Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/KdrvQZPtkEQ-PLV7Nt5MzZuocPs.roa
File: KdrvQZPtkEQ-PLV7Nt5MzZuocPs.roa (raw, json)
Hash identifier: y9mEIbQcuhP+wY7BbJ39Ui5X/0WpFQvi+p9lv/WjCdY=
Subject key identifier: 29:DA:EF:41:93:ED:90:44:3E:3C:B5:7B:36:DE:4C:CD:9B:A8:70:FB
Certificate issuer: /CN=ede0294d1305bebaf6894642bfd92fd439825102
Certificate serial: 018E9A9FC2627563E64DA6CE1DF4D12FB459
Authority key identifier: ED:E0:29:4D:13:05:BE:BA:F6:89:46:42:BF:D9:2F:D4:39:82:51:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eApTRMFvrr2iUZCv9kv1DmCUQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/KdrvQZPtkEQ-PLV7Nt5MzZuocPs.roa
Signing time: Mon 01 Apr 2024 17:05:45 +0000
ROA not before: Mon 01 Apr 2024 17:05:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48953
IP address blocks: 2a00:66e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7eApTRMFvrr2iUZCv9kv1DmCUQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9a:9f:c2:62:75:63:e6:4d:a6:ce:1d:f4:d1:2f:b4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede0294d1305bebaf6894642bfd92fd439825102
Validity
Not Before: Apr 1 17:05:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29daef4193ed90443e3cb57b36de4ccd9ba870fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:15:75:db:a1:78:46:b1:dd:89:7d:d8:d1:6c:
e2:48:44:d9:b5:54:28:77:df:82:a5:ca:b2:8f:04:
17:b9:76:1c:81:b9:03:8f:24:f1:75:ed:8c:ff:0d:
dc:a1:65:33:1e:ad:ba:b1:34:92:34:3b:ee:80:17:
b3:04:4c:0a:90:08:b0:9f:d1:db:9d:4b:55:d2:88:
42:3a:09:19:39:bb:22:4b:b5:c5:a8:08:db:66:9b:
47:0a:88:94:68:d2:fe:71:c3:11:1b:2e:2e:66:33:
61:58:21:db:c8:be:fe:ea:72:75:9a:2a:ef:ce:05:
0f:61:5d:9e:a0:ca:f8:cd:78:e2:38:3d:72:81:9e:
00:29:3b:98:1b:47:1d:5d:01:fb:00:62:35:60:34:
56:73:ae:16:aa:48:81:fd:a3:15:10:42:a5:73:b5:
0f:52:55:8c:5e:17:ae:dc:31:2f:93:bb:0c:06:f0:
58:d6:46:2c:d9:a9:60:33:50:73:02:dd:73:2f:d4:
46:20:b6:34:c9:72:ef:9b:6c:99:fb:ce:10:e1:7c:
b5:7d:da:8a:fa:2b:72:74:8e:e1:ab:ee:9a:3a:c4:
21:47:70:ff:24:5a:4d:69:dc:cf:67:97:01:de:b9:
74:7a:97:46:41:38:44:11:e2:59:c1:2e:f9:c8:d3:
b3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DA:EF:41:93:ED:90:44:3E:3C:B5:7B:36:DE:4C:CD:9B:A8:70:FB
X509v3 Authority Key Identifier:
keyid:ED:E0:29:4D:13:05:BE:BA:F6:89:46:42:BF:D9:2F:D4:39:82:51:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eApTRMFvrr2iUZCv9kv1DmCUQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/KdrvQZPtkEQ-PLV7Nt5MzZuocPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:66e0::/32
Signature Algorithm: sha256WithRSAEncryption
87:62:6e:bb:bc:e7:c4:d5:69:eb:26:fb:11:86:53:5a:80:1d:
2f:54:7b:13:d2:a4:f3:4b:e7:86:28:a2:de:24:33:e0:a7:67:
ac:64:81:85:57:4a:b9:65:a5:7d:ee:3f:08:02:7f:53:5d:44:
94:15:79:0e:c4:cf:5c:c7:3b:a5:fb:bb:7b:b3:fe:82:c3:8f:
65:f8:01:cc:0c:98:f7:f4:fb:6a:71:c6:fc:f3:b2:00:67:83:
d6:35:e6:bb:df:9a:8b:e1:a1:15:2e:cd:97:c6:1e:0f:a8:ed:
4b:07:94:da:b5:4f:5f:38:c5:b9:43:b4:96:8c:db:1b:ee:d3:
3d:2c:9d:04:51:7b:46:b8:86:e7:25:05:1b:99:30:73:6f:80:
b5:e5:b0:72:82:4d:0f:39:e2:46:08:f2:c8:ac:f1:fd:ea:05:
0d:13:df:3d:b0:fc:2d:2d:85:03:11:3a:70:10:49:d3:c3:0b:
ee:a9:a1:82:52:7c:b6:50:5d:0a:c1:e7:7d:64:f4:82:62:06:
5d:f5:76:99:3c:e9:58:1f:dc:d5:77:0b:40:22:ea:83:9c:23:
7e:59:ed:b1:73:da:0c:7f:70:e1:64:c2:63:36:e1:c4:c3:80:
96:f0:82:27:31:96:f7:5d:0e:ed:66:f5:4a:32:d7:cf:05:40:
f5:44:74:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:26 2024 by rpki-client on console-ams.rpki-client.org