Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/2qpwPtO117wx8ldF630nYbuP2vw.roa
File: 2qpwPtO117wx8ldF630nYbuP2vw.roa (raw, json)
Hash identifier: 3kILIgllitRMBhJOSXJjjzmro1lD5tTdHNhxtcDnL8A=
Subject key identifier: DA:AA:70:3E:D3:B5:D7:BC:31:F2:57:45:EB:7D:27:61:BB:8F:DA:FC
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019345169DD52726155AAFFAFBEAF73277F4
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/2qpwPtO117wx8ldF630nYbuP2vw.roa
Signing time: Tue 19 Nov 2024 15:42:10 +0000
ROA not before: Tue 19 Nov 2024 15:42:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213861
IP address blocks: 2a14:2dc0::/32 maxlen: 32
2a14:2dc1::/32 maxlen: 32
2a14:2dc2::/32 maxlen: 32
2a14:2dc3::/32 maxlen: 32
2a14:2dc4::/32 maxlen: 32
2a14:2dc5::/32 maxlen: 32
2a14:2dc6::/32 maxlen: 32
2a14:2dc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:45:16:9d:d5:27:26:15:5a:af:fa:fb:ea:f7:32:77:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Nov 19 15:42:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=daaa703ed3b5d7bc31f25745eb7d2761bb8fdafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:e8:a4:4d:83:b4:9a:3e:b2:77:7a:0d:3d:
08:8b:31:a1:af:d5:6b:54:29:25:a7:03:68:ea:e4:
6b:52:34:dc:2b:61:f2:2d:eb:19:d2:7e:0d:24:8b:
b2:25:00:7e:88:e0:ff:0c:3b:a9:70:3b:7b:ae:6e:
ef:96:c5:11:50:19:63:0a:1a:76:f2:39:6e:47:0d:
c3:52:ed:df:d0:37:9e:ff:5b:44:a5:13:27:41:09:
ce:1b:91:18:dc:eb:9c:fa:68:28:7d:d4:71:8e:15:
1e:9e:2c:25:01:31:23:ff:9f:b6:a1:57:d2:4b:2c:
10:a0:9d:57:28:43:cd:0d:6a:1d:b0:3e:0a:fc:71:
d7:f8:89:48:3b:71:b1:e9:04:f4:a8:79:5b:35:bb:
ec:f8:e6:1f:8c:16:26:9d:3d:48:ae:87:c7:ff:1d:
44:83:4e:95:e9:c4:f6:0e:99:f0:6f:e1:20:dd:fe:
f0:82:c0:e9:0c:38:71:d7:d3:a4:ce:39:d0:13:13:
81:04:d2:9f:20:d8:f4:45:dc:65:4c:19:13:63:71:
61:07:d1:1f:ce:4a:84:cf:62:48:f4:d1:bd:fe:d4:
6c:0e:4f:29:e3:ea:de:57:c5:45:49:0c:ac:15:98:
a2:f9:63:55:ce:ae:01:92:78:ef:dc:e3:44:02:94:
f7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AA:70:3E:D3:B5:D7:BC:31:F2:57:45:EB:7D:27:61:BB:8F:DA:FC
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/2qpwPtO117wx8ldF630nYbuP2vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:ba:25:88:88:6b:a3:6f:55:72:44:a7:af:f8:28:d8:e5:dd:
b6:99:82:08:56:34:e8:22:6d:20:eb:49:22:c5:91:db:77:8f:
db:8c:75:24:23:83:c9:b2:76:0a:b8:7a:1b:b6:9b:63:16:8a:
36:db:cf:cd:30:4e:94:d5:7e:b0:6b:00:d9:7e:4f:30:ea:b8:
85:30:2e:df:d3:ce:6f:a2:06:26:18:d5:da:9d:90:33:63:6f:
92:e4:b5:8e:0f:cb:81:e8:19:71:76:3a:bf:45:6d:be:f4:ed:
84:82:10:31:33:d7:88:e0:4e:40:82:72:cc:d3:46:6b:2a:c6:
84:82:0c:59:d0:ee:cd:2b:8d:c4:4d:61:4a:cf:a1:1d:91:5a:
6c:f0:c2:49:5e:12:c0:62:c5:64:75:97:83:04:cc:20:29:4c:
90:8c:9e:c4:93:b5:d2:e7:4a:3a:84:ab:63:70:b9:43:93:c1:
61:00:3c:d9:3b:9b:97:a8:fe:4d:0d:c7:29:dd:b5:78:64:92:
30:5f:e8:63:ad:a0:ac:3d:9c:69:bf:32:c1:20:4c:6a:24:ab:
3d:ad:be:41:82:44:ed:ca:88:ad:27:04:19:4d:11:59:93:eb:
f4:4c:03:60:14:cd:53:69:03:95:f2:ef:80:e5:a4:63:71:50:
ff:90:20:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:26:03 2024 by rpki-client on console-ams.rpki-client.org