Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/F74VmGI1SDZQJwmErXxtv-XUBgM.roa
File: F74VmGI1SDZQJwmErXxtv-XUBgM.roa (raw, json)
Hash identifier: h3s4lxTJlvrsNbADa0TaLHziyDa5KHW7kxljgfsKwpw=
Subject key identifier: 17:BE:15:98:62:35:48:36:50:27:09:84:AD:7C:6D:BF:E5:D4:06:03
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 01934DF3BC82F3D6FA54CBB316BC9589C620
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/F74VmGI1SDZQJwmErXxtv-XUBgM.roa
Signing time: Thu 21 Nov 2024 09:00:39 +0000
ROA not before: Thu 21 Nov 2024 09:00:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213943
IP address blocks: 2a01:e901:10f::/48 maxlen: 48
2a01:e901:11f::/48 maxlen: 48
2a01:e901:12f::/48 maxlen: 48
2a01:e901:13f::/48 maxlen: 48
2a01:e901:14f::/48 maxlen: 48
2a01:e901:15f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4d:f3:bc:82:f3:d6:fa:54:cb:b3:16:bc:95:89:c6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Nov 21 09:00:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17be15986235483650270984ad7c6dbfe5d40603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:2e:b1:19:17:cf:fd:b8:f0:3d:b0:96:75:
5a:e5:19:ee:a0:21:21:50:20:84:db:da:4b:21:ef:
c4:c8:12:82:45:8e:e3:ed:4d:ff:b9:15:04:b7:0c:
86:dc:d1:7c:65:73:8e:35:d9:8d:a9:76:1f:1e:c2:
af:92:4d:85:80:ca:51:7a:b2:98:3f:45:12:30:73:
d8:1b:16:6b:aa:ce:02:7e:67:9d:52:dc:9c:1e:37:
ab:1c:18:ad:81:06:77:ff:c9:2b:73:3a:32:22:f2:
32:f7:e4:45:0d:6d:c7:f2:8b:07:4f:f4:90:b4:42:
43:37:79:17:a3:c5:c1:1d:85:65:3a:22:d2:f4:21:
28:f4:e1:97:cd:f7:f5:f1:56:e7:08:70:da:34:77:
d4:0c:b0:97:0a:09:64:e9:ae:8c:d6:dc:5b:1e:96:
e9:1a:e1:3c:78:68:ff:37:e6:01:5e:5d:5f:17:a4:
a9:cc:a6:55:d6:67:3a:43:6d:0d:9d:10:38:89:32:
4b:86:9c:35:2d:91:dc:a0:2c:9c:53:9c:d4:a5:97:
67:54:4b:16:a3:87:2e:b0:d7:67:60:32:49:e9:d1:
23:22:ff:ff:cc:ba:ee:c7:82:27:f9:46:c5:9d:ce:
ca:ae:e9:c4:af:d5:03:61:b5:a9:28:c3:6b:b0:e1:
12:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BE:15:98:62:35:48:36:50:27:09:84:AD:7C:6D:BF:E5:D4:06:03
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/F74VmGI1SDZQJwmErXxtv-XUBgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:10f::/48
2a01:e901:11f::/48
2a01:e901:12f::/48
2a01:e901:13f::/48
2a01:e901:14f::/48
2a01:e901:15f::/48
Signature Algorithm: sha256WithRSAEncryption
11:6d:33:d5:3f:a6:68:f3:5f:51:a7:b4:b9:54:b6:37:b4:bc:
7c:7c:cc:c0:ab:aa:71:d5:eb:14:5f:d4:0e:91:80:31:87:b9:
08:81:0a:a6:58:f3:c5:20:97:b9:fc:4e:98:e3:24:00:ac:68:
5d:00:73:e0:71:e7:d7:40:d8:56:2b:04:02:f6:99:43:ba:6a:
e5:90:7c:98:5e:d5:bf:25:7b:d0:7f:97:38:b2:45:38:cb:1d:
e9:1e:d7:30:71:77:25:54:dc:70:c8:2c:80:d6:f5:3b:01:2f:
61:d8:cb:3b:77:03:96:e1:9a:f2:49:2e:8b:53:c0:d6:39:bf:
e5:b7:18:c3:aa:b6:84:87:66:90:19:d8:e3:a7:09:22:46:85:
5b:cc:91:a3:cb:42:0a:b2:83:88:89:90:f8:a9:b4:ee:20:e4:
e5:81:fd:12:0e:1a:e6:b4:55:72:cc:a7:af:0e:25:69:55:86:
e3:28:af:3b:5e:05:40:23:9b:fd:2d:81:6a:db:36:bf:43:3c:
1b:5b:24:28:2a:dc:26:ff:5b:12:6d:93:2e:48:27:f7:a2:7b:
ad:21:8f:3d:a8:39:3b:96:4e:01:67:95:2f:58:a6:98:00:32:
01:eb:d6:d0:6e:19:72:1a:f5:b7:59:60:d2:1c:19:32:de:e0:
92:77:8c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:59:55 2024 by rpki-client on console-fra.rpki-client.org