Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/c7OeNKX3G71hfOnuMGycJz8dkyA.roa
File: c7OeNKX3G71hfOnuMGycJz8dkyA.roa (raw, json)
Hash identifier: HUQqRtP6TiV7byBa03j8ZLDVtX5L5jRQWcjwUmPPXbQ=
Subject key identifier: 73:B3:9E:34:A5:F7:1B:BD:61:7C:E9:EE:30:6C:9C:27:3F:1D:93:20
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 0192CEE2B583A9C6D410AD0A49FE5AFBC9EE
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/c7OeNKX3G71hfOnuMGycJz8dkyA.roa
Signing time: Sun 27 Oct 2024 16:50:17 +0000
ROA not before: Sun 27 Oct 2024 16:50:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214050
IP address blocks: 2a13:a5c7:2400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ce:e2:b5:83:a9:c6:d4:10:ad:0a:49:fe:5a:fb:c9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Oct 27 16:50:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73b39e34a5f71bbd617ce9ee306c9c273f1d9320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:f6:b9:ed:cc:78:16:95:0f:78:ad:8b:07:
67:ea:26:45:eb:47:cc:eb:03:b3:a5:a6:b0:91:f5:
af:69:f4:50:7e:10:02:78:1a:2a:b4:c8:3f:07:41:
73:f8:56:51:c4:c5:51:72:11:08:dc:68:c4:db:0c:
7f:84:d2:18:21:27:a9:b2:9d:d8:f1:96:9d:6b:67:
88:45:89:f6:7d:1c:65:de:db:95:a7:cb:90:9e:52:
0c:e6:99:5f:c7:a2:a5:42:2c:7a:7a:d4:80:5d:06:
d3:f1:89:7e:6f:38:32:61:4e:48:ea:6e:07:98:ea:
88:74:6c:a0:29:5c:4d:42:52:de:75:15:7d:e3:77:
8f:6b:5f:f9:41:4b:ff:93:2f:00:f3:ac:28:ac:e4:
8f:33:38:0f:13:77:aa:bd:54:77:11:44:c1:76:0c:
ac:de:8a:4a:34:e9:b8:c0:d6:6e:7f:5f:d9:a6:69:
12:98:b9:e5:79:b0:f9:d4:41:9c:53:c5:48:14:73:
08:a6:db:b5:66:63:33:38:82:64:7b:9d:a9:e2:9c:
08:49:77:1d:c9:f6:64:76:51:62:ec:6d:b8:ec:e3:
27:8c:86:bb:b0:9b:e8:5b:de:1b:b0:38:14:75:c0:
eb:96:38:9f:f3:ec:f6:47:7e:a1:f6:6f:0e:66:b3:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B3:9E:34:A5:F7:1B:BD:61:7C:E9:EE:30:6C:9C:27:3F:1D:93:20
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/c7OeNKX3G71hfOnuMGycJz8dkyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:2400::/40
Signature Algorithm: sha256WithRSAEncryption
82:f3:81:c1:1c:0e:89:d8:56:64:ef:06:b2:08:02:f5:3d:c1:
ca:8f:8b:ea:a9:35:71:ad:e9:2e:d7:2c:d9:bd:ea:c9:31:e0:
88:9f:53:36:fc:ed:81:1b:a5:05:f3:10:ed:b5:60:18:a0:e9:
28:78:7b:47:d2:55:84:bf:9a:3b:f6:17:e6:32:3f:c1:b2:ef:
03:41:5e:d0:4e:ae:9c:42:d3:50:4f:48:eb:5b:31:6e:02:40:
0f:a0:29:8e:64:14:b7:ee:62:39:0f:ce:b0:98:fe:7c:39:e4:
23:fc:7c:60:b2:da:e1:8b:86:af:e0:b0:02:3c:94:50:6e:a8:
b3:8b:4b:98:55:17:d8:a2:3f:a4:5d:b2:59:10:ec:4e:84:00:
2a:ae:04:6b:5e:7d:09:b4:95:9c:49:8b:eb:ac:41:05:9d:bd:
23:84:5f:6f:17:47:2a:39:42:83:3d:6a:26:f6:20:3d:5d:ad:
7a:24:bc:bf:10:48:b6:8c:0d:f5:e5:47:8b:25:7f:da:78:76:
63:ff:42:1f:db:be:f2:d1:6a:18:7d:29:0b:84:38:75:56:c6:
12:7d:03:4a:1c:25:cd:a8:1b:2b:3b:5b:ca:37:aa:14:56:19:
89:c2:3b:99:dc:09:90:fe:fd:b8:75:3c:e3:b4:66:95:2b:4b:
ec:4d:b1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:54:13 2024 by rpki-client on console-ams.rpki-client.org