Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/MI03eXWR57vQKr_9QCdM2aGI4cY.roa
File: MI03eXWR57vQKr_9QCdM2aGI4cY.roa (raw, json)
Hash identifier: aliPnWndlHaktQXgO+4WBGKanAUmbVedgy98KkMGBDE=
Subject key identifier: 30:8D:37:79:75:91:E7:BB:D0:2A:BF:FD:40:27:4C:D9:A1:88:E1:C6
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 0190F000D4F72ED9C7ED974BDBF64E7C1333
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/MI03eXWR57vQKr_9QCdM2aGI4cY.roa
Signing time: Fri 26 Jul 2024 17:05:04 +0000
ROA not before: Fri 26 Jul 2024 17:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210464
IP address blocks: 2a0a:79c7:f7d0::/44 maxlen: 44
2a0a:79c7:f7e0::/44 maxlen: 44
2a0a:79c7:f7f0::/44 maxlen: 44
2a0a:79c7:f800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f0:00:d4:f7:2e:d9:c7:ed:97:4b:db:f6:4e:7c:13:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jul 26 17:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=308d37797591e7bbd02abffd40274cd9a188e1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:1a:20:0a:10:6a:f6:3b:45:b8:25:8e:a3:
79:40:16:bb:c7:78:d8:38:b9:c8:8d:bf:8e:af:fa:
5c:e7:47:b8:19:8c:9c:29:14:f2:6b:ca:f9:56:9a:
b0:3b:76:e4:7e:3d:57:e9:32:b6:f8:b7:48:48:fc:
54:c0:92:0c:cc:22:91:ec:2e:a6:63:9e:ff:aa:60:
d9:a1:8a:3a:e7:87:ab:49:47:87:8b:5b:bc:b9:a8:
1d:af:e7:1b:ee:ca:0c:49:4e:23:3a:69:2b:2f:c8:
d1:0a:f9:40:18:11:f2:d6:6c:b2:97:30:8f:0d:4e:
2f:f2:43:1a:63:f0:e8:27:46:72:2c:31:59:99:eb:
b3:ff:3a:df:eb:be:42:8a:92:f9:4e:6e:41:81:68:
4a:0b:fc:a6:30:ab:93:00:60:9a:5d:42:59:16:da:
1f:4e:ac:e0:4c:41:a2:3a:15:9f:4f:3c:c5:58:86:
de:8e:bb:ce:2b:41:e3:6d:dd:da:27:02:fe:b9:b0:
e5:89:c2:6b:11:ba:d0:71:c1:9e:70:c1:17:ba:b7:
00:b1:a7:ca:ff:de:ab:55:18:cd:d8:c1:6e:e5:d6:
aa:70:5b:a1:d3:aa:44:1e:7b:d9:0a:3c:56:6b:ea:
53:a6:fa:7a:f6:07:dc:21:29:f8:15:eb:02:1c:75:
2c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8D:37:79:75:91:E7:BB:D0:2A:BF:FD:40:27:4C:D9:A1:88:E1:C6
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/MI03eXWR57vQKr_9QCdM2aGI4cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c7:f7d0::-2a0a:79c7:f800:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
71:98:27:85:00:91:15:8c:d3:ce:f9:5f:60:01:08:84:ea:e2:
6e:c8:8f:9a:8d:09:d2:3d:cf:6e:7c:a1:52:fe:0c:f4:64:94:
bd:e1:90:0c:e4:64:7b:f7:19:93:10:5f:7f:c6:48:7d:41:e3:
0b:fe:d1:a9:18:fc:ec:0d:4b:6d:21:1e:6c:44:1e:cd:f3:43:
28:6d:9f:3e:fa:e7:67:9b:45:ac:06:bf:86:85:9e:21:3f:a7:
ad:40:47:f9:5b:01:1b:7e:df:9d:00:b1:bd:97:c6:3d:fd:b9:
28:05:d4:7f:0a:29:10:0b:cd:9f:c6:20:6e:20:04:b1:4b:3f:
67:c8:72:7e:7f:4e:32:e7:6e:b1:a6:ad:0f:d0:b9:d4:8d:6d:
64:46:52:12:77:e7:d4:09:18:61:e4:61:9b:82:cd:ac:91:8d:
32:99:2e:07:8e:c5:38:6d:86:f9:3b:ea:b3:e3:a7:bd:33:5a:
ca:ae:98:67:22:d1:a7:97:75:75:e2:20:7a:c0:7b:cc:7b:a1:
6e:87:1f:97:49:e2:91:51:c6:21:75:63:d3:20:26:23:f1:6f:
b8:7d:d4:7a:a6:d9:92:ef:1d:e0:78:16:43:bc:37:3f:ef:b3:
e6:09:f9:38:31:4c:b0:59:77:92:cc:cb:98:5a:ba:19:26:c0:
f1:7f:6b:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:31:34 2024 by rpki-client on console-ams.rpki-client.org