Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/vuf0AkDOUhcmtpP-eWBPu0qON1Q.roa
File: vuf0AkDOUhcmtpP-eWBPu0qON1Q.roa (raw, json)
Hash identifier: ZN3C+HfEyW+4NDZePcrVx3EqH19T2QXXBZbAU020gcg=
Subject key identifier: BE:E7:F4:02:40:CE:52:17:26:B6:93:FE:79:60:4F:BB:4A:8E:37:54
Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial: 019320E6639F664965D539382DD55908FD33
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/vuf0AkDOUhcmtpP-eWBPu0qON1Q.roa
Signing time: Tue 12 Nov 2024 15:03:09 +0000
ROA not before: Tue 12 Nov 2024 15:03:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47294
IP address blocks: 2a13:e5c0:8888::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:e6:63:9f:66:49:65:d5:39:38:2d:d5:59:08:fd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Validity
Not Before: Nov 12 15:03:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bee7f40240ce521726b693fe79604fbb4a8e3754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:58:2c:98:fa:e4:6e:d5:c8:55:0b:04:3b:
bd:26:80:c9:84:fc:fa:d9:48:1c:ad:8e:f7:2d:ee:
63:b2:f2:b8:65:e6:fb:0d:64:42:e5:5c:c1:64:40:
fc:54:12:38:f2:99:9d:9e:87:db:8f:0d:67:8c:e8:
b5:a2:a1:91:dc:02:21:f5:77:8c:9a:4a:85:6a:aa:
75:e0:2d:0a:06:9e:b0:87:95:a2:e6:8c:24:97:69:
b4:54:6e:1a:5e:d7:ac:d6:75:29:71:01:22:ea:35:
32:89:50:b1:62:e2:17:e8:58:85:5e:99:01:0a:d4:
fb:f4:13:c1:2c:51:4c:6c:cd:b4:34:71:33:d6:d9:
49:2b:b3:24:ef:51:69:8b:e6:e6:aa:a6:e0:ff:d2:
82:16:40:af:e6:7f:c7:a8:91:98:2a:bb:df:2f:5e:
3e:c5:e8:58:98:99:c9:a2:c2:69:67:6b:3c:5c:96:
75:0e:9a:67:ba:2b:ea:3f:1d:2a:bf:be:ca:a5:88:
19:3f:6a:e4:35:c7:56:0b:8c:2d:73:63:3c:24:21:
5d:5a:44:54:7f:b6:fb:0a:19:09:9e:2c:c6:52:2f:
81:6b:89:54:10:e0:a3:6e:81:70:1c:ba:b5:57:17:
cf:a1:1e:4c:c1:3f:ea:4c:87:6c:78:0c:83:7f:c2:
40:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E7:F4:02:40:CE:52:17:26:B6:93:FE:79:60:4F:BB:4A:8E:37:54
X509v3 Authority Key Identifier:
keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/vuf0AkDOUhcmtpP-eWBPu0qON1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e5c0:8888::/48
Signature Algorithm: sha256WithRSAEncryption
5e:d9:4e:94:0c:a4:23:dc:85:1a:54:aa:e1:41:63:9b:b7:67:
2e:04:ac:b7:86:18:9c:3a:8d:66:18:dc:d9:61:ef:f9:2c:4a:
55:31:2a:6d:bd:35:1a:5c:00:6e:0f:f1:78:f6:9e:63:61:38:
76:8e:0e:be:7d:c3:f3:87:a1:19:dc:63:35:c5:6f:da:5f:43:
73:ea:c3:58:40:16:1b:1f:76:de:d7:ef:0d:9b:5f:8e:0c:98:
67:96:b1:30:85:38:b4:5e:17:d5:95:dc:cc:09:69:fb:70:f9:
50:fc:9a:49:b8:dc:5f:83:30:a1:ab:a5:30:69:e1:fa:50:43:
75:0e:06:6e:42:69:55:91:9c:e7:c0:0f:d7:36:e2:18:83:e6:
9a:43:d0:a5:61:32:af:2f:5b:23:56:7d:1c:69:c1:2f:c0:4c:
d7:79:e9:17:9c:d9:bb:a6:45:14:ed:e8:41:e0:d7:d7:68:98:
26:eb:fb:65:9e:58:67:76:7f:fe:2e:e9:7d:02:e9:fb:dd:78:
b0:ab:6f:51:ec:0c:3d:2b:32:7b:31:de:77:ad:1f:69:20:2f:
6c:d8:41:91:8c:32:50:3f:10:3c:72:c6:04:c9:77:02:b7:1a:
6b:80:bf:97:64:d0:52:b5:a6:08:cf:a3:62:f4:9a:5f:27:62:
1f:15:c9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:13:38 2024 by rpki-client on console-fra.rpki-client.org