Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/R7KYMne9nT_iz5coUQ_BlRrjJWU.roa
File: R7KYMne9nT_iz5coUQ_BlRrjJWU.roa (raw, json)
Hash identifier: 39Hd9AauaG8oIviA1LWxZ9Jlr8aoDauG7y2E/FqdooQ=
Subject key identifier: 47:B2:98:32:77:BD:9D:3F:E2:CF:97:28:51:0F:C1:95:1A:E3:25:65
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0193251FA23C5CCA7CCADA08963318DD3504
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/R7KYMne9nT_iz5coUQ_BlRrjJWU.roa
Signing time: Wed 13 Nov 2024 10:44:10 +0000
ROA not before: Wed 13 Nov 2024 10:44:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57271
IP address blocks: 2a01:48a0:4001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:1f:a2:3c:5c:ca:7c:ca:da:08:96:33:18:dd:35:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Nov 13 10:44:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47b2983277bd9d3fe2cf9728510fc1951ae32565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:51:c5:33:f2:66:9d:e1:60:5d:47:b7:96:
5d:2f:fc:19:7a:ba:d2:27:00:a0:d5:20:60:7e:85:
fb:f8:b1:6b:17:2c:90:df:d7:83:2c:f9:db:3d:8e:
b9:45:6f:b5:7b:f4:61:a5:8f:d9:49:2b:3c:61:a1:
1f:f9:2c:82:1f:66:95:57:be:bb:92:6f:69:ae:4f:
70:6d:55:8f:e7:c1:29:cb:35:df:66:fd:97:98:7f:
2d:b9:7b:c8:50:4a:73:c5:b7:ca:c3:fd:6e:d6:8e:
79:ad:d4:c9:29:24:3c:fd:c7:95:22:7a:9b:bd:f9:
33:61:39:9d:68:f3:a5:5b:99:30:50:56:c4:a4:40:
b1:9d:42:20:14:f7:8f:92:d8:b0:85:ec:13:8e:8c:
0a:85:d3:74:af:6c:ed:bf:5b:f7:28:43:6e:55:63:
60:ad:52:c9:1a:52:46:ee:29:8d:35:6c:75:6e:d4:
a2:e6:04:e0:7c:68:65:a7:c2:fa:5d:1a:18:6b:25:
a0:dd:6d:9f:f7:d3:ec:85:65:1e:0a:31:e9:55:2c:
6e:7e:4c:85:60:78:11:57:8b:4a:ae:a6:6f:4f:fc:
04:ce:ad:55:d6:5b:a8:0b:dd:a4:1e:f3:a4:d6:29:
20:10:58:82:83:01:e1:49:51:7a:03:2e:c2:8e:64:
39:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B2:98:32:77:BD:9D:3F:E2:CF:97:28:51:0F:C1:95:1A:E3:25:65
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/R7KYMne9nT_iz5coUQ_BlRrjJWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:48a0:4001::/48
Signature Algorithm: sha256WithRSAEncryption
a2:d9:86:09:3f:dc:24:38:88:2a:b1:be:46:82:af:a5:ff:5c:
00:d5:88:c0:a7:eb:6a:a0:df:ef:ed:6c:42:72:78:4d:59:41:
22:2d:ae:da:61:49:5f:9b:a5:10:58:78:32:ef:18:6c:fd:50:
b6:a4:9f:d6:2e:72:ee:eb:ed:6e:9c:9d:4f:e2:79:48:0c:e3:
0b:2b:13:0e:f4:dc:d9:95:a0:bf:16:00:72:b6:0a:01:0c:b7:
ea:da:bf:68:b0:98:ef:88:d8:1a:be:99:49:bf:22:f6:17:d7:
16:50:1e:79:ed:2c:55:bc:e3:90:72:f9:41:cf:f6:df:d6:ab:
cf:5a:76:f3:23:92:38:a0:c5:cb:e5:70:75:52:ec:03:4c:e3:
93:1e:80:b8:27:61:8a:19:ec:de:53:48:2a:b9:43:fc:cd:d7:
55:fb:3e:26:29:02:4f:7f:3e:a9:20:2b:b0:69:85:c9:27:8d:
3c:d4:b9:33:87:7a:db:5e:a4:2b:d0:5e:29:3c:b4:4b:ab:d7:
fb:e7:f7:23:d0:5a:94:f9:27:ff:d9:9c:a0:00:16:26:48:cc:
aa:67:df:ca:80:8b:27:62:1e:15:3b:0a:ec:ef:c0:3a:12:b3:
7e:cf:da:f3:31:cf:19:d7:a2:96:cf:d2:2b:9c:26:1c:dc:2c:
a0:48:49:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:49:24 2024 by rpki-client on console-ams.rpki-client.org