Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/42O1KQJIVmAXTNycP2c4gN4z-2k.roa
File: 42O1KQJIVmAXTNycP2c4gN4z-2k.roa (raw, json)
Hash identifier: 1fLc7xFTaje52UaGTE98O17d2fmYmuh6AGVcRd6kq4E=
Subject key identifier: E3:63:B5:29:02:48:56:60:17:4C:DC:9C:3F:67:38:80:DE:33:FB:69
Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Certificate serial: 0190E513E5746738D4B0BE0D8D420C047EA4
Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/42O1KQJIVmAXTNycP2c4gN4z-2k.roa
Signing time: Wed 24 Jul 2024 14:10:04 +0000
ROA not before: Wed 24 Jul 2024 14:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47464
IP address blocks: 2a07:ca00::/30 maxlen: 30
2a07:ca04::/32 maxlen: 32
2a07:ca05::/32 maxlen: 32
2a07:ca06::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e5:13:e5:74:67:38:d4:b0:be:0d:8d:42:0c:04:7e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Validity
Not Before: Jul 24 14:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e363b52902485660174cdc9c3f673880de33fb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:10:12:58:f8:e8:77:e3:de:ee:d0:70:52:56:
3e:f7:48:f2:94:4c:75:1b:fc:5d:ee:5b:2f:4f:63:
0c:10:de:d3:b3:64:e8:60:50:9f:99:5e:38:30:2a:
44:d3:49:94:dc:9d:c8:38:1d:cb:67:c2:5b:33:b8:
6e:17:ef:ba:58:1d:8a:ab:a2:d3:ac:50:67:af:f7:
df:6b:81:2c:b8:c5:7b:13:97:68:08:a8:50:2e:06:
5d:34:f6:f3:28:6d:fc:47:d3:77:91:e4:24:ff:12:
ab:32:40:43:57:fd:28:db:fe:80:4c:70:4c:d0:8c:
84:c5:6e:6a:d5:e7:23:e1:8a:30:d8:1e:29:73:22:
6b:af:1a:42:a7:0a:af:5f:3f:96:36:73:0f:05:92:
b6:eb:8c:cc:f3:d7:d6:b9:48:b9:a4:a0:24:51:4a:
ae:ba:23:6b:66:7d:48:cd:46:32:55:80:48:b2:ac:
a5:27:24:f6:3a:5e:58:64:c9:7b:9a:6d:b6:9d:58:
bc:74:ba:6e:b4:84:47:a7:78:39:d4:05:91:1b:91:
db:a2:3b:74:c2:72:db:b6:24:ae:f4:f4:88:b0:cc:
cd:bd:f0:ed:15:30:e7:50:6b:38:2c:e1:97:d2:9a:
7d:b0:d7:fd:b7:22:20:30:e0:c2:52:28:38:ec:b7:
9b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:63:B5:29:02:48:56:60:17:4C:DC:9C:3F:67:38:80:DE:33:FB:69
X509v3 Authority Key Identifier:
keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/42O1KQJIVmAXTNycP2c4gN4z-2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:ca00::-2a07:ca06:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
37:13:b1:76:ed:b3:58:f9:ea:80:f7:65:5c:49:35:a9:f6:e6:
d8:10:63:bf:85:ce:6b:57:eb:30:da:7d:c4:53:7e:65:88:b8:
c0:b0:08:d8:95:99:b5:c8:3c:10:0a:54:5e:02:c1:45:b0:ab:
b9:16:17:10:80:05:14:44:af:e0:d2:85:ef:56:bc:86:62:d9:
e6:0a:bf:af:db:49:03:32:f7:27:87:42:df:42:34:46:05:e0:
28:fd:bc:cf:d9:29:34:61:ab:5a:4a:74:38:be:0c:1b:fe:20:
ad:2a:c8:63:c9:64:08:2a:cf:38:07:69:45:3a:b1:53:a5:c8:
4c:61:e1:49:34:bb:18:76:86:93:ac:cb:27:6f:96:00:90:72:
16:bf:f6:dc:e9:28:c8:4c:24:3f:9f:eb:db:6b:99:1a:05:92:
ba:b1:20:5e:32:cb:44:d7:c5:c6:19:2e:22:6d:13:47:ab:a9:
84:39:4a:be:90:47:8a:52:ed:8c:84:64:81:8e:fa:f9:3b:c7:
e7:8b:4e:eb:b4:66:3b:2a:a3:57:65:41:f1:d8:94:fe:9c:b8:
96:28:47:f7:b4:dd:4b:91:14:90:4d:97:de:a2:74:ed:ee:78:
58:fd:a3:b2:89:c1:fc:39:6c:a9:ad:4c:0d:b2:6c:e4:02:3c:
80:45:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:44:16 2024 by rpki-client on console-fra.rpki-client.org