Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/ooEuJp8XU9lUaPmbr6VZG9VKy94.roa
File: ooEuJp8XU9lUaPmbr6VZG9VKy94.roa (raw, json)
Hash identifier: XRYTrixZwLTS263VizlkufLdcJxBYnRK/x3oqG0ycuw=
Subject key identifier: A2:81:2E:26:9F:17:53:D9:54:68:F9:9B:AF:A5:59:1B:D5:4A:CB:DE
Certificate issuer: /CN=f7742725862b90bda4510a02e804fef3ad1142dc
Certificate serial: 0191DAE46CDA474EB45CEF2B8AE210AFC7E3
Authority key identifier: F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/ooEuJp8XU9lUaPmbr6VZG9VKy94.roa
Signing time: Tue 10 Sep 2024 07:44:48 +0000
ROA not before: Tue 10 Sep 2024 07:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211180
IP address blocks: 2a03:a80:bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:da:e4:6c:da:47:4e:b4:5c:ef:2b:8a:e2:10:af:c7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7742725862b90bda4510a02e804fef3ad1142dc
Validity
Not Before: Sep 10 07:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2812e269f1753d95468f99bafa5591bd54acbde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d5:6f:07:93:d1:e3:2d:b5:85:5e:2e:f6:24:
54:6b:51:d7:ea:25:bd:00:f1:41:34:38:93:54:c3:
b0:11:53:cd:ea:69:46:b8:aa:3f:b8:8c:66:2f:c9:
41:14:3b:5e:cf:69:5e:13:fb:0d:49:f8:77:41:d3:
a3:3d:b4:7c:c5:53:09:ca:6f:6f:3f:3f:d2:1d:63:
8d:b2:42:a4:4f:03:a0:e5:dd:40:b7:0c:da:f8:6b:
9b:1c:14:4f:09:bc:b0:34:75:cb:a7:3d:38:14:d3:
f1:ee:62:33:57:d9:91:5c:33:95:a1:ef:c1:e4:ce:
e0:f0:a0:eb:8a:22:66:07:f7:68:f3:c9:84:db:38:
dd:61:33:7d:74:76:54:ea:dc:36:b8:a4:9e:e5:85:
7b:a2:4c:b9:40:75:b2:33:0e:44:b6:1e:03:a2:98:
26:3a:8a:28:13:25:e6:7c:da:1a:99:6e:fb:bc:1f:
4d:a8:46:a9:2c:71:6a:61:6f:27:48:a4:bc:17:6b:
70:61:b9:21:45:f4:db:21:68:2b:ea:bd:b5:68:10:
26:db:8d:1a:0e:f4:e4:6e:74:b5:e8:fe:ef:61:20:
28:49:e4:d5:cf:2b:5f:ef:fe:4d:e6:90:f9:4d:67:
85:ef:69:86:4c:84:75:47:8a:25:72:e8:be:dd:7a:
9e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:81:2E:26:9F:17:53:D9:54:68:F9:9B:AF:A5:59:1B:D5:4A:CB:DE
X509v3 Authority Key Identifier:
keyid:F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/ooEuJp8XU9lUaPmbr6VZG9VKy94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:a80:bc::/48
Signature Algorithm: sha256WithRSAEncryption
c0:b1:5a:76:3f:c1:85:9c:ec:99:71:db:9c:ad:bd:64:c8:d6:
7c:f7:d6:b5:b9:ab:cd:e8:cd:45:da:00:a3:41:02:ff:da:ae:
5a:0c:b7:70:c0:6e:9f:a4:e8:fe:85:6b:f5:31:22:7a:60:a7:
08:cb:2a:30:3f:12:c7:c3:3a:70:ca:3a:31:a5:26:c8:56:1e:
a3:0c:51:b0:08:54:43:5b:72:5e:a9:74:2a:63:2b:30:86:64:
2b:0b:8a:b6:64:77:92:ad:a6:20:bf:b6:86:e7:44:78:e9:21:
3d:0c:0d:b9:73:73:04:6e:90:74:65:5a:aa:fa:22:ce:69:1f:
d3:c5:80:14:e0:5f:19:89:35:60:5e:43:e0:1c:52:26:f8:5f:
69:7f:85:ac:b7:44:fb:5e:b7:43:83:62:85:30:99:59:ba:36:
82:2a:54:77:fe:f6:20:7f:30:0a:53:37:c8:b4:24:c0:0d:e9:
ef:8e:34:48:b0:8e:cb:27:ab:2c:3f:cf:3b:db:ea:57:53:fb:
cf:5f:ab:20:5a:ce:31:d2:ca:81:05:19:b8:52:0f:f7:25:19:
7c:02:3d:5b:ae:45:29:29:40:92:07:0c:72:81:d8:db:7f:ac:
9a:5f:87:84:31:82:c5:44:c1:28:ba:cf:e7:ed:90:0d:b9:a7:
e4:8b:a3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:36 2024 by rpki-client on console-fra.rpki-client.org