Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/M-YqfjUNaUyLBL4UbxspCBQNkCk.roa
File: M-YqfjUNaUyLBL4UbxspCBQNkCk.roa (raw, json)
Hash identifier: tKWKFYnhoTKOUFiIgNRgYoam4/+WWBZhunuD/h+yK/U=
Subject key identifier: 33:E6:2A:7E:35:0D:69:4C:8B:04:BE:14:6F:1B:29:08:14:0D:90:29
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 0191FD2F6AA8E535B3043A5B1DAA9F1DE290
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/M-YqfjUNaUyLBL4UbxspCBQNkCk.roa
Signing time: Mon 16 Sep 2024 23:33:48 +0000
ROA not before: Mon 16 Sep 2024 23:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215472
IP address blocks: 2a01:e281:a774::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fd:2f:6a:a8:e5:35:b3:04:3a:5b:1d:aa:9f:1d:e2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Sep 16 23:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33e62a7e350d694c8b04be146f1b2908140d9029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:44:37:77:67:9d:63:03:68:2e:03:cc:f1:39:
23:46:3d:6a:07:53:1c:59:94:5b:11:e2:b3:58:ed:
45:17:e9:cf:3a:12:02:a1:b7:96:f1:f5:a3:b0:92:
02:48:01:b2:d2:08:c7:de:3c:fe:3b:61:c4:ca:46:
7e:d6:6e:1f:4e:aa:9d:ec:45:ac:12:f2:69:a6:83:
7f:e4:d7:aa:11:50:f7:fd:9e:84:f7:4e:9a:81:6b:
4b:37:8f:d0:7d:5c:1c:cf:c6:a4:a5:37:46:6f:c3:
7f:70:47:a2:83:5f:98:a2:0c:7a:98:f0:16:14:27:
eb:56:47:fc:7c:3f:64:5d:20:b7:29:98:1d:76:ab:
ed:7a:4a:88:c1:99:5c:6c:eb:84:14:86:d5:84:c1:
1c:b7:10:92:c6:0d:5f:a8:8e:31:c3:44:4e:f1:05:
d4:63:29:14:9a:0a:3b:f0:57:af:01:a8:2e:a0:cd:
9d:2d:fb:03:8f:4e:05:9c:9a:83:29:b0:7c:e1:3b:
33:cd:d1:dd:e8:7b:bd:6b:30:a8:43:b6:0a:9a:cb:
84:f6:dd:cb:49:fd:5b:a7:03:06:37:38:b6:8e:5d:
af:09:62:ce:8c:85:cb:46:b0:05:28:5e:b8:10:c7:
82:cf:0b:53:08:d2:cb:7d:0b:5b:e4:08:d8:71:d3:
d6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E6:2A:7E:35:0D:69:4C:8B:04:BE:14:6F:1B:29:08:14:0D:90:29
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/M-YqfjUNaUyLBL4UbxspCBQNkCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:a774::/48
Signature Algorithm: sha256WithRSAEncryption
0a:07:6c:a3:5b:16:63:79:72:de:e6:55:a2:49:0d:cb:bc:19:
e6:6a:c7:27:13:fe:be:dd:b4:ab:b3:43:e6:4d:5f:b5:11:04:
f0:11:62:8b:89:9e:b6:bb:c0:be:3e:6a:be:41:ab:a4:8e:43:
a6:57:3f:82:7e:ee:12:2a:04:d2:30:9a:a7:1f:0c:76:aa:5c:
04:20:24:f0:f4:19:19:5e:a5:8c:06:4a:ed:5a:b1:d2:2d:15:
3d:68:28:4f:27:44:d2:4f:dd:7a:08:4f:7b:2f:7b:e8:70:58:
8e:64:80:76:ad:a7:62:97:70:f5:9a:a9:75:e8:0a:c7:b8:34:
7e:c1:b9:ca:e2:e8:81:65:13:6f:ca:cf:86:8b:8a:1f:3c:6e:
3e:e3:28:52:56:70:54:96:75:49:37:c7:7a:95:be:24:ec:90:
c1:51:c3:3d:aa:d3:64:a5:50:e4:7a:f8:08:4d:d9:27:4a:e1:
38:9d:96:e1:dc:78:5d:ed:84:81:be:08:92:4c:bf:0f:9b:87:
d4:3c:e9:15:43:dd:60:7a:3d:62:56:95:37:bf:5e:eb:c0:df:
07:c5:64:ed:93:cd:94:8b:d1:96:da:ba:c1:7b:ff:4f:16:86:
81:5b:14:08:5c:2f:d0:c8:3d:76:ef:52:d1:90:5c:08:1d:69:
b4:4a:2c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:48:38 2024 by rpki-client on console-ams.rpki-client.org