Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/KGsYxy2jkVuJd-Dpr-nIzUz80Qo.roa
File: KGsYxy2jkVuJd-Dpr-nIzUz80Qo.roa (raw, json)
Hash identifier: V9hRap3409GhTPwmS/VqtXvzi4LwAqub4+P0LWLmsP8=
Subject key identifier: 28:6B:18:C7:2D:A3:91:5B:89:77:E0:E9:AF:E9:C8:CD:4C:FC:D1:0A
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01933601D593675EAB429644652937D32F61
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/KGsYxy2jkVuJd-Dpr-nIzUz80Qo.roa
Signing time: Sat 16 Nov 2024 17:25:10 +0000
ROA not before: Sat 16 Nov 2024 17:25:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214168
IP address blocks: 2a12:8580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:36:01:d5:93:67:5e:ab:42:96:44:65:29:37:d3:2f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Nov 16 17:25:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=286b18c72da3915b8977e0e9afe9c8cd4cfcd10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:50:a1:42:0d:a5:5a:95:37:c4:4f:80:ed:79:
4b:da:fd:b4:09:32:17:ff:b0:34:ba:f2:92:b1:93:
cb:6a:29:1d:bf:f0:48:10:7e:7c:77:77:84:79:66:
78:54:be:00:7b:13:c7:53:bc:ee:75:29:59:98:16:
2d:ec:e3:81:81:dd:30:0b:ca:80:8a:54:80:b9:a8:
2b:7c:5a:f0:f1:d0:26:28:70:82:00:3c:11:1a:52:
e5:12:fe:d2:36:16:e4:c0:97:43:38:56:50:0e:19:
06:f1:00:10:cb:84:3e:05:66:83:77:1c:62:0a:83:
07:6f:c1:07:67:0b:ff:87:36:2e:dd:93:e3:e7:e0:
1d:af:44:1b:4e:3b:70:9d:c9:c2:4a:a0:1c:4a:23:
11:0e:62:1a:d9:b5:0c:8c:d2:69:7c:0f:97:50:c9:
94:9e:a1:38:a1:b7:50:05:52:6f:bb:43:8e:92:60:
6f:1a:bc:fc:06:9a:25:06:f0:88:e7:29:13:9b:84:
e9:64:05:3f:c1:0d:1a:21:b4:6d:6d:8c:10:9e:c9:
6a:dc:68:2e:9d:a4:1a:47:e3:9c:de:b1:e2:87:67:
6a:11:8e:76:3f:ed:c6:eb:f6:87:92:61:7a:43:5a:
67:a6:4f:e9:7a:6e:e8:9e:84:4d:73:07:5e:27:de:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6B:18:C7:2D:A3:91:5B:89:77:E0:E9:AF:E9:C8:CD:4C:FC:D1:0A
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/KGsYxy2jkVuJd-Dpr-nIzUz80Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8580::/29
Signature Algorithm: sha256WithRSAEncryption
6b:2f:9a:a8:16:04:5a:06:4c:2e:06:92:01:43:66:fa:6e:0e:
99:29:0f:d2:ee:72:e6:3e:4f:2c:d7:49:41:c9:7c:0f:d3:ad:
11:16:4a:44:38:f2:90:e5:db:10:2e:3c:96:b4:0b:df:fe:49:
b2:d7:de:32:2d:14:ff:6e:c5:ea:d8:48:f5:13:4d:30:5d:53:
89:40:71:fc:5d:76:e5:e2:1d:50:fc:ca:cf:b7:39:ff:1f:6a:
66:b4:01:25:d7:24:fe:7c:e6:3a:6a:90:a7:41:db:43:0a:65:
49:fb:94:67:9d:d0:2b:97:72:d8:f6:c7:54:11:a6:40:81:dd:
c9:fa:96:e3:4e:7a:a6:92:0f:3a:bc:a0:11:45:35:4e:42:67:
06:4d:b2:78:bf:f7:b6:de:ba:91:09:38:30:af:66:6f:df:8f:
f5:d6:69:63:ce:00:4c:52:24:89:09:d6:43:5c:37:fb:f2:f7:
26:c8:05:15:a9:2d:44:96:79:55:45:d9:7b:89:4a:0d:20:e3:
3d:ce:81:37:69:a7:2e:c1:0e:f0:ba:db:5f:d3:75:7b:78:b1:
99:23:ea:52:db:b3:a5:3e:7c:e6:01:af:0d:a0:4f:9f:43:a6:
c5:d2:8c:45:67:0a:be:6d:a8:c7:dc:bd:68:3d:45:57:ba:6f:
62:a9:6f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:50:17 2024 by rpki-client on console-ams.rpki-client.org