Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/pgjd9NjG8xS89lbrKWHJulQu2k8.roa
File: pgjd9NjG8xS89lbrKWHJulQu2k8.roa (raw, json)
Hash identifier: D++T5vhQpPT1OnGP52ON1AJ2apECe2E3RvJWY5328EU=
Subject key identifier: A6:08:DD:F4:D8:C6:F3:14:BC:F6:56:EB:29:61:C9:BA:54:2E:DA:4F
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 018CC6B93BE046373437BDCCFBFEBF148A72
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/pgjd9NjG8xS89lbrKWHJulQu2k8.roa
Signing time: Mon 01 Jan 2024 20:31:17 +0000
ROA not before: Mon 01 Jan 2024 20:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59441
IP address blocks: 2a13:3e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3b:e0:46:37:34:37:bd:cc:fb:fe:bf:14:8a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Jan 1 20:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a608ddf4d8c6f314bcf656eb2961c9ba542eda4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5a:b8:c7:61:f2:05:a8:df:4f:b6:50:a2:88:
a9:e7:0e:48:c2:f7:16:49:11:37:0d:cf:8d:36:00:
06:f7:02:d3:28:ad:e2:d5:a6:3b:ce:eb:9d:87:56:
21:44:01:20:7e:af:8a:a7:5d:88:2f:d5:c0:e8:84:
99:75:94:f8:f9:84:8d:11:36:b0:97:36:f7:72:28:
65:74:d0:0c:c0:ea:aa:20:be:cc:8c:37:39:20:93:
ab:f8:25:1c:96:40:7b:aa:ec:2e:9c:f4:4c:89:99:
83:89:1f:26:9f:8d:f4:a5:cc:ed:6c:f6:94:0d:98:
a6:7a:a2:53:2d:0f:cc:76:05:7e:ed:10:83:2d:9e:
1c:fa:c6:62:24:01:91:eb:8f:d4:9f:4a:f6:f8:01:
07:c9:95:51:17:6c:8e:48:6a:07:9f:2e:4b:73:8f:
ef:2d:fe:b7:fe:90:61:f8:be:fb:01:8e:1c:d2:51:
ff:e0:f6:2d:93:7d:4b:65:72:a0:45:e2:a9:bf:7d:
54:91:f8:4c:9d:7f:84:e9:aa:2b:18:f4:11:4e:a9:
4b:da:00:31:7c:b6:2a:4f:f0:df:c4:ee:2b:a9:3a:
df:47:fa:62:77:97:38:46:72:f0:a2:fb:1c:40:95:
fc:b4:8c:c6:9c:ac:a2:77:8c:bc:23:1c:48:49:17:
bb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:08:DD:F4:D8:C6:F3:14:BC:F6:56:EB:29:61:C9:BA:54:2E:DA:4F
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/pgjd9NjG8xS89lbrKWHJulQu2k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3e40::/29
Signature Algorithm: sha256WithRSAEncryption
86:0a:3f:ca:42:c1:f6:56:f0:b1:93:74:fb:3f:d9:80:74:f2:
b2:25:62:e4:22:d2:c6:41:9f:7f:4a:16:72:fa:ba:2e:0b:59:
60:bb:b7:2d:94:59:77:5c:09:6b:6a:b2:de:64:90:07:10:08:
d8:b4:b1:82:28:fc:5a:c0:b5:ea:bc:38:f5:fa:ea:d7:4b:29:
26:79:f5:85:98:d6:7e:95:17:6c:a3:3d:29:5e:73:82:a8:4d:
d6:23:64:4c:2a:8f:5c:d3:d0:00:75:10:e4:9d:52:4f:d9:c5:
b7:19:eb:43:d1:db:82:62:04:f8:98:72:78:27:28:d6:16:9a:
2a:ed:0f:5f:2e:31:54:74:1a:54:a3:06:22:c1:9c:2d:cd:1c:
32:25:36:6d:e8:30:52:34:4b:77:30:45:5e:c0:7a:2a:c1:86:
8f:1c:2b:21:b8:2f:c1:74:06:64:44:89:11:f9:4b:01:4b:f9:
6f:fe:21:c0:f2:aa:bb:87:fe:c8:cd:6a:c9:12:bf:79:75:8c:
3c:1f:44:7a:7e:86:24:1f:b4:98:ae:7b:67:13:d5:db:c3:a9:
80:88:d7:20:4b:93:1a:bf:fc:e1:42:d3:d7:49:53:e4:ee:19:
c9:06:c0:d7:58:fc:2d:61:b3:e9:79:d9:f6:64:4d:98:cf:50:
c5:2f:06:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:04:40 2024 by rpki-client on console-fra.rpki-client.org