Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/ShMFVu7J7steUB1pNP3Dj7oVAgI.roa
File: ShMFVu7J7steUB1pNP3Dj7oVAgI.roa (raw, json)
Hash identifier: s443yPaFsZs+pnSGHJ7/+5YnhtFDumoGdQQGsL+PpoU=
Subject key identifier: 4A:13:05:56:EE:C9:EE:CB:5E:50:1D:69:34:FD:C3:8F:BA:15:02:02
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 01915647EC21777D3A7E0C1E3F2FA7ECFD59
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/ShMFVu7J7steUB1pNP3Dj7oVAgI.roa
Signing time: Thu 15 Aug 2024 13:43:59 +0000
ROA not before: Thu 15 Aug 2024 13:43:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 2a03:efc0:4900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:56:47:ec:21:77:7d:3a:7e:0c:1e:3f:2f:a7:ec:fd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Aug 15 13:43:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a130556eec9eecb5e501d6934fdc38fba150202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f8:78:c0:89:b1:3c:8e:dc:a9:f9:a5:f4:fb:
01:ec:5a:39:7c:85:eb:50:d3:5e:18:a7:34:84:b8:
db:31:7d:4b:56:89:dc:34:d5:da:6c:2a:a2:15:17:
06:4e:ec:03:e0:cf:76:05:bf:6c:db:d1:5e:ad:49:
a0:1b:d0:e8:97:da:76:f7:e4:2b:86:f3:d2:e6:fd:
07:a3:02:fc:d6:4b:2b:9d:e0:2c:95:9e:d8:9c:89:
c4:da:22:4d:b3:09:2b:ac:f7:b7:38:64:a9:62:26:
0d:18:63:c6:c4:41:08:44:dd:69:68:85:56:ef:c3:
b1:e6:f1:fc:cc:1b:99:bd:d4:84:7d:34:dd:a5:ba:
e2:e6:c4:13:9f:76:91:5d:28:e1:ec:de:26:5f:9d:
3d:f9:93:a2:27:12:d9:94:ce:8c:cf:74:f1:a7:8f:
ef:ce:f2:bd:97:a7:51:66:fe:be:d8:f6:2b:db:c1:
6f:6c:76:02:c9:d5:36:1c:01:c5:54:4a:89:fa:03:
2e:05:69:94:59:b8:88:a2:b8:34:cb:91:c8:1f:79:
30:4b:0b:51:95:0e:3e:c4:70:90:9d:f5:68:59:9c:
92:db:c5:58:05:d2:db:19:84:ec:8a:1d:c3:b6:c9:
6d:5e:97:b3:20:b8:46:5b:d8:43:9d:31:81:7b:97:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:13:05:56:EE:C9:EE:CB:5E:50:1D:69:34:FD:C3:8F:BA:15:02:02
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/ShMFVu7J7steUB1pNP3Dj7oVAgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:efc0:4900::/40
Signature Algorithm: sha256WithRSAEncryption
c4:fc:9c:a3:41:a1:a4:0b:0c:09:ad:c9:30:a3:06:41:fa:6a:
b7:7c:de:e8:de:e7:45:76:35:f9:dc:ff:63:eb:d9:14:41:a6:
58:77:68:ee:ed:9f:d6:22:48:64:52:10:3a:43:fe:1d:3d:87:
e0:09:12:73:8c:c9:11:a5:2b:59:a2:eb:3c:07:66:be:ad:2d:
20:c7:21:d6:44:80:a7:20:b5:c5:2f:56:be:d4:dd:84:0d:b8:
51:3f:bc:49:80:2d:e0:f2:2a:be:34:cf:c2:44:09:d9:99:29:
8e:8a:80:a4:2b:8f:83:d8:cc:96:6f:31:62:33:5f:a7:db:32:
c4:bb:b4:65:4f:21:16:ac:63:81:03:b6:3c:ea:cb:0b:9e:d4:
1a:c5:b4:ed:cd:a2:59:53:32:51:03:f7:74:bd:2b:48:8b:e9:
40:6c:9e:cb:4e:9a:23:d4:25:2d:dd:de:b5:50:a4:78:b3:a2:
61:59:80:b6:53:be:02:42:73:69:cf:e8:22:39:f3:95:97:a5:
98:01:72:3a:b2:48:f1:8b:b2:85:c6:38:0b:a0:e4:94:9d:20:
59:2c:93:64:d8:42:ed:9c:b8:1c:66:08:45:86:56:2f:a2:b1:
08:94:c7:a9:3f:02:bb:7a:8a:de:cf:19:3b:84:92:27:63:4d:
b8:32:f7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:16:26 2024 by rpki-client on console-ams.rpki-client.org