Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/vKd982t0iqnhF8FWCKtT_mqXS5Y.roa
File: vKd982t0iqnhF8FWCKtT_mqXS5Y.roa (raw, json)
Hash identifier: fR6863I02oEd6aGmH66pon+9/qyaBrToERi9yvaR0S8=
Subject key identifier: BC:A7:7D:F3:6B:74:8A:A9:E1:17:C1:56:08:AB:53:FE:6A:97:4B:96
Certificate issuer: /CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Certificate serial: 0192DEF13098E424869F2CDF4C844C761364
Authority key identifier: D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/vKd982t0iqnhF8FWCKtT_mqXS5Y.roa
Signing time: Wed 30 Oct 2024 19:40:01 +0000
ROA not before: Wed 30 Oct 2024 19:40:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198037
IP address blocks: 2a13:7dc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:de:f1:30:98:e4:24:86:9f:2c:df:4c:84:4c:76:13:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Validity
Not Before: Oct 30 19:40:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bca77df36b748aa9e117c15608ab53fe6a974b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6b:7b:72:6c:95:cc:2c:02:de:32:01:3b:dd:
9b:7e:6e:28:2f:77:1c:a0:19:78:a9:4d:d7:44:15:
dd:38:3f:4e:46:9b:12:56:b9:0a:3f:c0:47:b7:7a:
07:18:f7:ef:98:7b:5c:4b:10:8b:01:14:dd:4d:5a:
43:75:01:d0:c2:06:3c:60:83:70:a2:db:3b:45:c9:
ba:93:f1:f5:57:5b:77:1a:f9:19:7d:fe:65:3f:e6:
61:d5:fd:8a:c2:d0:3d:83:3b:75:87:5e:a4:ff:2d:
05:bf:84:33:3f:61:d6:3c:fa:da:33:71:ba:98:80:
83:43:67:1b:2b:8c:c7:a6:ac:e8:23:4c:4c:63:51:
69:ca:33:28:07:47:be:c3:f2:ca:4b:c2:8f:c5:9b:
b8:7c:9d:6d:af:19:5e:d7:14:4c:1e:27:b5:44:59:
59:58:2a:04:14:00:93:97:fb:43:81:7e:ea:36:e5:
97:69:52:ca:c3:67:e6:c8:6e:4b:a1:76:1c:f8:25:
b5:44:ee:c9:d5:83:0b:72:3b:0b:6d:d5:53:ac:89:
5b:67:ff:d9:6d:dc:11:7a:07:70:2e:eb:6a:85:3b:
e3:ae:a2:b0:cb:de:a5:25:9b:6d:fe:b8:ad:1d:15:
73:47:d7:05:80:b0:2d:e9:ce:a0:e7:ef:98:1e:11:
65:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A7:7D:F3:6B:74:8A:A9:E1:17:C1:56:08:AB:53:FE:6A:97:4B:96
X509v3 Authority Key Identifier:
keyid:D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/vKd982t0iqnhF8FWCKtT_mqXS5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7dc0::/29
Signature Algorithm: sha256WithRSAEncryption
17:02:ab:8b:9a:52:e9:6a:21:a4:4c:f1:22:52:b5:17:c6:7c:
c6:e8:e1:fa:f5:48:e4:f9:b9:e1:f3:56:70:34:ac:3d:38:69:
82:f2:f9:4b:9a:49:34:bb:75:6f:5d:42:66:57:c8:c1:de:03:
b4:8d:6d:33:24:e6:ab:eb:f9:9c:2f:dd:b3:cf:52:59:58:30:
1d:fb:2b:78:e6:e2:11:bd:a2:97:64:36:dd:e7:8d:21:2a:5b:
95:26:13:43:66:9e:c9:a8:9e:67:e4:75:6d:f9:1c:f7:05:51:
13:46:52:0e:89:2d:16:8c:35:06:d9:15:03:9c:b4:43:21:e5:
9f:15:c2:17:30:48:b5:63:76:47:ee:7d:e1:ff:ae:ad:d8:58:
0f:1b:17:15:97:8b:65:c1:c5:5b:12:0f:37:50:7f:6a:6b:84:
4b:ab:e5:b8:2d:c2:c2:f7:eb:d5:78:37:f4:3b:9a:9d:10:f6:
ac:9c:5c:17:1e:52:5d:df:29:95:1e:9b:5e:9e:a4:b6:ed:21:
78:5d:77:b1:da:3a:d5:8d:41:24:57:96:e9:3b:b5:d9:a1:f2:
50:45:88:58:fe:81:9c:23:63:7a:85:b8:4f:e3:0c:d6:c1:fa:
47:60:36:18:82:0a:e3:08:9d:f4:18:d6:92:16:50:52:54:4b:
08:9f:87:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:14:09 2024 by rpki-client on console-fra.rpki-client.org