Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/h5sJ8l8hnPP3oKbrDSMDS_jzRS8.roa
File: h5sJ8l8hnPP3oKbrDSMDS_jzRS8.roa (raw, json)
Hash identifier: gI/ZjyL5nO/RkeQ3MhlnOJbAWwj8cQqYMBfHqdb5QZA=
Subject key identifier: 87:9B:09:F2:5F:21:9C:F3:F7:A0:A6:EB:0D:23:03:4B:F8:F3:45:2F
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 01927FB21DC6F73B5D0868B816F3FFB3AD87
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/h5sJ8l8hnPP3oKbrDSMDS_jzRS8.roa
Signing time: Sat 12 Oct 2024 07:47:12 +0000
ROA not before: Sat 12 Oct 2024 07:47:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205745
IP address blocks: 2a10:240::/30 maxlen: 30
2a10:244::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7f:b2:1d:c6:f7:3b:5d:08:68:b8:16:f3:ff:b3:ad:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Oct 12 07:47:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=879b09f25f219cf3f7a0a6eb0d23034bf8f3452f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:ff:31:b1:47:71:80:1a:7f:46:02:50:e5:
65:0f:f8:cd:87:25:a5:81:8e:1a:41:a3:de:23:ee:
93:a9:90:a2:21:a8:cd:56:17:d8:d2:8f:73:6f:fd:
37:f8:71:44:6f:4c:f5:b9:e4:ce:3b:7f:69:00:ad:
43:01:8f:0c:78:04:31:b3:56:69:e4:f8:37:33:dc:
8b:90:51:dd:04:a6:76:f8:fb:5f:55:a3:5f:08:7f:
59:c3:56:10:2a:5e:27:82:07:03:31:14:85:40:14:
60:79:86:fe:79:7f:ba:7d:e5:fe:98:68:b8:4e:04:
2f:80:a9:4f:30:82:87:b8:aa:ca:e9:1d:3d:d2:40:
fe:7c:bb:91:06:45:e0:60:be:de:a7:ab:ac:95:9c:
29:9f:8e:78:37:6e:d1:1a:37:a0:85:6e:83:b1:91:
03:f0:70:d5:fb:ae:aa:b0:28:36:07:f6:29:ca:7d:
de:53:80:f0:f1:04:52:ec:3a:e1:68:8d:81:72:8f:
20:41:52:91:d4:7b:79:91:17:82:8a:06:d6:74:b5:
32:6f:6b:8b:1b:c5:f2:13:6d:b1:05:45:af:cf:78:
ae:f8:4a:3d:45:b4:6b:f9:ac:f3:f9:b6:1d:c8:a0:
14:0b:eb:46:82:ec:6a:8b:34:94:02:fb:63:da:ac:
5f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9B:09:F2:5F:21:9C:F3:F7:A0:A6:EB:0D:23:03:4B:F8:F3:45:2F
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/h5sJ8l8hnPP3oKbrDSMDS_jzRS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:240::/29
Signature Algorithm: sha256WithRSAEncryption
0e:5c:b3:27:f8:6d:da:da:72:dd:87:c1:bc:b6:a6:9a:98:7e:
e1:47:0a:d4:40:be:4e:54:95:00:83:38:38:b7:f9:5e:ba:2e:
bf:51:71:bc:8d:59:28:5d:34:75:a6:72:33:8a:3a:17:7d:e8:
87:6e:36:68:b8:f2:e7:9f:d9:10:d5:bf:fe:1f:cc:66:f7:e2:
cd:60:26:6a:45:97:b5:d9:c0:6e:26:7b:0f:ff:6c:26:49:25:
82:f9:97:0e:53:f5:cb:3a:39:b8:ec:5d:85:90:54:6d:04:51:
f9:7a:2f:e1:2e:3b:b6:23:09:e7:a9:ce:f3:de:e0:d5:e8:8a:
d9:2f:39:3b:73:e8:53:5f:e9:26:7b:e3:92:28:25:0f:a2:04:
54:5b:5e:03:6f:ca:a0:4b:87:86:ee:e3:4e:93:d7:ad:87:ea:
17:0f:e4:ce:e5:40:83:4f:0a:ae:c9:6b:f4:38:ff:53:e6:d1:
c7:19:fa:aa:66:db:fa:e9:22:0b:13:fb:1c:71:5a:bf:dc:a6:
90:0f:ad:9a:72:3d:03:1f:0c:29:07:ac:47:f6:9e:cc:47:98:
d4:a1:88:be:2e:29:fd:75:07:f5:84:cb:e9:7a:5c:73:ea:22:
c6:6c:6f:e1:c8:1a:28:3a:49:60:a6:c4:b4:6b:2f:80:5c:a3:
5a:12:50:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:19:37 2024 by rpki-client on console-fra.rpki-client.org