Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ARB21UOteWNgSdk3gbQ1ffFLJCQ.roa
File: ARB21UOteWNgSdk3gbQ1ffFLJCQ.roa (raw, json)
Hash identifier: FqGOs1tVZ96LkN6+IWi+Z1dZN95vSv7NbgXz0J1+aWk=
Subject key identifier: 01:10:76:D5:43:AD:79:63:60:49:D9:37:81:B4:35:7D:F1:4B:24:24
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 0192E46ADD03308AFE9FAE31D7A98A18A360
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ARB21UOteWNgSdk3gbQ1ffFLJCQ.roa
Signing time: Thu 31 Oct 2024 21:11:01 +0000
ROA not before: Thu 31 Oct 2024 21:11:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208434
IP address blocks: 2a06:e881:6900::/48 maxlen: 48
2a06:e881:690f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e4:6a:dd:03:30:8a:fe:9f:ae:31:d7:a9:8a:18:a3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Oct 31 21:11:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=011076d543ad79636049d93781b4357df14b2424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:9d:51:3c:46:99:67:c4:9f:4d:1e:62:38:
a8:0f:59:19:cd:1c:cf:8e:ac:32:f6:37:ab:63:8d:
8d:5b:3e:11:b4:95:99:fa:37:55:a8:68:6b:55:d1:
51:bf:7a:15:d1:ac:db:fe:3d:3c:f3:fc:dc:24:5a:
46:3a:ee:2d:e9:f1:62:45:fd:19:9f:09:ff:36:ad:
a1:48:b8:47:d0:1a:db:60:54:ba:a1:04:3d:17:ba:
79:aa:30:c3:18:4e:9b:f9:12:a8:ec:9a:cb:97:49:
4a:8a:ff:c8:e4:dc:fe:fb:82:38:52:bf:f2:ee:2d:
9a:a4:25:83:83:58:ea:0c:c6:82:f6:7a:a6:6a:d2:
55:74:66:1d:a3:d0:9b:21:8d:f0:29:d2:e2:95:ed:
eb:10:8d:8b:2e:e2:23:ed:d5:58:a2:a5:10:3b:d4:
f0:d8:01:fa:0d:1c:27:97:cf:ce:49:9b:0d:13:91:
0c:10:9c:d1:73:6e:5f:ba:9d:52:0e:61:35:85:90:
52:6c:b6:51:f5:b7:17:7f:4a:16:21:c3:89:33:2d:
9e:53:ca:a2:00:86:8b:e3:e5:f2:64:0a:07:58:27:
cd:4e:e1:2d:79:d3:bc:32:d4:62:c9:bd:e9:87:78:
d3:61:14:a3:fe:e1:fc:c0:d4:c0:8b:58:e1:44:8f:
a6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:10:76:D5:43:AD:79:63:60:49:D9:37:81:B4:35:7D:F1:4B:24:24
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ARB21UOteWNgSdk3gbQ1ffFLJCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:6900::/48
2a06:e881:690f::/48
Signature Algorithm: sha256WithRSAEncryption
d0:13:2d:8a:55:df:f0:39:ae:d3:d6:2d:f0:3b:11:5d:d0:38:
0a:d2:73:89:1d:58:f8:6b:8d:31:87:90:f7:b3:82:67:58:3b:
a8:89:d5:9e:28:9e:72:85:6c:05:fc:da:7a:91:ba:3c:eb:15:
f0:8b:e5:4b:dd:fd:34:78:37:17:de:30:cb:80:e0:57:85:04:
a2:9d:3e:81:61:7b:75:5e:e0:3f:bc:4b:b5:03:2a:f8:d6:eb:
ba:c9:8d:b3:4b:c1:13:8b:3d:b6:36:2a:88:5d:6d:46:af:3a:
8e:ca:f0:c9:4c:85:86:63:a3:0f:9e:73:15:f3:e8:a2:78:02:
40:41:5c:bc:99:94:df:22:cb:6e:92:28:e3:6e:2a:9d:bf:9a:
dd:90:10:12:3f:19:7d:b6:07:4d:57:4d:e3:44:7c:20:d5:2e:
02:f9:da:7f:b9:6a:5c:b8:d1:8b:09:17:9d:41:ff:9c:a8:57:
03:f1:62:1f:64:ab:53:a8:80:2c:27:53:f5:a8:1d:10:56:ba:
ac:e3:57:96:9d:17:b1:cb:a1:2d:20:f6:3b:73:cf:97:bc:8f:
7e:e0:c7:03:b4:3f:d3:40:b5:47:a9:eb:22:4a:db:45:b4:93:
0d:2e:0f:7a:d0:ae:e8:8c:74:e4:5f:6c:57:fa:52:c3:00:48:
5b:68:e1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:31:34 2024 by rpki-client on console-ams.rpki-client.org