Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/vXIKs9tImELjwJp7CZ0Cy9IMO_s.roa
File: vXIKs9tImELjwJp7CZ0Cy9IMO_s.roa (raw, json)
Hash identifier: zMJgZV8Std2mq72HcVL7z+DkzgNAtJqJWA2PMM5CULU=
Subject key identifier: BD:72:0A:B3:DB:48:98:42:E3:C0:9A:7B:09:9D:02:CB:D2:0C:3B:FB
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 01905402E72B573508B1C1E723D1FE7ECA54
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/vXIKs9tImELjwJp7CZ0Cy9IMO_s.roa
Signing time: Wed 26 Jun 2024 10:06:34 +0000
ROA not before: Wed 26 Jun 2024 10:06:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212049
IP address blocks: 2a0f:5707:aaf0::/44 maxlen: 44
2a0f:5707:aafa::/48 maxlen: 48
2a0f:5707:aaff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:02:e7:2b:57:35:08:b1:c1:e7:23:d1:fe:7e:ca:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jun 26 10:06:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd720ab3db489842e3c09a7b099d02cbd20c3bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:55:88:7b:3f:10:00:a6:28:ac:77:c2:5e:
b7:56:da:35:4d:32:30:a2:e2:18:c1:d1:fd:4e:38:
a3:3f:64:8b:da:ef:00:6b:3c:87:2f:c0:66:dc:14:
b5:98:0a:95:5b:af:f4:d6:7b:52:ec:97:fb:7f:16:
28:c5:40:61:27:ab:22:ad:9b:16:5a:d6:bb:a5:65:
24:2e:c2:52:fb:87:04:73:83:b1:dc:83:75:32:11:
00:49:bd:ef:9a:ad:d8:67:a3:5f:fa:75:9b:11:2c:
e3:9b:89:e9:6b:cb:14:85:eb:99:37:00:00:4e:42:
75:52:f4:99:cb:05:be:b7:95:ee:d2:e9:16:f5:a2:
e2:69:45:56:a8:01:49:1d:69:cc:7a:f0:6a:b7:12:
83:b8:e4:5d:b9:78:87:82:94:1f:71:d0:22:2c:93:
db:50:f1:64:c1:e8:2e:0f:50:c8:8e:5a:9f:90:8f:
ca:9c:b2:64:cd:46:ca:d7:a9:54:84:10:45:8c:39:
14:58:94:27:95:e4:1a:40:40:2a:c1:85:9e:91:1b:
f3:32:da:e2:5a:60:80:b0:56:1f:7f:b2:57:10:55:
0e:0e:16:d2:63:6c:84:71:7f:fd:e2:e4:54:ed:47:
51:3d:e2:59:13:3c:e8:29:9b:a5:e7:b0:d8:9a:43:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:72:0A:B3:DB:48:98:42:E3:C0:9A:7B:09:9D:02:CB:D2:0C:3B:FB
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/vXIKs9tImELjwJp7CZ0Cy9IMO_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aaf0::/44
Signature Algorithm: sha256WithRSAEncryption
6d:ac:62:81:29:6d:9e:be:71:31:5d:fb:39:36:59:b8:ee:30:
bc:6e:49:03:a7:67:27:56:b6:57:2a:95:48:23:9c:83:ae:b3:
8e:94:8f:77:ae:72:c9:22:ad:8b:73:47:c8:78:41:7f:a7:14:
7d:63:5e:0e:be:dc:d3:15:89:de:70:a8:47:29:4b:18:26:e4:
e7:7b:7a:b3:84:8f:70:cd:22:46:73:10:f7:bb:6e:bb:4b:0e:
43:f2:53:b2:e1:66:03:10:3b:73:ed:39:a1:ad:00:f5:05:bc:
e4:b4:e9:1e:ff:92:2f:71:20:0d:26:ae:88:b8:b2:0d:68:f1:
b5:7b:71:4e:36:b9:ec:09:d5:08:b0:db:ad:d7:8d:78:fb:69:
db:3b:5a:f2:d8:d9:6c:ab:5a:53:03:3e:10:02:e8:05:ca:18:
34:83:72:f5:cf:2d:f1:6d:a6:0b:55:3d:a7:b1:2f:fd:b4:95:
01:0a:b9:d1:08:49:58:47:42:98:fc:03:6d:17:0d:22:23:fd:
50:4c:5d:4a:15:38:76:56:86:03:c4:49:6a:2f:70:d4:a1:f1:
bb:5e:9c:5a:16:0b:cb:59:4b:ea:b0:01:3c:61:85:e3:74:7b:
93:8a:1b:44:8e:5b:71:fa:ee:14:36:1e:b3:67:96:92:59:18:
b3:3c:23:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:39:24 2024 by rpki-client on console-ams.rpki-client.org