Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/R9ECTGJZOxqblhgBDPVgQb4v0qM.roa
File: R9ECTGJZOxqblhgBDPVgQb4v0qM.roa (raw, json)
Hash identifier: Dh8mxxOXDXpFfKz9BJMTHn0EFRvpEfz0uo9R5VNrNqg=
Subject key identifier: 47:D1:02:4C:62:59:3B:1A:9B:96:18:01:0C:F5:60:41:BE:2F:D2:A3
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 01904A5AFABF130648DAD834A1DB439C4FDC
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/R9ECTGJZOxqblhgBDPVgQb4v0qM.roa
Signing time: Mon 24 Jun 2024 13:06:34 +0000
ROA not before: Mon 24 Jun 2024 13:06:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42375
IP address blocks: 2a09:9300::/29 maxlen: 29
2a09:ba40::/29 maxlen: 29
2a0c:1240::/29 maxlen: 29
2a0d:48c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:5a:fa:bf:13:06:48:da:d8:34:a1:db:43:9c:4f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jun 24 13:06:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47d1024c62593b1a9b9618010cf56041be2fd2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:07:bc:93:31:fa:fe:0a:4a:ff:93:76:1f:
97:c3:95:75:ec:09:2b:50:2e:50:46:34:2f:ec:79:
26:f1:41:24:49:17:c2:52:a5:82:90:20:a5:b4:23:
15:ec:78:9b:88:03:99:04:34:09:07:e2:ad:af:74:
8a:c8:37:4a:1e:ce:73:ed:3a:31:f3:73:2c:91:2c:
3e:ca:14:07:89:93:27:80:c6:d0:4f:ea:a5:21:e0:
97:a3:75:b6:f4:0c:46:92:63:01:77:51:d9:69:ac:
24:77:f7:60:d6:29:ac:ca:bb:d4:84:d6:ff:c3:fc:
5d:3b:30:20:0b:63:b8:66:2d:da:2a:2f:ee:b6:5f:
45:12:c0:1d:27:06:f3:fb:e4:26:e2:eb:ec:45:98:
df:aa:31:bc:35:77:26:97:a3:c9:6b:db:31:83:e2:
ea:6f:cd:ec:25:e6:19:55:8b:8e:42:15:c1:58:0c:
66:d4:9e:75:88:72:dc:7b:bc:86:40:b5:f0:42:c6:
c8:7b:99:f3:fd:cf:36:6a:33:d5:5f:4f:87:84:8e:
75:6e:12:04:a8:5d:2b:24:47:dc:9f:42:f4:1e:0c:
df:f1:76:c7:8a:20:2a:c5:8d:f1:33:02:85:3b:79:
9d:72:69:34:19:37:ff:22:ba:d0:0b:1f:a1:c9:ec:
30:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D1:02:4C:62:59:3B:1A:9B:96:18:01:0C:F5:60:41:BE:2F:D2:A3
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/R9ECTGJZOxqblhgBDPVgQb4v0qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9300::/29
2a09:ba40::/29
2a0c:1240::/29
2a0d:48c0::/29
Signature Algorithm: sha256WithRSAEncryption
6a:27:ef:19:36:38:74:27:e0:dd:e0:a5:6c:b1:b2:97:08:74:
e3:be:00:bc:e1:38:ed:e7:1b:bd:5d:50:36:6a:65:d8:59:f0:
7d:16:9d:50:a6:1b:93:9e:34:85:22:68:db:4b:e2:69:b0:2d:
b8:8a:cc:e7:72:6f:fd:3e:c4:cf:ca:aa:65:e9:0c:16:b2:61:
d7:e1:b5:46:27:99:a2:37:d2:db:c2:b0:8e:14:ce:6e:d6:e8:
ae:7f:80:28:88:08:2a:dd:5f:03:d8:aa:a4:88:6a:08:99:0f:
71:5f:b5:da:3c:65:d2:1e:f1:1d:47:46:1d:65:32:57:9e:4d:
fa:4c:1c:a9:f6:e8:a0:2c:b1:fa:ee:39:85:9e:df:9f:07:d3:
f2:cd:5f:9d:fc:d8:1b:1e:80:1b:f9:5d:79:f8:d0:2e:d4:a1:
f2:56:9d:1d:55:d2:cf:de:b5:53:c4:b8:80:aa:65:a6:25:06:
f0:30:43:ce:6f:3f:a6:6e:a4:8e:86:f6:6c:48:dc:8e:8a:c1:
5d:25:eb:f1:f8:ec:e3:9a:3f:f5:0c:49:5d:85:f3:a1:a6:e8:
cb:de:86:10:60:15:50:e7:26:85:14:4d:84:d8:4f:38:9d:b8:
ac:e7:58:28:9f:58:8b:9d:b4:11:73:ad:73:9f:cc:71:95:7c:
15:b8:3d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:28:26 2024 by rpki-client on console-fra.rpki-client.org