Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/PwUZ7n4yuTlqmWo9-cYjo4aGngw.roa
File: PwUZ7n4yuTlqmWo9-cYjo4aGngw.roa (raw, json)
Hash identifier: P4sTLh1bsmJSU9Mo+JJ1w6TCxPWXENK9YTu3l198pcg=
Subject key identifier: 3F:05:19:EE:7E:32:B9:39:6A:99:6A:3D:F9:C6:23:A3:86:86:9E:0C
Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial: 01908A089D5E863A9A99B2D8573AF74560EA
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/PwUZ7n4yuTlqmWo9-cYjo4aGngw.roa
Signing time: Sat 06 Jul 2024 21:52:18 +0000
ROA not before: Sat 06 Jul 2024 21:52:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214587
IP address blocks: 2a13:7fc0:1010::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8a:08:9d:5e:86:3a:9a:99:b2:d8:57:3a:f7:45:60:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Validity
Not Before: Jul 6 21:52:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f0519ee7e32b9396a996a3df9c623a386869e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:06:f6:79:c4:20:d8:1b:81:b1:b9:f7:a3:
7d:f1:cc:fd:b5:90:5a:d1:04:22:e1:5d:b9:9b:ab:
3b:3b:9b:02:2f:91:9c:97:e4:b3:29:9e:4b:31:17:
90:83:ec:08:8a:a1:90:82:5a:7f:c1:2e:d4:68:f9:
75:e6:06:d7:b5:a3:83:05:48:be:d6:f9:2d:07:ea:
89:8c:be:3b:2a:9f:93:9b:e9:b3:13:4c:21:49:98:
35:f8:41:b7:54:68:e9:67:4b:17:74:a6:6d:f1:3f:
97:3c:ef:31:22:ef:81:cf:9f:18:6c:d6:5b:a2:5d:
19:69:27:c3:8c:f7:22:cf:03:f0:d5:ec:5c:1c:2d:
96:b3:6a:70:5e:ab:be:7e:43:c3:2e:75:d0:07:32:
57:ca:c2:db:a2:dc:eb:da:05:cd:b8:52:3f:e2:60:
a8:89:56:44:f1:aa:a3:16:a5:ee:85:55:c7:80:1a:
e7:fd:c5:63:99:ac:99:f0:f6:de:4f:fa:f6:e6:59:
45:a9:fa:07:88:02:c2:7a:cd:16:43:38:e0:46:af:
0a:6b:f3:a1:94:98:87:92:b4:d0:ea:6f:14:4e:59:
70:5d:69:59:98:36:9a:73:d0:fe:0b:c7:d1:d0:cf:
7d:ee:3f:65:f6:a7:f9:14:8d:58:41:df:74:f4:44:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:05:19:EE:7E:32:B9:39:6A:99:6A:3D:F9:C6:23:A3:86:86:9E:0C
X509v3 Authority Key Identifier:
keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/PwUZ7n4yuTlqmWo9-cYjo4aGngw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7fc0:1010::/44
Signature Algorithm: sha256WithRSAEncryption
8d:52:6b:0f:20:93:d1:9f:15:63:a6:53:c9:7b:56:eb:28:91:
22:1d:f7:5d:b7:08:0a:42:20:56:c8:7b:fa:29:71:fb:4f:b6:
e8:5a:07:bc:9a:43:0d:36:ec:2f:5e:63:ce:76:6d:3e:28:8c:
f4:fb:6f:b8:3f:9a:ce:62:44:24:93:65:df:8a:d0:e4:58:d1:
a1:8b:cc:d6:8b:81:0c:c1:88:c0:b9:98:81:d1:12:69:1e:be:
89:a8:0e:c2:24:a9:ea:1f:36:68:06:df:2c:70:95:5d:0d:67:
56:93:f7:78:0a:8b:cc:df:37:b5:ed:8b:0c:64:c8:60:7d:bd:
d5:0c:fa:54:3c:54:94:de:cb:31:ca:1c:24:f5:bb:74:11:7a:
0c:66:bc:c1:ed:c6:7e:d2:fd:f4:a9:7d:93:7c:ee:65:ca:20:
a2:f5:9d:71:12:1f:1e:b2:c9:61:2a:17:96:b7:fd:de:bb:b1:
3a:22:d5:22:63:4e:b7:11:85:c0:46:34:33:34:f1:16:f5:ec:
dc:76:cc:a1:80:36:b6:88:d9:b3:10:30:e7:38:85:3b:bf:41:
97:b3:10:89:f0:e5:cf:af:17:0b:4f:42:a8:93:fa:5c:cc:87:
a4:8f:e3:11:69:15:d1:84:8c:8d:03:99:52:48:31:3a:7e:6d:
bc:0f:0c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:04:37 2024 by rpki-client on console-fra.rpki-client.org