Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/pbWRur8kdBoNZy-7uNHkY120NTA.roa
File: pbWRur8kdBoNZy-7uNHkY120NTA.roa (raw, json)
Hash identifier: jfa1B31/YH+pRpa6ejUnZronMhff+LqETy02l5VHyp4=
Subject key identifier: A5:B5:91:BA:BF:24:74:1A:0D:67:2F:BB:B8:D1:E4:63:5D:B4:35:30
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 01934DF3B575DC678339784258DF7A1493B9
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/pbWRur8kdBoNZy-7uNHkY120NTA.roa
Signing time: Thu 21 Nov 2024 09:00:37 +0000
ROA not before: Thu 21 Nov 2024 09:00:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207359
IP address blocks: 2a01:e901:10e::/48 maxlen: 48
2a01:e901:11e::/48 maxlen: 48
2a01:e901:12e::/48 maxlen: 48
2a01:e901:13e::/48 maxlen: 48
2a01:e901:14e::/48 maxlen: 48
2a01:e901:15e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4d:f3:b5:75:dc:67:83:39:78:42:58:df:7a:14:93:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Nov 21 09:00:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5b591babf24741a0d672fbbb8d1e4635db43530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:34:c3:37:6f:15:a0:b2:b1:06:c0:52:0d:
89:67:ff:4e:ff:9c:e0:30:41:ab:7e:9e:0b:3b:0e:
61:cb:4e:6d:3d:5a:61:04:33:bf:86:d9:ba:1f:29:
dd:ae:3a:8d:ea:ea:35:89:e7:19:7f:7f:a1:cc:ca:
63:c5:c4:49:1a:b6:42:ec:df:4e:44:cc:ae:b3:c2:
6a:a3:e4:f8:62:fc:c7:1b:cf:e8:e4:1d:33:aa:73:
18:e0:be:09:17:34:ab:d5:92:a3:b7:51:61:d3:14:
0e:f2:ca:c5:99:20:13:78:4d:5c:60:ea:02:d2:5b:
e2:2c:74:9d:91:20:11:76:b1:6c:38:09:cb:04:25:
4c:53:01:a0:41:a0:1e:4f:28:90:0a:04:7e:50:ea:
5c:37:8e:11:3e:0e:f0:48:ba:14:6a:5a:55:3e:1e:
92:2d:3b:b1:56:3c:c2:db:1f:0c:e8:45:d3:c5:5f:
45:11:ef:24:84:68:25:93:ac:11:ac:de:34:ba:ad:
66:e7:a7:66:e0:bd:98:42:d1:3f:8e:9e:3f:7a:4d:
f6:6a:0d:7a:f0:6a:fd:7f:ef:b4:7f:60:45:55:a7:
b8:ef:27:a9:63:30:95:0d:b4:b1:72:81:42:80:aa:
45:83:4a:2e:4b:f6:5a:51:6d:d0:99:ab:59:4e:6c:
9c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B5:91:BA:BF:24:74:1A:0D:67:2F:BB:B8:D1:E4:63:5D:B4:35:30
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/pbWRur8kdBoNZy-7uNHkY120NTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:10e::/48
2a01:e901:11e::/48
2a01:e901:12e::/48
2a01:e901:13e::/48
2a01:e901:14e::/48
2a01:e901:15e::/48
Signature Algorithm: sha256WithRSAEncryption
41:92:d4:5b:fa:5b:46:46:bb:4c:0f:d1:da:6e:d8:47:f0:a1:
83:c6:c2:7a:e8:be:be:17:34:0a:75:f8:86:84:1b:49:9e:b6:
c6:19:64:3e:39:83:33:eb:e7:5c:b1:a0:a5:e1:23:5f:03:8b:
3d:c7:58:66:e5:b3:07:08:b2:14:bd:45:75:48:43:06:88:49:
ed:20:6c:17:99:91:f5:f4:05:71:68:71:be:d1:5f:ed:0b:d4:
cb:6a:25:02:f7:93:1c:f5:10:46:a9:c5:88:f8:1e:69:76:48:
91:22:ed:f3:38:41:a4:0f:66:95:44:83:0b:36:de:a1:c9:79:
01:3a:d1:35:60:81:97:62:cb:04:63:84:47:ed:28:7b:b8:9b:
f7:1a:ac:6b:9f:79:25:ad:3a:75:cb:9b:e8:c2:55:0e:2e:a2:
71:07:77:cc:c9:40:2e:a5:f5:b8:46:98:09:0a:be:0a:a7:5b:
d1:8f:c0:4c:ae:c9:32:0f:60:50:7f:f4:96:f7:b6:84:fc:28:
89:4d:2d:0b:b1:e2:33:a5:8f:3d:29:cc:d7:35:c4:b7:89:fb:
a5:b4:b2:55:6a:a7:08:99:a9:b9:a1:63:24:ef:92:b5:8c:6c:
d3:ac:f6:db:a7:81:ca:61:8c:51:f8:6b:a5:47:0b:cd:1b:62:
a1:27:a9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:39:14 2024 by rpki-client on console-ams.rpki-client.org