Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/uMgHSaeVFXUWRvScpg8IAP_1pQQ.roa
File: uMgHSaeVFXUWRvScpg8IAP_1pQQ.roa (raw, json)
Hash identifier: pOLA+Dy/NpbF6k0eW9/PXw2VG49Ny7MXBBRuqxcmp0M=
Subject key identifier: B8:C8:07:49:A7:95:15:75:16:46:F4:9C:A6:0F:08:00:FF:F5:A5:04
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 0191E5579805AE28AEFCE29FC8B47AB9895A
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/uMgHSaeVFXUWRvScpg8IAP_1pQQ.roa
Signing time: Thu 12 Sep 2024 08:26:48 +0000
ROA not before: Thu 12 Sep 2024 08:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208626
IP address blocks: 2a0d:3043:4ffa::/48 maxlen: 48
2a0d:3043:aa08::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:57:98:05:ae:28:ae:fc:e2:9f:c8:b4:7a:b9:89:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Sep 12 08:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8c80749a79515751646f49ca60f0800fff5a504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:c4:8a:60:16:26:5c:cf:3e:84:fc:5d:c6:
7a:40:7e:3f:51:9a:c8:13:6b:56:29:99:95:07:e2:
1e:5c:e8:2d:87:27:5b:52:9c:3a:71:11:9d:4f:87:
e1:c4:73:af:bc:cf:ca:21:8f:69:40:01:83:a3:41:
6a:32:24:27:ea:82:99:9f:28:a7:6c:5e:71:7f:33:
f0:16:d5:3c:97:59:66:9f:4b:c0:27:49:9d:5c:8d:
99:cc:03:33:36:1e:d8:ad:57:ec:bd:1d:6d:22:94:
84:ca:ac:2a:0f:a6:c0:5e:2f:c0:77:e7:73:46:67:
eb:5a:fd:61:1b:21:24:e9:aa:5f:88:de:5b:1c:5a:
eb:94:c0:48:56:f1:ac:3d:55:e7:e7:70:06:de:f8:
f9:47:28:85:b6:a1:44:ab:54:c1:65:2c:7a:b0:38:
43:75:15:14:fd:59:b9:5e:bc:24:12:31:b4:bc:d9:
02:a2:05:f2:6a:1e:d2:36:5b:02:f0:b8:90:45:94:
4c:fa:34:13:cc:18:12:f7:02:d2:eb:42:b4:11:ea:
9d:3a:5b:1e:6e:51:d6:da:19:c9:3c:b3:f7:80:4f:
62:c8:52:2d:13:11:3a:a0:cb:3c:9f:12:52:8f:7b:
38:16:55:10:55:d2:c5:4e:8e:92:bb:b0:6f:8a:3d:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C8:07:49:A7:95:15:75:16:46:F4:9C:A6:0F:08:00:FF:F5:A5:04
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/uMgHSaeVFXUWRvScpg8IAP_1pQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:3043:4ffa::/48
2a0d:3043:aa08::/48
Signature Algorithm: sha256WithRSAEncryption
22:62:2d:70:c2:c6:db:b8:3a:a4:b8:9a:e4:e4:3f:26:86:b7:
b1:17:83:e7:59:26:a5:79:e5:0a:7f:f4:3a:4e:f1:01:30:18:
cc:da:64:3e:81:cc:b5:df:3c:b8:15:c1:03:49:8d:f3:0a:3a:
df:87:eb:c8:0d:b2:e9:59:08:be:c1:65:f1:40:48:1c:f8:43:
3b:ec:0f:e8:87:57:28:76:2f:86:8f:74:a0:8b:b6:55:56:d2:
71:5a:aa:e6:08:47:f8:18:c6:8f:74:55:21:e1:43:f2:63:66:
8d:a5:18:5f:f7:77:60:ba:1f:5e:73:2c:b3:15:c7:d5:ea:65:
43:9c:d9:3f:8f:c8:e6:8d:06:1f:b2:98:38:e5:58:a5:1b:57:
51:40:b6:0a:a3:55:06:87:29:97:6d:b4:f4:24:75:43:e1:18:
c1:08:75:4e:e5:21:f2:7d:21:c7:83:9c:17:a1:93:d1:36:c1:
f8:bb:b0:d5:9c:32:ab:52:5e:72:3a:83:4e:0c:7e:2d:53:36:
7c:8b:40:ba:5f:0c:04:7d:a6:a8:66:8e:fa:3c:4b:0e:4e:d6:
01:a3:31:7c:8f:89:68:ba:b7:0d:63:cf:1c:3e:72:95:91:5b:
2a:ee:60:b1:61:92:1d:7a:93:aa:64:64:09:70:0d:e4:b4:7f:
7b:db:2d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:28:26 2024 by rpki-client on console-fra.rpki-client.org