Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/KjuiUgiTfYUxLjF36WCXBhKk16Q.roa
File: KjuiUgiTfYUxLjF36WCXBhKk16Q.roa (raw, json)
Hash identifier: sD2NiykZfxS0saADsdBm/VuF/P0Ss3ZVwp0/V4t3aCs=
Subject key identifier: 2A:3B:A2:52:08:93:7D:85:31:2E:31:77:E9:60:97:06:12:A4:D7:A4
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 0190DC4663C397908C8B1EC8C333C4CE64D4
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/KjuiUgiTfYUxLjF36WCXBhKk16Q.roa
Signing time: Mon 22 Jul 2024 21:08:38 +0000
ROA not before: Mon 22 Jul 2024 21:08:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35758
IP address blocks: 2a11:840:30::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:dc:46:63:c3:97:90:8c:8b:1e:c8:c3:33:c4:ce:64:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jul 22 21:08:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a3ba25208937d85312e3177e960970612a4d7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4f:f3:85:54:cf:ba:12:b9:fe:ea:b1:20:f9:
8c:06:f8:31:91:4d:54:6d:6c:dd:eb:d4:2f:52:5e:
f1:40:75:40:ef:ad:ce:23:0a:8f:14:dc:88:fa:72:
bd:b5:e2:d0:26:d9:f9:4b:ca:05:f1:50:01:b9:95:
51:9a:74:9d:8a:56:e6:82:8c:53:fc:7a:0e:6a:16:
83:7d:cc:17:7a:80:d5:ba:ba:9c:e6:3d:99:15:7b:
7f:88:25:be:32:2e:18:ce:34:de:fc:43:93:82:9c:
97:99:34:d1:7c:fb:78:01:ac:80:eb:70:42:35:89:
74:7a:0c:7a:10:a0:db:72:1c:df:ee:b5:97:cb:4e:
4e:99:f7:8e:94:a0:2a:35:5f:a2:c5:f0:e4:b6:c9:
6c:67:74:b9:f4:31:fe:0f:0d:5b:1a:09:9c:ee:4b:
b0:20:00:1a:61:00:a7:37:e3:17:59:bc:f8:a1:fc:
c8:f2:f4:30:82:8e:ee:d7:a4:30:76:8f:66:7f:3e:
70:0e:0c:46:d9:e1:76:6e:51:78:63:dc:18:17:df:
74:4f:dc:7c:f1:21:cc:4a:e6:6a:4a:8c:9c:9a:d0:
25:11:f1:2e:4b:ac:39:41:31:53:5c:a1:a0:20:61:
d7:f3:50:f0:51:89:fa:c2:c7:35:2e:5f:90:ea:9e:
a4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3B:A2:52:08:93:7D:85:31:2E:31:77:E9:60:97:06:12:A4:D7:A4
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/KjuiUgiTfYUxLjF36WCXBhKk16Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:30::/48
Signature Algorithm: sha256WithRSAEncryption
17:2e:a7:ee:8f:15:3c:ed:5f:20:56:2f:7a:cd:31:a1:6b:3d:
be:46:67:fd:5a:1b:30:bb:07:6a:76:6f:81:b7:38:70:06:82:
f2:90:48:5d:66:da:25:5d:10:22:26:81:42:69:b7:b6:2a:af:
12:ed:07:25:4f:04:03:9c:5f:08:fd:2e:2e:26:91:72:7e:15:
3c:d4:08:47:c8:3e:ea:33:40:20:67:10:28:ce:95:eb:eb:9e:
8a:19:f7:ef:8c:85:ad:ca:ac:53:e0:59:01:66:2a:fb:e5:06:
af:63:32:13:37:30:89:28:73:b3:f6:8f:46:56:0a:5e:57:35:
31:95:60:ec:04:2d:ee:95:ba:58:35:e2:fd:29:c2:3e:ef:a3:
dc:5a:30:1d:f3:d2:c9:53:af:a4:50:94:80:96:d4:0b:61:30:
f3:50:1f:4d:05:98:fa:2d:5f:b8:19:55:61:14:f5:37:20:92:
75:e9:44:df:e0:51:88:8c:49:08:15:d6:26:b2:8a:4c:61:8a:
ee:e2:d0:4e:37:98:eb:41:8f:8a:8e:2b:fe:d4:6a:01:88:3b:
71:99:15:05:bb:a0:aa:72:77:87:2d:46:9e:b1:c0:40:f7:58:
3e:20:c8:26:03:47:b9:4d:d0:be:ae:b3:15:7d:f9:a3:0d:6a:
73:f7:cd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:39:40 2024 by rpki-client on console-ams.rpki-client.org