Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/Mics_0JlWFs1bw-ioqyHwdh8CW0.roa
File: Mics_0JlWFs1bw-ioqyHwdh8CW0.roa (raw, json)
Hash identifier: ww+YY8Bl6Hdo5VvDwq+jRGUx4OXtW+st2P3kNXqZzpA=
Subject key identifier: 32:27:2C:FF:42:65:58:5B:35:6F:0F:A2:A2:AC:87:C1:D8:7C:09:6D
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 019287CBC7FE22AADCC8BE21052FD6444417
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/Mics_0JlWFs1bw-ioqyHwdh8CW0.roa
Signing time: Sun 13 Oct 2024 21:32:12 +0000
ROA not before: Sun 13 Oct 2024 21:32:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54852
IP address blocks: 2a01:e281:f4::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Oct 2024 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:87:cb:c7:fe:22:aa:dc:c8:be:21:05:2f:d6:44:44:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Oct 13 21:32:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32272cff4265585b356f0fa2a2ac87c1d87c096d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:09:ec:3b:b5:e3:89:32:7e:53:b3:33:a7:73:
3b:b3:64:a2:1f:f3:a6:51:b6:78:be:ce:01:69:d5:
31:d4:a3:f6:01:1d:02:c4:74:0c:ce:f8:10:1a:ee:
a9:e4:b0:14:4c:56:21:7a:ad:05:c5:07:d8:a4:51:
a5:fc:d5:ac:a1:c3:8e:90:71:08:6c:37:c2:ef:13:
df:b3:88:4c:3c:63:39:8e:6a:08:e0:aa:06:26:0d:
4e:2a:ec:0f:0a:36:60:e2:9a:12:c1:53:9e:f0:03:
e0:ec:99:85:27:59:21:ad:33:bb:8d:68:ba:58:01:
f7:66:61:c1:7e:b0:46:3a:94:90:d1:ae:3c:53:01:
d9:77:c4:c7:45:33:f2:f1:7a:78:b3:2c:8e:f5:21:
aa:d4:d4:cf:91:de:fc:b7:ce:98:5c:21:57:a7:78:
36:6e:ec:cd:f9:a8:c1:d0:c5:00:c7:ce:d0:e9:f0:
9a:5f:62:f6:dc:db:96:e8:c6:db:3d:92:d7:4a:6f:
ac:a7:b0:7b:a2:a3:81:3b:72:0d:13:aa:6e:80:17:
6d:9d:90:be:15:8e:e9:34:86:a7:d9:15:c8:74:19:
af:70:7f:50:e0:1a:57:b2:e8:9a:b6:40:54:c6:fb:
ea:cf:c3:fd:df:2a:35:1f:81:f6:9d:07:f4:c8:32:
12:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:27:2C:FF:42:65:58:5B:35:6F:0F:A2:A2:AC:87:C1:D8:7C:09:6D
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/Mics_0JlWFs1bw-ioqyHwdh8CW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:f4::/48
Signature Algorithm: sha256WithRSAEncryption
5c:bf:d2:48:77:36:03:bd:d2:1e:af:84:b8:b1:b7:5b:58:46:
77:25:31:35:15:b7:ce:b6:1f:02:3b:e7:de:31:cd:77:4a:7e:
24:52:be:d9:e7:02:d6:4a:01:33:74:a7:61:01:ba:ac:8f:f0:
b6:61:e9:2d:a0:2c:cd:e5:07:6c:92:6d:e4:d2:f3:ad:7b:bd:
e6:ba:5d:f5:53:35:4d:c6:ef:24:cb:f9:bb:60:47:96:74:2f:
dc:10:36:fd:76:e9:77:8a:85:51:d9:41:3f:fa:e0:04:a0:d0:
da:1a:e4:69:da:ed:5a:47:b9:79:7b:2c:ae:3f:fb:ae:b4:20:
c6:40:cb:30:06:f4:1a:1a:e2:22:dd:5f:3a:81:7a:26:a8:89:
95:65:32:06:ca:76:f7:d8:de:82:48:e0:e8:2d:af:34:fd:84:
d3:cf:a2:e2:7a:04:0f:93:85:5e:b5:ef:c5:06:f7:7f:41:a2:
85:b9:c1:c2:76:6d:cc:f6:61:44:e1:4e:d4:6a:83:2e:40:00:
48:4a:c1:93:40:b0:04:d5:c2:55:3f:7b:d6:ec:13:b0:af:62:
bd:fc:09:2c:37:b8:f1:37:65:8a:ed:81:ec:2a:e2:95:40:dc:
f1:b0:19:14:f9:1b:ca:79:62:2f:51:7f:e7:56:ff:2e:a5:09:
ac:66:1f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 20:33:26 2024 by rpki-client on console-fra.rpki-client.org