Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/2TSIfBTRgmlfBw7ipXYk7NVzEW0.roa
File: 2TSIfBTRgmlfBw7ipXYk7NVzEW0.roa (raw, json)
Hash identifier: 3L31qAO0nfqyDyOihvC0DbxSx7fKG5EtYVjrJz3psDc=
Subject key identifier: D9:34:88:7C:14:D1:82:69:5F:07:0E:E2:A5:76:24:EC:D5:73:11:6D
Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial: 018D8FBEFEE5EF91FDB21C7344BA7797C799
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/2TSIfBTRgmlfBw7ipXYk7NVzEW0.roa
Signing time: Fri 09 Feb 2024 21:21:15 +0000
ROA not before: Fri 09 Feb 2024 21:21:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47526
IP address blocks: 2a13:ccc0::/29 maxlen: 29
2a13:ccc0::/32 maxlen: 32
2a13:ccc1::/32 maxlen: 32
2a13:ccc3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8f:be:fe:e5:ef:91:fd:b2:1c:73:44:ba:77:97:c7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Validity
Not Before: Feb 9 21:21:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d934887c14d182695f070ee2a57624ecd573116d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:e8:d2:53:63:76:c9:7a:b8:bb:d2:94:f9:
06:31:b5:9a:b8:73:e8:cc:21:87:c0:73:72:6f:ab:
f1:11:53:68:bc:6e:7e:63:60:e9:92:4d:4a:33:3a:
3a:1b:f3:9d:6a:99:4d:c3:0c:e6:e8:1f:43:0c:2d:
34:29:12:47:55:6f:34:0a:bc:5a:23:ed:e3:e4:21:
58:06:ee:f9:56:b7:12:ff:2f:53:30:93:73:e3:6c:
a8:a2:6c:72:ea:e7:89:a8:fe:36:5e:8f:26:cc:e6:
2c:c2:81:f6:f3:61:c6:e7:9e:96:6d:dc:f6:c1:35:
38:25:3b:62:33:fc:d7:50:06:1b:4e:f2:f6:a5:a8:
ee:34:6e:de:36:18:3a:7b:9d:f2:ec:d3:d2:12:d8:
eb:df:a7:e6:5d:7a:7b:3e:07:6f:66:0a:b2:dd:ea:
c8:a1:d1:88:58:a8:75:f2:b4:0f:fd:c8:ce:2c:54:
95:90:29:68:12:b3:de:57:f7:c8:b6:68:6b:67:05:
91:b3:e9:c1:67:5c:63:83:f4:77:22:d9:17:a5:9b:
cf:07:48:3b:3e:04:74:dc:47:91:75:7f:3a:5b:5b:
5e:46:dd:d3:29:6e:fa:36:8a:a7:af:68:fb:cf:7c:
db:1e:c8:21:f4:5e:13:99:89:6a:f7:1b:30:32:de:
7b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:34:88:7C:14:D1:82:69:5F:07:0E:E2:A5:76:24:EC:D5:73:11:6D
X509v3 Authority Key Identifier:
keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/2TSIfBTRgmlfBw7ipXYk7NVzEW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ccc0::/29
Signature Algorithm: sha256WithRSAEncryption
a3:6d:a5:f6:c4:b5:cb:20:b7:6c:ee:fd:15:fb:7b:9e:c0:4a:
69:7e:8f:2e:d7:3f:89:1a:25:61:fb:4e:c6:39:0d:7c:d1:1c:
29:c0:2a:45:54:1e:5c:e9:45:9c:74:2a:80:8b:dc:f3:bf:12:
ad:a0:f0:24:1b:f2:f5:af:3d:1e:43:09:23:30:d8:31:84:4d:
16:43:4f:ec:81:fc:7d:b6:c1:01:4f:d7:2f:10:a0:13:c8:d2:
79:91:ac:bb:d9:09:c3:58:ca:b2:3c:fd:34:9e:89:71:d3:ad:
3d:4c:f9:87:80:49:0e:09:78:62:52:97:07:ce:cb:20:c4:5c:
42:3c:2e:2d:be:ee:1d:77:fb:3c:ec:cc:ec:2d:0c:56:af:31:
ae:0c:d9:1e:58:e9:22:9c:92:e8:06:84:3d:bc:f8:e5:9f:de:
96:21:c8:54:48:1b:3f:c2:82:a6:7c:73:08:71:63:a7:a7:d6:
c7:81:68:d7:a2:f9:d9:7a:a8:a0:f6:ef:c8:66:06:87:4f:48:
42:af:db:e6:05:98:49:7a:b1:8d:05:c7:04:fb:21:de:80:80:
0f:b5:f2:1f:7f:c7:c7:00:3b:42:62:cd:a1:72:2d:aa:d1:6e:
e9:71:bf:25:16:05:17:31:db:5b:9f:0d:a8:8a:0c:4f:a4:a3:
3e:00:f6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:59:14 2024 by rpki-client on console-fra.rpki-client.org