Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/1-qJ7y3EK6lVL1Sy_0g1so5UbMqs.roa
File: 1-qJ7y3EK6lVL1Sy_0g1so5UbMqs.roa (raw, json)
Hash identifier: c/j0Wgzo4oxrXRd4nteHS0xyShUt1mNqYYYXwkvgLBw=
Subject key identifier: FA:A2:7B:CB:71:0A:EA:55:4B:D5:2C:BF:D2:0D:6C:A3:95:1B:32:AB
Certificate issuer: /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Certificate serial: 01930741F180DB0079DC90515818E2E94513
Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/1-qJ7y3EK6lVL1Sy_0g1so5UbMqs.roa
Signing time: Thu 07 Nov 2024 15:33:02 +0000
ROA not before: Thu 07 Nov 2024 15:33:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209389
IP address blocks: 2a12:7a40:9901::/48 maxlen: 48
2a12:7a40:9911::/48 maxlen: 48
2a12:7a40:9921::/48 maxlen: 48
2a12:7a40:9931::/48 maxlen: 48
2a12:7a40:9941::/48 maxlen: 48
2a12:7a40:9951::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:07:41:f1:80:db:00:79:dc:90:51:58:18:e2:e9:45:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Validity
Not Before: Nov 7 15:33:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faa27bcb710aea554bd52cbfd20d6ca3951b32ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:06:e8:0c:bf:b0:5d:63:60:a3:33:42:54:
37:44:5c:78:6b:34:37:c9:74:1e:ff:ee:e8:04:b3:
92:37:b5:c6:13:39:51:7a:d9:1a:a3:62:cb:e8:8c:
7b:4c:49:6b:51:cf:8b:5c:92:74:9a:45:8a:6d:48:
d8:58:0f:c2:f0:b7:c3:7a:e5:ac:ed:ae:e6:1f:0e:
f2:af:fc:43:f6:8a:e4:7c:90:b2:ea:5d:e0:8a:0b:
90:5d:44:20:b5:44:da:2e:74:ec:35:36:91:d9:c7:
22:93:d9:2e:42:96:34:15:f0:3f:00:a2:5b:f2:b0:
e4:93:0c:7c:16:4a:9b:bc:a3:6d:69:43:a8:2d:79:
f1:06:05:44:5a:1c:de:c2:f7:48:8c:de:a3:e7:c5:
61:48:d6:d5:50:e0:b4:0e:8e:b7:02:1b:9f:b3:94:
c9:34:a6:ef:06:66:2c:c5:6a:30:0e:4c:bd:21:07:
fa:fc:63:0d:49:8a:9f:7b:b6:db:4c:30:ab:97:ea:
c6:df:af:77:b9:65:a7:78:71:0d:ee:d3:51:70:11:
34:d1:75:04:c6:64:4f:d9:1b:8f:e2:b4:a7:78:cf:
61:e7:d6:de:78:25:ec:7a:da:ef:e3:d2:6a:87:73:
87:07:e8:9f:c7:da:16:b4:44:28:53:4e:b6:ce:e1:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A2:7B:CB:71:0A:EA:55:4B:D5:2C:BF:D2:0D:6C:A3:95:1B:32:AB
X509v3 Authority Key Identifier:
keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/1-qJ7y3EK6lVL1Sy_0g1so5UbMqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7a40:9901::/48
2a12:7a40:9911::/48
2a12:7a40:9921::/48
2a12:7a40:9931::/48
2a12:7a40:9941::/48
2a12:7a40:9951::/48
Signature Algorithm: sha256WithRSAEncryption
0c:57:b4:34:0a:48:bb:dd:8a:5c:a3:67:12:82:db:80:21:fd:
3b:c0:47:2e:01:a8:92:f3:40:2f:f2:94:56:24:fc:a0:bc:bb:
0c:23:9d:b0:0a:c4:1e:5f:b0:62:84:6c:61:e5:e3:f4:48:4a:
e3:fe:32:65:29:55:48:18:61:4d:fd:b9:1a:1a:c7:7b:6e:e7:
c7:5e:90:da:34:0c:ca:ed:a8:27:22:a2:c9:9a:f1:2d:a2:cd:
4c:3a:49:52:e8:fa:1f:dd:fb:67:f5:07:bb:a7:a0:0f:4a:e5:
22:1e:e0:3e:2b:50:96:5f:1f:99:d2:50:00:83:da:ac:ef:b9:
6a:88:27:db:a6:e1:07:04:f7:dc:e4:d3:81:8d:1e:dc:dd:05:
97:53:4d:b3:60:56:16:a4:c0:2b:e4:17:9f:5a:57:61:43:2a:
10:58:c0:12:0b:87:8e:76:a0:a5:dc:9a:18:45:43:15:91:4f:
c2:d0:89:20:6a:6d:ce:b1:fe:8b:ee:c7:67:49:93:4f:a3:d1:
78:9e:92:46:fc:01:85:6a:27:48:86:9e:4f:46:fa:90:43:2c:
26:ab:41:84:6e:52:5d:f6:ba:d6:1e:9d:21:b2:7e:87:3a:8c:
be:9e:ea:83:b8:63:a5:ac:50:8e:20:5a:c2:84:9f:a4:6a:ba:
63:cd:22:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:01 2024 by rpki-client on console-fra.rpki-client.org