Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/Kpx0QIRiTHluia0woaGZ5dIQxuA.roa
File: Kpx0QIRiTHluia0woaGZ5dIQxuA.roa (raw, json)
Hash identifier: D1z/hj/HUjDpHsI8e0GXAWC/AKBHZxEdZGhu9NgZSS4=
Subject key identifier: 2A:9C:74:40:84:62:4C:79:6E:89:AD:30:A1:A1:99:E5:D2:10:C6:E0
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 01934DF3B765657B5E439B1473A3C063AC2C
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/Kpx0QIRiTHluia0woaGZ5dIQxuA.roa
Signing time: Thu 21 Nov 2024 09:00:38 +0000
ROA not before: Thu 21 Nov 2024 09:00:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208749
IP address blocks: 2a01:e901:108::/48 maxlen: 48
2a01:e901:118::/48 maxlen: 48
2a01:e901:128::/48 maxlen: 48
2a01:e901:138::/48 maxlen: 48
2a01:e901:148::/48 maxlen: 48
2a01:e901:158::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4d:f3:b7:65:65:7b:5e:43:9b:14:73:a3:c0:63:ac:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Nov 21 09:00:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a9c744084624c796e89ad30a1a199e5d210c6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:95:6e:c1:df:36:64:b6:f8:2e:0b:db:d9:
b5:1a:ee:1e:5c:d2:b2:46:34:e7:9d:13:bc:1c:4f:
3d:3f:12:68:bf:d5:fe:ff:67:21:ed:00:56:4a:a2:
cf:06:8a:c0:b5:56:f3:55:4c:e2:3e:4a:9a:41:bf:
45:fd:6e:7e:7f:f4:a9:f8:f0:05:7e:55:c8:3b:77:
64:a3:03:90:78:0b:99:fd:62:5e:a6:bd:a0:e9:22:
61:78:48:f5:06:be:7e:d3:7f:0e:0a:e9:00:95:be:
3c:82:78:4e:e0:b3:fd:2d:02:78:0f:63:d4:23:6b:
d0:b4:f8:2c:f5:df:ff:68:d2:b7:6a:08:61:30:38:
ff:e1:1b:e5:30:d4:2d:d3:59:b4:27:68:96:ae:37:
ef:76:72:b4:18:33:1c:b9:94:3f:62:dc:a9:dd:bd:
7f:39:47:78:0d:fa:ab:71:5b:47:d5:b8:75:0b:3a:
1c:3a:4e:ca:46:e5:1f:73:d3:30:ef:47:75:6b:22:
60:4c:e4:72:39:04:05:70:13:a6:f7:37:b2:70:0a:
ef:a4:be:26:48:3e:e5:91:20:c4:99:bb:3b:3b:f1:
f6:43:0a:fc:35:a6:b1:bf:a2:dd:17:94:70:74:af:
cd:9f:84:a0:35:fd:48:eb:c9:3e:89:5c:63:0d:77:
25:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9C:74:40:84:62:4C:79:6E:89:AD:30:A1:A1:99:E5:D2:10:C6:E0
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/Kpx0QIRiTHluia0woaGZ5dIQxuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:108::/48
2a01:e901:118::/48
2a01:e901:128::/48
2a01:e901:138::/48
2a01:e901:148::/48
2a01:e901:158::/48
Signature Algorithm: sha256WithRSAEncryption
06:3f:3f:40:35:29:54:90:39:08:53:66:63:29:4e:9d:31:f2:
b5:7d:12:10:d1:b5:31:7b:c8:ed:43:3f:f8:45:1b:d7:f4:a1:
bb:97:e8:9b:10:ef:dc:be:09:ca:2f:f5:91:65:a0:9d:75:de:
78:60:78:14:ba:6e:39:83:6a:f8:cb:6e:94:de:55:f7:fb:b5:
5e:32:01:30:4d:de:4c:9a:03:f9:06:5c:e6:00:71:98:c9:1e:
e0:fe:5b:99:46:8a:c2:d9:f6:9f:84:d3:26:46:7e:65:19:98:
74:09:84:99:86:e0:99:17:58:d7:b0:c6:29:1b:8a:66:6a:7a:
85:4c:4e:1b:af:a3:85:f3:59:91:bb:15:b5:23:33:dd:99:eb:
78:6a:e2:cc:cd:6d:53:bb:e1:3e:4f:65:20:bd:de:61:ce:34:
5a:50:e9:65:b3:dc:6b:75:72:01:5e:db:37:13:f3:83:95:de:
0c:6d:7b:c4:b9:36:12:d2:ff:dc:37:46:ed:2e:d4:9e:fc:c0:
fe:c0:79:20:47:74:00:c3:e0:07:0f:dc:38:83:88:ac:9f:1f:
79:05:96:74:d8:17:4f:8e:cb:52:21:74:53:d8:9b:0b:05:54:
5e:83:4e:45:4c:3c:02:b3:4d:0b:d9:f5:da:ed:8a:0e:51:22:
ee:6d:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:56:35 2024 by rpki-client on console-ams.rpki-client.org