Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/xeUS7_Z09TSIzxdEOfWgOtFoB6U.roa
File: xeUS7_Z09TSIzxdEOfWgOtFoB6U.roa (raw, json)
Hash identifier: v/pgmz4pDrSciabSHg4CXR2sdSZSEkRx6hEAtP19CZs=
Subject key identifier: C5:E5:12:EF:F6:74:F5:34:88:CF:17:44:39:F5:A0:3A:D1:68:07:A5
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 0192CEE48A43D47EC16A344CC7C612F250F3
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/xeUS7_Z09TSIzxdEOfWgOtFoB6U.roa
Signing time: Sun 27 Oct 2024 16:52:17 +0000
ROA not before: Sun 27 Oct 2024 16:52:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214439
IP address blocks: 2a13:a5c7:2300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ce:e4:8a:43:d4:7e:c1:6a:34:4c:c7:c6:12:f2:50:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Oct 27 16:52:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5e512eff674f53488cf174439f5a03ad16807a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:bc:71:af:3a:1f:ef:c8:31:a4:57:31:c8:
f7:f9:ea:c1:00:c8:4d:e2:a9:5f:cd:af:2c:cf:ce:
7e:17:79:61:30:39:ec:c7:76:af:06:b2:f3:a6:3b:
d7:2d:6e:c9:0c:44:e8:82:53:e8:40:53:d3:c1:4d:
83:3e:f0:60:2f:b8:3a:f8:26:3c:50:fb:21:7a:1e:
53:d4:f8:7f:8a:b0:d7:e0:ef:dd:42:74:fe:3d:84:
76:be:7f:ad:2f:e0:40:3c:8c:a8:d8:77:d8:b6:41:
5b:e4:9c:70:a7:a4:23:0e:45:e3:bd:f7:65:a3:44:
e7:9a:04:30:eb:ec:a4:a9:ee:29:92:05:84:3e:99:
29:50:7e:fa:ed:a8:04:1e:2e:f2:7f:83:a5:75:97:
c3:95:ed:4a:17:5b:68:bd:66:16:23:14:57:d1:4f:
c2:0c:24:5d:b4:aa:1f:81:6f:98:89:be:ce:31:ab:
06:ae:58:cc:e4:e0:03:de:c2:8c:6b:a6:a5:dc:10:
89:dc:eb:2b:7c:b6:68:d5:15:80:19:e7:12:a3:4b:
f1:3b:5b:97:8b:6b:6d:10:c6:bc:68:db:5c:5d:6f:
92:96:a4:18:31:fb:be:b7:26:f1:5a:ee:a9:9c:a1:
05:58:24:78:61:17:98:d3:1c:57:ed:bb:14:f4:a2:
1a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E5:12:EF:F6:74:F5:34:88:CF:17:44:39:F5:A0:3A:D1:68:07:A5
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/xeUS7_Z09TSIzxdEOfWgOtFoB6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:2300::/40
Signature Algorithm: sha256WithRSAEncryption
2f:5b:32:81:08:6d:eb:fa:dc:24:e2:5f:2c:a1:39:e2:b7:f2:
1e:ac:aa:63:d7:fa:d3:1a:f5:97:bb:38:40:f7:b7:16:9a:ae:
f1:a1:ed:a7:62:27:59:7a:31:24:02:fc:a5:af:4b:bf:3d:de:
34:71:a7:8f:16:64:23:0f:76:77:d6:ef:d9:af:5b:46:a3:17:
7e:1e:80:04:e3:46:17:ac:60:8d:2e:90:90:b8:37:0f:47:6d:
33:48:42:51:66:77:5a:76:41:44:c8:a4:cf:c6:3d:67:0a:1b:
ce:a1:3d:7e:a5:ae:52:ec:62:06:61:90:b0:a9:b7:18:1c:37:
2c:db:db:8e:5c:06:c0:60:47:db:3c:55:01:e9:72:e9:5f:c0:
99:e4:55:9a:ec:ca:a9:8b:71:52:d7:86:d3:4c:e0:ca:8a:62:
b4:e5:d2:d2:84:1b:58:c6:db:92:7c:e5:89:01:3a:4a:24:62:
c3:86:7e:81:a2:b2:a0:14:20:40:70:4a:c1:2e:8b:f0:19:4e:
e7:e7:54:e5:a1:ac:ef:f7:1e:a2:bb:ad:56:5f:67:ee:e2:58:
0e:39:b1:03:a1:f5:ca:4a:0a:ee:ae:59:3a:7f:b2:81:35:1f:
d4:c2:1e:88:02:05:be:d1:68:88:61:09:5e:71:28:b0:f7:77:
33:fd:d8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:54:13 2024 by rpki-client on console-ams.rpki-client.org