Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/mp3UuG99xWnEIUBIjWyr19suBbE.roa
File: mp3UuG99xWnEIUBIjWyr19suBbE.roa (raw, json)
Hash identifier: +o8F6I6ZxDyhGM5wPkQekb4nCvy4cQDEKjQ2i60AL3E=
Subject key identifier: 9A:9D:D4:B8:6F:7D:C5:69:C4:21:40:48:8D:6C:AB:D7:DB:2E:05:B1
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 019306043E62C6E304CAD2DA8660221E67CD
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/mp3UuG99xWnEIUBIjWyr19suBbE.roa
Signing time: Thu 07 Nov 2024 09:46:01 +0000
ROA not before: Thu 07 Nov 2024 09:46:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213903
IP address blocks: 2a13:a5c7:2600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:04:3e:62:c6:e3:04:ca:d2:da:86:60:22:1e:67:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Nov 7 09:46:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a9dd4b86f7dc569c42140488d6cabd7db2e05b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:a5:2b:25:d3:d8:05:da:f2:09:17:aa:75:
b8:7f:60:89:23:57:c6:b4:c8:c2:b8:fe:57:29:16:
f8:12:c1:1e:64:fe:43:c3:1f:19:df:00:eb:da:40:
16:1c:1c:ef:b3:b9:ba:6d:bf:03:43:58:4c:0f:18:
d2:f0:c3:23:7f:a6:d0:ec:ba:d6:e3:8d:f2:87:44:
76:66:5e:94:12:7d:5b:0e:41:95:49:0d:e0:ff:40:
a9:0b:24:4e:da:03:d4:5d:dd:6c:60:78:20:be:73:
9f:0a:e9:fd:6e:84:8d:a8:e9:ee:dc:72:a4:82:e7:
39:c8:a5:77:dc:b9:ee:bd:e5:91:70:1d:12:f7:da:
20:ac:fd:9d:1d:30:41:e4:4c:72:ad:0d:80:d6:b8:
ea:9a:f7:95:e5:00:b5:c5:af:b5:b1:f1:25:7c:ff:
2a:66:ee:8c:ae:3a:20:81:c5:2d:03:43:48:5c:79:
62:56:53:3e:cf:00:11:30:83:45:9f:02:d2:d8:9b:
c8:91:aa:92:40:91:32:e4:11:7d:fd:f0:8a:da:0c:
97:ef:c1:7c:ec:77:33:3e:0d:f5:33:cc:5d:a3:b9:
8a:09:4f:5a:b0:47:43:f3:08:71:0a:2a:0a:68:f2:
72:7c:7b:74:c5:f9:9e:16:2a:37:fb:56:87:13:cb:
df:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9D:D4:B8:6F:7D:C5:69:C4:21:40:48:8D:6C:AB:D7:DB:2E:05:B1
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/mp3UuG99xWnEIUBIjWyr19suBbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:2600::/40
Signature Algorithm: sha256WithRSAEncryption
11:f9:34:fc:2b:c7:9e:56:53:e9:a6:69:1f:59:b6:1e:39:69:
ab:86:3a:cd:9d:50:22:48:c1:8e:a8:ee:23:32:d1:46:f3:c0:
b6:96:4a:5a:d5:fd:d9:5d:47:6f:5e:86:db:cb:95:7e:21:98:
14:36:8e:3b:6e:a9:db:b2:19:b0:b4:de:62:34:68:23:29:21:
33:f1:48:4b:78:34:2d:6d:ba:97:a8:7e:9b:24:cb:53:2b:21:
4a:07:05:c7:be:b4:60:11:89:0f:10:cd:95:14:ae:32:e6:17:
4c:13:cb:ce:2a:47:ec:72:9f:eb:e9:a6:9d:38:ec:64:4d:d5:
a4:1d:11:7a:2a:b6:20:a9:ce:0f:1e:42:4b:f0:42:9b:0c:80:
df:69:4e:5e:05:0a:84:6c:ed:f6:7d:43:51:72:18:1f:05:11:
6a:09:c0:64:db:22:ed:99:ad:43:e6:76:eb:88:25:fa:a0:1c:
25:10:21:32:9c:eb:a3:65:f9:56:75:53:90:c2:8e:3d:5d:01:
15:48:4e:bf:e3:09:36:1a:ea:15:c3:f9:46:f6:73:1c:35:05:
c4:66:ff:86:aa:e7:40:09:61:22:09:0e:e9:39:d0:8e:50:48:
ac:93:2f:38:7e:f6:11:96:f5:1c:9a:4b:21:dc:3d:9e:f8:93:
bf:07:9f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:12:47 2024 by rpki-client on console-fra.rpki-client.org