Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/c4wvkMwuKsC24dUJqKCOfzLsw5U.roa
File: c4wvkMwuKsC24dUJqKCOfzLsw5U.roa (raw, json)
Hash identifier: eW0iXNFXUwKprxjEO7MVkMxN91unqsE9oMqztGcfaBg=
Subject key identifier: 73:8C:2F:90:CC:2E:2A:C0:B6:E1:D5:09:A8:A0:8E:7F:32:EC:C3:95
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 0190BB3DBDDE130E69A1879AFB419E05D70D
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/c4wvkMwuKsC24dUJqKCOfzLsw5U.roa
Signing time: Tue 16 Jul 2024 11:11:43 +0000
ROA not before: Tue 16 Jul 2024 11:11:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 2a14:15c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bb:3d:bd:de:13:0e:69:a1:87:9a:fb:41:9e:05:d7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Jul 16 11:11:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=738c2f90cc2e2ac0b6e1d509a8a08e7f32ecc395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b3:54:0a:ab:3b:7e:f6:36:9b:71:09:1b:a0:
ba:3c:dc:55:9d:12:5e:49:12:f5:a1:f2:45:37:04:
78:2b:f8:30:bc:ea:1b:aa:8b:41:36:59:05:c2:98:
4b:4e:23:56:2f:56:c0:c1:1d:e3:40:2c:74:9f:e9:
19:67:de:d6:69:49:61:8a:b4:7f:e9:eb:88:35:e1:
0d:e9:48:a2:92:fa:13:6f:3d:ec:69:9b:80:a7:3a:
0f:f6:c4:4e:27:d6:8c:da:3b:e3:21:fd:47:63:c1:
d6:6b:65:05:eb:11:76:9b:b1:a1:bb:d3:fa:27:e0:
f7:18:e4:3f:1f:89:3c:a1:a5:b8:a6:20:52:61:53:
5c:56:52:05:d4:ed:50:70:1c:ea:1a:af:06:cf:9a:
06:d9:b7:09:04:fc:1d:3f:da:d0:4b:bb:e0:65:2b:
a4:9b:23:37:56:5d:9a:93:4b:e0:fa:54:47:97:3e:
cc:50:00:6a:cb:a0:49:d1:58:56:a9:8d:09:a3:9b:
7f:14:6e:0e:a4:ef:c6:3f:50:e0:11:e9:00:cb:e0:
2e:dc:c6:94:09:4a:0a:20:88:29:aa:25:ee:70:6b:
e7:70:dc:0f:29:3c:77:7a:b4:af:0e:f1:20:22:3b:
b1:3e:ca:62:6f:a1:f7:04:96:3e:c2:af:b6:4e:24:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8C:2F:90:CC:2E:2A:C0:B6:E1:D5:09:A8:A0:8E:7F:32:EC:C3:95
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/c4wvkMwuKsC24dUJqKCOfzLsw5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
49:8d:b9:f9:40:0e:0c:79:17:71:7a:22:01:32:39:a7:98:c5:
30:96:c9:ea:a7:08:19:e4:80:06:f6:42:de:16:cc:11:d0:dd:
e5:dd:96:4b:b2:e6:72:4a:90:f7:90:20:93:56:b0:49:7e:71:
86:7c:94:23:a9:ac:d8:d3:4f:13:0c:87:df:35:54:9a:45:76:
ac:be:8c:c3:0a:10:a8:23:ca:af:a5:79:d5:59:76:88:47:8e:
da:7b:9f:e2:d6:e6:5d:17:b6:b1:85:10:d7:9b:e7:cb:6f:47:
c5:33:36:62:86:74:ac:cc:5e:07:15:89:52:a6:f9:6c:ff:ef:
59:25:5a:14:d5:a4:4d:6d:40:95:e0:83:63:20:f2:27:43:ea:
54:5c:a9:a4:0e:cc:0a:c8:a3:47:77:18:86:ed:28:e3:e1:36:
4e:dd:03:56:0c:13:d3:3e:40:8b:3c:8c:f5:21:b3:b7:ed:a8:
3c:8e:fd:10:5f:81:40:57:6b:af:16:de:0c:38:d1:67:c7:75:
95:bb:4b:b5:28:c6:42:0d:b6:0e:97:26:ae:cb:b5:45:c1:5c:
ac:e1:d9:65:c2:19:ee:0c:5a:b7:8f:f3:cf:4c:4a:26:be:61:
8b:41:c1:e8:db:c6:15:5d:05:13:9c:bb:b6:f8:3c:c1:ba:31:
5d:16:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:53:12 2024 by rpki-client on console-ams.rpki-client.org