Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/LXu2vkYJxLSDI-ZDuY5ekjCOI70.roa
File: LXu2vkYJxLSDI-ZDuY5ekjCOI70.roa (raw, json)
Hash identifier: qLNQ4rkitwwiyfNNiyexNFJn8+ymxLXXBNRH4BOG/ck=
Subject key identifier: 2D:7B:B6:BE:46:09:C4:B4:83:23:E6:43:B9:8E:5E:92:30:8E:23:BD
Certificate issuer: /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial: 019210302635953148E584973F6012B34C43
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/LXu2vkYJxLSDI-ZDuY5ekjCOI70.roa
Signing time: Fri 20 Sep 2024 16:07:23 +0000
ROA not before: Fri 20 Sep 2024 16:07:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212374
IP address blocks: 2a07:7940:15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:10:30:26:35:95:31:48:e5:84:97:3f:60:12:b3:4c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Validity
Not Before: Sep 20 16:07:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d7bb6be4609c4b48323e643b98e5e92308e23bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:a6:bd:ff:7a:4c:e0:da:2f:fb:da:87:6b:
ca:d7:43:18:da:3e:26:a3:da:98:71:85:64:fe:80:
2e:25:a7:c7:4d:af:82:68:6e:1b:2e:a4:fe:0b:82:
03:ef:4e:4d:ae:2c:7d:23:65:e1:1f:d8:f1:09:d0:
bf:b3:8b:b6:25:a8:8d:d7:99:ae:2b:fc:b4:76:bf:
61:82:c9:bd:b7:b8:f7:a0:fc:1b:bc:2d:84:47:3e:
97:03:c2:98:e3:60:2b:54:2a:70:d0:51:c1:bb:47:
d4:fb:8b:5c:3a:76:5e:ae:b9:a0:c3:55:bf:e3:91:
a9:72:64:ad:ad:e2:b8:00:d6:7d:85:51:22:46:22:
e8:47:15:bc:99:f5:8c:6b:13:11:53:9e:c4:69:9d:
82:98:cc:d0:22:04:3a:ed:c6:99:e9:3e:50:58:b1:
ab:b9:34:46:6e:71:88:8f:81:b1:5d:c0:f3:cc:99:
b4:e2:17:25:6b:ba:d2:ae:11:3e:16:1a:54:56:f1:
a2:4a:99:b4:08:fe:27:fe:f7:1c:c1:64:34:cb:89:
91:38:33:72:4c:b0:84:09:a6:c1:c7:4e:6c:fa:34:
ba:01:56:fe:f0:2a:85:6b:ed:bd:11:7b:b2:75:d9:
0c:eb:2e:81:2d:9d:d0:b1:43:1e:31:cc:46:c7:49:
c9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7B:B6:BE:46:09:C4:B4:83:23:E6:43:B9:8E:5E:92:30:8E:23:BD
X509v3 Authority Key Identifier:
keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/LXu2vkYJxLSDI-ZDuY5ekjCOI70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:7940:15::/48
Signature Algorithm: sha256WithRSAEncryption
4a:f1:24:5c:8b:6d:ba:c7:a4:66:22:95:ce:d0:92:f5:9a:79:
de:94:7a:19:de:d4:03:cd:00:fb:26:64:b8:13:f0:36:86:c7:
ab:16:a7:64:20:95:9d:9e:a6:89:31:50:37:e0:e2:d3:bb:76:
f9:ad:7a:42:f3:57:6f:c9:17:02:f4:30:cb:50:b8:14:f6:c0:
86:9c:5a:fc:f4:fd:f6:d6:3f:ea:e1:2a:52:52:2f:76:01:30:
71:9b:29:01:83:b5:7f:f2:fd:08:b0:b3:27:51:59:37:5b:04:
e1:0b:e9:d8:85:90:f6:82:d6:2f:a8:04:31:4a:54:17:d2:ef:
ef:e7:db:75:f9:39:5d:84:2d:f9:a0:c0:24:47:aa:81:99:fe:
83:e9:0a:35:75:2e:d2:b5:14:9e:28:6a:d3:0f:ea:b8:06:81:
7e:38:09:34:3d:d5:db:85:7c:19:5a:93:57:d4:e3:7d:f6:a6:
a7:5d:71:2e:d7:e3:14:01:dd:5b:43:f4:77:52:4a:98:07:2d:
a3:37:7f:3a:de:e9:45:bf:64:72:a6:ae:99:3a:ff:98:f1:53:
81:fa:45:21:39:3c:f5:de:e2:e6:fb:78:16:8d:21:f1:57:1c:
54:e8:e4:65:ce:64:3a:ff:1a:18:ae:a3:86:65:ec:1a:d5:c6:
e3:dd:20:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:22:40 2024 by rpki-client on console-fra.rpki-client.org