Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/0SuUGYoSebHMTAF65C2ULeXSrTA.roa
File: 0SuUGYoSebHMTAF65C2ULeXSrTA.roa (raw, json)
Hash identifier: Wr1i9fZhuoumykvNJWFGUf9bumlUfL0qkfnFGJ/EPBs=
Subject key identifier: D1:2B:94:19:8A:12:79:B1:CC:4C:01:7A:E4:2D:94:2D:E5:D2:AD:30
Certificate issuer: /CN=e91ef22adaa16d53dcf637c569f4131f26215b91
Certificate serial: 0190345528724FB2326B97295FBF638E7EF2
Authority key identifier: E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/0SuUGYoSebHMTAF65C2ULeXSrTA.roa
Signing time: Thu 20 Jun 2024 06:28:34 +0000
ROA not before: Thu 20 Jun 2024 06:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61424
IP address blocks: 2a09:31c0:beef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:55:28:72:4f:b2:32:6b:97:29:5f:bf:63:8e:7e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91ef22adaa16d53dcf637c569f4131f26215b91
Validity
Not Before: Jun 20 06:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d12b94198a1279b1cc4c017ae42d942de5d2ad30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bb:94:a1:5a:75:e9:50:f2:62:96:dc:12:39:
0d:db:1f:a0:08:0f:77:38:f5:b7:02:7b:cb:02:5a:
ee:8d:63:b3:cb:be:dc:af:4f:7a:46:25:ae:3d:9c:
30:75:f2:e0:ae:c9:58:bd:d4:da:b3:6c:d6:d8:43:
29:4b:c5:ed:26:01:2a:d1:ef:ee:ea:9f:f7:a1:3d:
3e:8b:2b:d9:02:61:1a:80:53:04:e2:f3:1d:48:34:
fc:fe:0e:62:00:8a:25:5f:3b:32:9c:a4:52:04:2b:
7f:06:b4:14:5e:e6:12:37:59:73:ca:3e:88:7e:61:
0f:f5:01:b3:f6:a7:98:64:b6:25:1e:1a:ea:35:12:
e2:9c:c2:b6:38:88:6a:6d:cd:c8:c2:64:1a:85:39:
9c:f1:21:dd:f4:fd:d0:1b:13:4d:1b:92:5e:c2:a7:
67:a1:66:ba:2d:64:b5:5a:89:1e:c0:02:4a:ac:91:
76:3f:51:d6:20:f0:4e:52:5b:d6:14:e5:f7:cd:bc:
63:64:ab:69:f6:e8:fa:a0:4e:e8:33:4f:bd:0c:c8:
1d:33:78:6d:13:45:2c:87:cf:40:d9:2e:17:70:19:
96:ee:fd:62:e2:29:d1:1b:78:b8:3f:1a:e7:3b:5f:
c4:6a:27:39:c2:4b:08:b5:11:95:1f:db:cc:cd:b5:
32:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2B:94:19:8A:12:79:B1:CC:4C:01:7A:E4:2D:94:2D:E5:D2:AD:30
X509v3 Authority Key Identifier:
keyid:E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/0SuUGYoSebHMTAF65C2ULeXSrTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:31c0:beef::/48
Signature Algorithm: sha256WithRSAEncryption
12:e1:56:4c:5f:ba:12:6c:d2:98:83:cd:bb:98:e7:87:b1:1d:
bc:95:43:60:88:8f:9c:51:f6:c4:f6:46:87:a7:32:87:5e:82:
b8:d5:3d:b3:49:00:12:c4:c7:90:71:80:47:b8:64:df:7f:d1:
e3:10:e2:ac:44:95:e8:40:46:24:6f:4f:d2:84:22:99:22:97:
c8:35:2d:07:f6:10:53:02:29:89:da:66:de:93:2b:19:a9:7c:
9b:2d:87:ea:eb:50:88:42:c6:77:b0:98:66:b2:e9:66:e0:9e:
5f:57:aa:74:8f:88:3f:81:4f:65:9a:4a:a3:e3:1b:83:ae:d5:
9a:15:24:95:98:a7:36:17:04:88:78:ae:98:d1:cf:d0:55:90:
37:b9:cf:15:62:82:89:67:45:38:84:51:a1:4c:de:0a:39:e8:
ab:7e:62:3b:4f:66:b6:e8:5c:04:67:62:17:2e:ee:ce:a8:b9:
dc:19:93:cc:48:1f:ec:f1:6e:7c:e8:5b:da:f9:4a:2e:e8:a6:
f1:f3:13:62:5a:a0:b1:9d:70:6b:f7:3b:29:27:2e:20:ff:24:
2c:01:df:9f:62:f9:68:c4:33:07:2d:bd:61:01:74:7d:2f:b6:
6b:6d:59:01:b1:db:27:42:15:65:d2:97:b2:c7:45:e3:a5:ab:
af:54:ce:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:28:38 2024 by rpki-client on console-ams.rpki-client.org