Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/pf-sUcMnJTzGuE0tTSqp66CHGbQ.roa
File: pf-sUcMnJTzGuE0tTSqp66CHGbQ.roa (raw, json)
Hash identifier: lC1bgVMBjkcyPWbn4lUGPwzEEqvhIuo5n8FTg6Es/vc=
Subject key identifier: A5:FF:AC:51:C3:27:25:3C:C6:B8:4D:2D:4D:2A:A9:EB:A0:87:19:B4
Certificate issuer: /CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Certificate serial: 0191D670C223541C8B044774E45C7D170B75
Authority key identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/pf-sUcMnJTzGuE0tTSqp66CHGbQ.roa
Signing time: Mon 09 Sep 2024 10:59:59 +0000
ROA not before: Mon 09 Sep 2024 10:59:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215624
IP address blocks: 2a14:5480:1012::/48 maxlen: 48
2a14:5480:1022::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d6:70:c2:23:54:1c:8b:04:47:74:e4:5c:7d:17:0b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Validity
Not Before: Sep 9 10:59:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5ffac51c327253cc6b84d2d4d2aa9eba08719b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:86:50:85:b5:eb:49:03:2f:02:f5:a0:0a:
c3:91:f2:75:68:4d:a4:c3:fa:70:f4:1b:14:45:4b:
c9:00:5c:60:b1:00:5a:3e:d6:76:e9:28:f4:78:ba:
eb:38:a4:38:d5:e2:64:e6:f1:11:64:d2:26:0d:dc:
da:0f:b2:06:cb:93:7e:35:61:d2:f2:0b:83:a5:2a:
06:c2:0c:d1:1c:52:ed:0d:8a:ef:7c:62:b2:f2:fe:
11:56:2f:71:c8:f3:f8:9b:9e:65:a8:d1:53:18:2b:
5e:c9:20:2f:91:31:eb:bd:1f:ef:40:35:36:9d:2b:
36:7e:be:98:be:8f:14:48:3e:c6:da:3b:34:e4:e1:
1b:8d:d8:48:89:71:2c:44:7c:7c:7c:b8:f7:a0:2c:
8d:cd:74:08:de:e0:01:6e:e0:92:36:d5:96:34:74:
87:5f:e3:07:7c:d8:4a:8d:dc:e5:3b:66:61:6f:b0:
b4:04:93:a1:ba:5a:89:21:95:b3:39:20:c5:4f:bb:
d8:c2:75:f3:1e:d5:b1:df:64:8d:7b:b3:8c:68:e2:
28:84:62:84:ad:07:c8:f2:70:2a:49:16:6e:01:a9:
22:d6:3f:43:45:f8:17:47:b0:4e:32:89:18:23:e9:
ba:b9:e6:24:9d:82:38:21:40:b2:0f:df:4a:fd:3c:
b7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FF:AC:51:C3:27:25:3C:C6:B8:4D:2D:4D:2A:A9:EB:A0:87:19:B4
X509v3 Authority Key Identifier:
keyid:CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/pf-sUcMnJTzGuE0tTSqp66CHGbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:5480:1012::/48
2a14:5480:1022::/48
Signature Algorithm: sha256WithRSAEncryption
72:66:fa:fa:2d:5a:8c:78:ad:d0:a1:78:2e:98:6c:8d:4a:19:
7d:cf:c2:07:b8:f8:65:a5:45:eb:8d:2c:e8:be:69:6b:9d:e4:
8c:25:1d:06:b0:73:2e:22:0a:4d:69:4b:6b:4e:3c:32:ec:0f:
5c:87:20:33:c6:d9:31:1d:8c:d8:44:55:ad:f5:98:79:69:44:
9f:a9:ce:b7:94:3e:a3:1f:f9:eb:e6:e6:69:0e:92:e0:f8:2c:
29:dd:f8:68:8e:23:90:f0:09:f6:15:ce:2d:29:db:3f:8d:90:
ea:71:70:72:03:d7:cc:d0:66:c2:47:e0:cc:2c:2f:85:20:dc:
82:87:b7:89:da:96:63:4e:d9:cf:d1:5a:57:c5:8a:3e:d8:1e:
c1:4a:b9:cb:01:8c:96:a7:7a:10:b0:ea:05:76:f2:6d:67:2b:
85:46:7d:71:1e:65:64:65:5c:66:1f:20:f2:42:9d:d4:e0:77:
92:48:62:ad:b1:98:3c:43:05:73:d3:d2:e1:8f:07:a0:09:a2:
01:1d:7c:a5:8e:2e:75:28:00:36:26:d2:7e:9a:e3:50:0d:e0:
f9:a7:18:b0:e3:2f:ef:83:f7:5a:98:53:ed:ab:a5:30:ec:b6:
20:e0:e0:d9:46:76:8b:cd:91:00:e7:b3:ee:36:2f:05:01:a5:
09:cf:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:05 2024 by rpki-client on console-fra.rpki-client.org