Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/nB13ljvn_TecRAzgXCc1Yhwt4Yg.roa
File: nB13ljvn_TecRAzgXCc1Yhwt4Yg.roa (raw, json)
Hash identifier: j3V18zCUzNH/eA0fzwbFL6MjUbGziuGhyFHn5b4y9vk=
Subject key identifier: 9C:1D:77:96:3B:E7:FD:37:9C:44:0C:E0:5C:27:35:62:1C:2D:E1:88
Certificate issuer: /CN=13edfb910fffe47d51ad9d0f883b1b649669e135
Certificate serial: 018CC2DAF697AA4DE5C7035A966B2A2A5287
Authority key identifier: 13:ED:FB:91:0F:FF:E4:7D:51:AD:9D:0F:88:3B:1B:64:96:69:E1:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/nB13ljvn_TecRAzgXCc1Yhwt4Yg.roa
Signing time: Mon 01 Jan 2024 02:29:39 +0000
ROA not before: Mon 01 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 2a07:5d00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f6:97:aa:4d:e5:c7:03:5a:96:6b:2a:2a:52:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edfb910fffe47d51ad9d0f883b1b649669e135
Validity
Not Before: Jan 1 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c1d77963be7fd379c440ce05c2735621c2de188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0c:38:f1:11:fd:d4:4e:66:fe:53:4d:f8:58:
4c:44:c6:ae:d4:ef:83:4a:50:92:c0:c1:b5:88:f5:
ba:67:11:43:9c:2a:0e:c1:df:01:2b:a1:2b:37:85:
f3:b8:7e:6f:bb:b9:f6:05:b9:db:e9:ed:41:16:d3:
a9:ae:9b:ad:ee:de:bf:88:2d:08:a3:c2:c8:68:6c:
69:4a:c3:dc:69:04:27:08:46:b4:ef:b4:e4:66:ef:
f4:52:2b:ed:5a:16:ca:0c:11:7e:89:31:e2:11:85:
06:fd:7a:82:bb:96:c7:3a:79:73:62:a0:89:ed:4a:
5c:46:7c:cf:08:0a:c1:3b:2c:08:f2:ad:9c:e4:73:
ec:73:a6:bc:37:01:00:9d:c4:87:e7:43:af:44:91:
34:45:c5:ca:25:d2:77:e4:64:05:ec:da:5c:fb:6a:
87:7c:8d:53:a8:8d:72:b3:c9:6e:1c:62:e3:24:de:
66:98:0d:9c:ad:1f:90:78:9c:fb:e8:4e:0e:18:3a:
d6:a2:f2:d2:78:4e:98:0b:fa:f1:62:fd:55:2d:20:
c2:f0:a0:ed:91:c0:28:27:13:9e:6e:ba:cb:a8:5b:
70:a9:ce:75:65:f7:60:6b:81:7b:08:38:97:07:6c:
77:25:09:db:16:5e:b5:99:e2:70:22:b4:ff:a1:0d:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1D:77:96:3B:E7:FD:37:9C:44:0C:E0:5C:27:35:62:1C:2D:E1:88
X509v3 Authority Key Identifier:
keyid:13:ED:FB:91:0F:FF:E4:7D:51:AD:9D:0F:88:3B:1B:64:96:69:E1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/nB13ljvn_TecRAzgXCc1Yhwt4Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:5d00::/29
Signature Algorithm: sha256WithRSAEncryption
72:04:a3:65:6d:16:b0:56:f0:c0:f1:2a:a7:61:9c:68:61:72:
a0:a2:a6:89:0c:2e:a8:12:7a:8a:23:57:ef:85:c7:50:13:a9:
b4:d8:fb:f6:f6:17:93:bf:b7:0a:8a:b5:22:95:9e:72:08:78:
ff:fd:bf:4a:ff:b2:cd:69:67:88:1a:37:bd:ff:0d:bf:e6:88:
a2:21:ed:85:26:9c:17:6d:11:47:90:46:c4:8d:20:3d:fd:ba:
bf:70:91:34:ac:a1:f7:d0:28:44:9f:c0:ac:32:11:dd:ac:8d:
6e:77:44:d1:be:50:61:4d:80:9b:16:e8:d3:aa:91:72:c3:27:
59:98:b1:ae:ee:74:43:cc:29:86:01:4a:64:95:ce:e3:80:f7:
00:03:21:36:c3:ec:b4:8c:f0:00:55:51:29:19:3d:26:c6:d6:
ce:2a:41:7e:09:53:4f:2b:00:d0:42:84:89:2f:21:8e:b5:14:
45:50:17:d2:81:11:f2:83:c2:93:2b:62:2b:d0:76:a4:bd:b9:
1b:7b:5d:f9:f0:87:46:b8:37:6b:3a:e6:e2:4e:c0:51:37:cc:
01:8e:03:df:bd:df:ac:c8:0b:10:0d:93:dc:e1:fc:e3:2a:af:
92:8c:d7:d3:0b:27:59:ab:47:97:8a:c4:12:03:aa:1e:1a:cc:
13:62:c7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:40:25 2024 by rpki-client on console-fra.rpki-client.org