Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/U931EhvuQISagVxE_aFPb-sTShE.roa
File: U931EhvuQISagVxE_aFPb-sTShE.roa (raw, json)
Hash identifier: PZtSJLp5gBZApZqYYiVRBzhGlw8LfEFUxs3Ixe6+g5Q=
Subject key identifier: 53:DD:F5:12:1B:EE:40:84:9A:81:5C:44:FD:A1:4F:6F:EB:13:4A:11
Certificate issuer: /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial: 0191E617DB481A6DB0FCE4B4D5D4D7FA8C78
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/U931EhvuQISagVxE_aFPb-sTShE.roa
Signing time: Thu 12 Sep 2024 11:56:48 +0000
ROA not before: Thu 12 Sep 2024 11:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206728
IP address blocks: 2a11:9880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Sep 2024 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e6:17:db:48:1a:6d:b0:fc:e4:b4:d5:d4:d7:fa:8c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Validity
Not Before: Sep 12 11:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53ddf5121bee40849a815c44fda14f6feb134a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:14:22:94:23:c6:54:1a:4e:c4:9d:2f:ec:cb:
2c:d5:8d:70:da:f7:fa:a6:7a:b2:1f:5a:ad:27:27:
ca:6c:92:2a:3f:b7:13:4c:28:26:4f:ce:e7:b5:16:
a8:5a:03:71:07:d5:c2:5e:96:a6:25:91:d2:c6:c0:
94:2a:df:9c:9e:fe:18:89:a1:d5:b7:aa:ff:3e:c6:
02:98:51:8a:5d:2e:c2:fe:91:7d:d5:90:87:50:60:
d8:a1:e0:12:c4:d1:ea:31:7c:be:ca:f5:9b:7b:1c:
aa:b8:b6:a2:fb:b1:52:27:ae:e1:48:0e:7a:61:bc:
12:c0:58:ec:29:05:98:76:06:ef:da:97:a1:2f:13:
08:28:d6:98:79:af:d0:a1:9f:51:73:ab:a9:a3:1e:
28:84:90:ff:27:87:75:19:77:e8:2a:c5:21:05:bf:
17:0c:aa:c7:d3:3f:70:79:9a:cf:b9:32:a9:d2:5b:
7b:cd:09:0f:52:d7:c5:50:55:74:5f:76:36:75:f4:
6e:7d:99:fc:eb:9a:02:67:31:8e:77:fa:5d:92:45:
02:b4:ab:47:c2:3d:ad:e3:94:26:ff:75:66:77:b1:
b2:ad:ae:12:1f:da:8f:e0:15:fd:9c:51:91:86:a4:
91:1e:b6:64:23:e1:52:0d:cd:b4:97:a4:fc:0e:0d:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DD:F5:12:1B:EE:40:84:9A:81:5C:44:FD:A1:4F:6F:EB:13:4A:11
X509v3 Authority Key Identifier:
keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/U931EhvuQISagVxE_aFPb-sTShE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:9880::/32
Signature Algorithm: sha256WithRSAEncryption
65:37:06:30:ef:1a:3a:11:2d:cd:e6:82:3c:68:3f:44:e5:ba:
59:ba:2a:3b:3a:87:e7:b1:8d:bd:34:5f:d8:f8:e2:d6:9f:7f:
37:97:fd:f5:26:55:df:6f:0b:53:2f:cd:b4:cc:91:10:ca:bf:
02:a1:05:4e:3d:15:9f:41:d8:4a:c1:0f:4e:87:3f:ed:65:69:
3e:85:9b:ec:d2:04:00:14:8e:7b:96:83:83:bd:bf:e2:1c:58:
43:5f:37:7e:0a:d7:ba:ff:e7:5f:71:72:cc:bd:57:b9:03:19:
33:b2:fb:9c:70:32:c1:29:55:ab:e7:e9:2c:1d:3a:18:4a:45:
21:09:2c:fb:35:6e:ef:8d:6a:1d:df:cc:95:e5:69:bb:aa:d8:
f2:5f:94:45:0f:73:fa:4a:f9:17:5d:2b:6c:48:fa:91:92:57:
89:81:82:b5:43:4e:30:c6:5e:bb:91:21:49:17:51:06:7c:d0:
1b:7c:9f:6e:72:f3:87:7e:af:79:dd:74:98:2d:f8:b9:dc:85:
32:5b:79:d6:1b:f6:10:d9:57:63:26:4d:d2:a4:20:0b:f5:c3:
fa:d0:51:08:c5:fd:09:ce:16:f1:a5:0e:27:aa:25:4e:85:b3:
ff:bc:9c:89:07:6d:60:df:20:26:d9:af:88:17:26:c3:29:c2:
63:aa:ef:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 09:03:51 2024 by rpki-client on console-fra.rpki-client.org