg.roa
Signing time: Thu 22 Aug 2024 13:15:22 +0000
ROA not before: Thu 22 Aug 2024 13:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140915
IP address blocks: 2a13:a5c3:ff10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7a:3a:3c:a6:94:c1:29:b2:a7:90:42:a0:df:49:38:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Aug 22 13:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55249c90612a5ecb6eb850d83bd2528004f6da98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:0d:cf:31:20:9c:6d:63:e6:1e:ef:30:7e:
9f:84:b1:1a:f6:c7:cc:c2:42:24:22:5b:48:f2:67:
31:34:d5:35:ba:e8:28:cd:9c:31:de:d0:4f:0e:9b:
05:f2:64:43:10:87:3a:51:08:9d:8b:05:2c:19:e7:
1a:54:2e:07:22:79:2f:50:a7:72:91:e2:ee:24:06:
45:91:da:12:7f:4f:08:7e:0e:88:2f:79:3a:ed:37:
bc:4b:12:e3:54:21:1b:80:e5:39:f9:b8:92:9f:ab:
6c:9b:7e:c5:9f:b1:63:9d:23:77:01:86:59:83:b8:
2f:97:8e:c7:46:5d:9c:bc:88:33:37:1c:04:2d:dc:
fd:33:c0:c7:26:92:cf:9a:da:6e:0f:b7:9e:0a:d5:
81:24:1e:c2:b2:c5:38:5b:44:dd:ec:ed:49:a4:b2:
26:49:26:b0:90:60:db:49:56:c0:1f:d4:dd:e2:47:
a2:b0:1e:2b:e1:29:f6:e3:54:17:33:c1:cd:58:bc:
94:2f:d8:ae:bf:2a:e4:15:d8:15:45:9b:27:c6:e0:
22:56:03:cc:70:80:ee:5c:07:ab:a1:93:ae:23:d1:
d0:66:66:45:9f:eb:55:e1:3d:83:fa:31:c1:69:92:
f9:41:77:e0:80:52:c8:f7:8b:f2:48:38:93:a2:d5:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:24:9C:90:61:2A:5E:CB:6E:B8:50:D8:3B:D2:52:80:04:F6:DA:98
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/VSSckGEqXstuuFDYO9JSgAT22pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c3:ff10::/44
Signature Algorithm: sha256WithRSAEncryption
1f:4c:d3:1d:79:86:fc:b2:6d:1e:cf:15:0a:25:31:09:f1:96:
9d:52:f7:e5:f1:b8:81:e1:a3:2e:9c:fa:bf:4d:8a:72:7e:1e:
7b:7d:e5:e1:17:bc:ba:74:c9:3e:83:80:ac:27:10:34:78:da:
32:65:5c:29:21:14:b1:1c:9c:ec:2f:c9:c6:30:6f:92:d7:9a:
f7:27:24:b9:04:b5:a3:cf:ac:52:71:9b:e3:7a:06:18:e1:3a:
cc:b6:66:a7:f8:56:cd:97:96:f0:06:33:9d:0e:1f:16:a4:1f:
7b:25:20:f3:97:11:2a:17:6f:ab:04:d1:ad:ad:69:58:51:92:
b2:40:51:56:03:6d:2a:e4:02:84:86:39:ee:f0:34:4a:89:1a:
61:61:5a:cb:9d:6a:a3:72:45:1a:c2:af:e1:97:a7:8b:1b:9e:
ef:ac:07:9b:a8:d1:7c:13:90:66:46:6d:fd:85:34:60:13:f0:
f4:18:81:15:e2:2f:9d:57:68:87:5f:a3:be:c9:86:5c:6d:f9:
f1:b5:ee:46:3d:98:b4:5d:cd:e5:1a:ad:42:8b:dd:ab:85:8e:
0d:3f:78:23:14:e9:41:d8:8f:e9:c1:20:44:2b:e1:8c:36:4a:
e3:31:bd:08:bc:91:35:b8:33:3e:53:8e:2d:35:bb:95:4c:33:
b0:45:21:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:46:08 2024 by rpki-client on console-fra.rpki-client.org