Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/BDlHx5sgvT4CUmCmXuporz15pzI.roa
File: BDlHx5sgvT4CUmCmXuporz15pzI.roa (raw, json)
Hash identifier: ctVPCySWAVJaySjBzo5hsJsZk8/3S2DqWiQbTrxKW1A=
Subject key identifier: 04:39:47:C7:9B:20:BD:3E:02:52:60:A6:5E:EA:68:AF:3D:79:A7:32
Certificate issuer: /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Certificate serial: 0190A5DABD1C10E48B2BAA2D5EB9DEE0A6A0
Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/BDlHx5sgvT4CUmCmXuporz15pzI.roa
Signing time: Fri 12 Jul 2024 07:31:34 +0000
ROA not before: Fri 12 Jul 2024 07:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31317
IP address blocks: 2001:67c:f00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a5:da:bd:1c:10:e4:8b:2b:aa:2d:5e:b9:de:e0:a6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Validity
Not Before: Jul 12 07:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=043947c79b20bd3e025260a65eea68af3d79a732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:e1:90:28:a8:36:ec:c4:52:16:79:d0:3d:
22:de:64:db:62:b5:db:2d:0d:bd:92:c4:83:e2:57:
e7:cb:25:20:2b:15:22:09:a8:aa:dd:62:16:9a:c9:
a1:61:fa:59:74:ed:3f:5e:4c:61:3f:68:6c:f6:e3:
48:9b:27:92:4f:8b:ec:d3:a9:a5:f7:b8:94:4e:a1:
d5:af:6e:af:07:7a:9f:9d:2a:74:68:2a:74:56:4a:
f1:e1:dc:b1:ce:68:40:0d:54:bb:8c:06:70:0d:47:
d1:64:dc:57:2e:3f:53:17:79:4d:af:82:c0:c8:3f:
5d:6c:a1:00:0d:6b:9d:e8:57:35:e3:b8:6f:c5:12:
97:4c:2c:e3:24:e3:d4:ef:cd:bd:44:b8:b2:d7:10:
d2:82:9b:22:0c:fa:4c:4d:dc:6b:92:fd:04:77:46:
d5:14:ad:4a:df:32:0d:66:35:85:89:c0:2e:c6:93:
6b:de:cf:d1:6c:2c:a9:50:c7:ec:69:ba:bf:3a:c1:
03:f5:53:16:9c:2b:50:c4:2f:c6:e6:fd:68:ea:e3:
ab:21:d6:2a:c5:ab:ff:aa:a9:ab:2e:f0:76:d1:8d:
18:ea:49:96:a1:21:1f:f2:ec:5b:d5:47:a0:b7:63:
06:fe:2d:9a:38:22:3a:39:84:eb:3a:05:8c:ce:b9:
5e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:39:47:C7:9B:20:BD:3E:02:52:60:A6:5E:EA:68:AF:3D:79:A7:32
X509v3 Authority Key Identifier:
keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/BDlHx5sgvT4CUmCmXuporz15pzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f00::/48
Signature Algorithm: sha256WithRSAEncryption
10:45:92:38:bc:04:db:8e:b0:fc:a0:28:45:cd:ae:94:54:90:
29:bb:3c:3c:ff:6b:bb:2f:f6:db:2e:74:c4:f9:1c:65:38:39:
1b:50:b4:46:d9:65:bf:40:e3:91:3d:af:13:aa:4d:30:5d:d9:
30:e6:fa:60:34:5c:e1:16:ac:54:a6:bc:06:79:31:95:0d:37:
84:6c:fe:63:0d:79:e5:54:26:98:af:3c:9f:8d:0e:6d:54:a7:
62:31:8a:1a:36:5c:2d:94:5d:08:41:f1:19:5a:97:99:23:7d:
c0:ab:78:83:0f:8e:8d:7f:20:0b:34:ed:03:3a:95:2e:b8:79:
ba:9f:3c:40:fb:5e:e7:6c:2a:6c:f6:de:c1:29:08:3c:af:18:
68:3b:11:d4:cf:dd:13:ca:dd:8d:18:90:22:39:47:9d:07:75:
2e:5e:85:d7:f6:75:12:08:c1:4d:ab:1b:87:c7:12:f3:01:a5:
97:db:83:aa:c5:ee:e2:7c:6d:b3:fa:ce:83:c8:d1:35:c9:e6:
36:38:b0:2f:a8:fb:64:63:4d:62:25:76:36:76:a6:e8:1b:17:
50:32:49:1b:37:dc:77:74:23:6b:d1:8a:da:c5:ff:0c:39:a9:
d7:1d:91:a8:0b:98:5e:12:58:de:11:dd:bb:cb:d0:c5:65:06:
95:f9:e4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:40:27 2024 by rpki-client on console-fra.rpki-client.org