Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/81pRjzjqWPfSyBvYA2FIDC2rNl4.roa
File: 81pRjzjqWPfSyBvYA2FIDC2rNl4.roa (raw, json)
Hash identifier: BrYgBVkHPVw2Ac71SKbeWUlks4U3ZtQaE6nxQsbCg8A=
Subject key identifier: F3:5A:51:8F:38:EA:58:F7:D2:C8:1B:D8:03:61:48:0C:2D:AB:36:5E
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 01934DF3BAFDF08FFCB398A150A1ED39185F
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/81pRjzjqWPfSyBvYA2FIDC2rNl4.roa
Signing time: Thu 21 Nov 2024 09:00:38 +0000
ROA not before: Thu 21 Nov 2024 09:00:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211891
IP address blocks: 2a01:e901:103::/48 maxlen: 48
2a01:e901:113::/48 maxlen: 48
2a01:e901:123::/48 maxlen: 48
2a01:e901:133::/48 maxlen: 48
2a01:e901:143::/48 maxlen: 48
2a01:e901:153::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4d:f3:ba:fd:f0:8f:fc:b3:98:a1:50:a1:ed:39:18:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Nov 21 09:00:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f35a518f38ea58f7d2c81bd80361480c2dab365e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:63:23:b2:01:7f:b3:5f:4c:8d:21:84:67:
b7:3b:c3:83:53:5a:0e:8e:0f:8c:d7:35:0c:3a:31:
9c:dd:fa:75:aa:8b:fc:cb:6e:e9:80:98:d6:f3:9e:
45:71:0e:9d:cb:4c:c7:db:d3:7e:b7:30:00:5e:df:
10:83:a3:a1:88:f1:9d:7e:0c:0b:39:64:2f:87:43:
11:82:3d:8f:50:cd:1b:1e:f1:22:f6:5a:25:c8:f4:
b6:3b:60:f1:38:42:66:17:a7:ca:19:ff:9c:f7:2b:
15:4a:86:45:6e:a6:28:a2:e6:13:48:56:c1:58:45:
67:4f:f9:b3:d3:b8:18:de:39:ec:53:43:17:da:da:
fc:60:22:8d:79:43:7f:0d:bf:1b:29:d4:8c:10:4d:
80:cc:6c:e6:41:de:66:d9:1d:f6:a7:b8:e8:43:6f:
ca:16:48:47:c5:8f:9e:a0:f7:b5:0a:61:77:0b:74:
b0:7a:0b:88:cb:16:4b:15:4f:f1:94:b2:6c:16:8d:
17:6a:95:0a:6a:30:a2:5a:21:a9:5d:7c:76:55:80:
ae:34:e7:9c:ed:d6:89:be:8d:d9:b9:1f:ec:84:d0:
92:97:fd:e1:e7:af:47:83:db:1a:5c:1e:9b:be:0b:
f1:13:87:cd:3b:4e:be:21:62:de:9a:0d:84:1a:d6:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5A:51:8F:38:EA:58:F7:D2:C8:1B:D8:03:61:48:0C:2D:AB:36:5E
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/81pRjzjqWPfSyBvYA2FIDC2rNl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:103::/48
2a01:e901:113::/48
2a01:e901:123::/48
2a01:e901:133::/48
2a01:e901:143::/48
2a01:e901:153::/48
Signature Algorithm: sha256WithRSAEncryption
1a:db:2e:3a:a0:f4:24:0c:e6:03:5a:18:13:5a:95:76:53:6b:
9e:e9:11:eb:0d:54:7f:d6:b2:c6:17:86:9d:d6:5d:8a:07:9a:
b8:df:56:d4:13:0f:e4:38:aa:dc:40:02:8e:f1:cc:f1:dd:39:
e4:00:b9:08:78:17:6c:17:48:62:58:5d:c0:47:86:a4:f3:0b:
d2:ee:a5:8a:6a:12:06:7e:1c:40:8d:27:d3:f8:bd:0e:d0:61:
66:48:e5:48:3f:62:b1:89:ee:1b:ac:08:00:d8:9c:ee:07:32:
bc:d5:a4:2b:6a:81:a7:ee:78:65:ce:83:55:61:6b:ea:83:bc:
d4:9a:2c:dc:45:92:a2:4a:b3:af:5f:4f:1a:c6:cf:86:2f:6c:
f2:e4:9d:c5:83:2f:16:15:06:f9:43:1b:89:bf:f8:f5:2f:78:
2a:12:63:a4:3f:80:92:b8:ed:34:12:cf:cd:b7:ea:70:ec:b8:
f1:a9:5a:55:a0:38:f4:1a:fc:2d:4e:5b:f9:44:8f:6f:ed:be:
2f:5d:7b:3c:6d:09:80:d1:4e:3b:e5:af:ee:a2:9a:24:b7:4f:
ee:8a:90:d7:88:84:85:c1:c6:11:06:18:2a:5a:24:e0:b1:c6:
ec:ba:7a:dd:f5:35:3e:6b:52:bc:7e:79:36:41:8b:e1:b3:03:
a5:70:e1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:32 2024 by rpki-client on console-fra.rpki-client.org