Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/waMMIyyy0TWRXdPJtgo3qAjucX8.roa
File: waMMIyyy0TWRXdPJtgo3qAjucX8.roa (raw, json)
Hash identifier: edEfhCbrB7wt8Pwrz41roI2h/r6CTpVfXPgg6mIiGDw=
Subject key identifier: C1:A3:0C:23:2C:B2:D1:35:91:5D:D3:C9:B6:0A:37:A8:08:EE:71:7F
Certificate issuer: /CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Certificate serial: 019333CB1EC6F47C2B1FA259BBD34BC46237
Authority key identifier: 99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/waMMIyyy0TWRXdPJtgo3qAjucX8.roa
Signing time: Sat 16 Nov 2024 07:06:09 +0000
ROA not before: Sat 16 Nov 2024 07:06:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215137
IP address blocks: 2a07:5900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:33:cb:1e:c6:f4:7c:2b:1f:a2:59:bb:d3:4b:c4:62:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Validity
Not Before: Nov 16 07:06:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1a30c232cb2d135915dd3c9b60a37a808ee717f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:83:d5:f3:78:9b:b5:14:06:50:f0:75:20:
bf:9a:ed:12:29:c6:95:b6:b2:c0:44:a1:03:fd:16:
af:71:95:66:04:bf:24:a2:cd:3b:c7:38:f1:f8:0f:
50:77:9c:5d:30:e8:50:42:6e:e0:24:0c:af:19:01:
ef:1e:5c:ec:d7:14:67:db:52:47:40:5f:7d:f4:3c:
ae:49:c5:db:9b:fb:30:4e:42:b5:f8:59:84:d6:63:
0d:93:c4:ac:36:8a:06:b7:05:43:d7:a3:7d:fb:e6:
d5:d1:78:10:33:6c:83:ca:dc:ae:af:d1:a9:24:8f:
e2:33:a8:36:58:97:da:4f:9a:61:16:8b:cd:48:be:
23:21:96:dc:dd:28:51:1b:ca:d0:ca:12:0a:2f:48:
4a:ab:94:68:6c:42:cb:a1:87:f1:1f:9c:80:da:1e:
83:af:d7:a4:eb:ff:4c:7b:d5:70:ba:7b:a4:8b:49:
bc:77:4d:72:1a:12:75:51:97:68:2f:54:3f:f9:a6:
42:17:4b:69:ad:62:eb:75:13:3c:5e:87:48:2a:82:
b8:fa:33:65:e7:83:e6:3c:85:77:11:25:c8:34:65:
8f:4f:c3:9e:d2:b4:20:26:74:bf:43:13:b7:2e:2c:
cc:b8:80:dd:20:03:9b:44:2c:81:5f:5c:53:27:68:
cc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A3:0C:23:2C:B2:D1:35:91:5D:D3:C9:B6:0A:37:A8:08:EE:71:7F
X509v3 Authority Key Identifier:
keyid:99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/waMMIyyy0TWRXdPJtgo3qAjucX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:5900::/29
Signature Algorithm: sha256WithRSAEncryption
26:35:4a:de:c6:7c:4f:51:0d:d8:c9:1c:f7:7c:55:11:f7:96:
10:76:29:ac:3f:e3:d1:01:45:f1:5c:b4:0c:97:6c:27:e8:93:
69:bc:38:bd:da:4b:53:3e:26:85:5c:40:c8:7a:e5:b7:c3:6a:
04:4f:c0:c2:1e:3f:fb:73:86:f6:e3:69:09:92:2f:8d:0d:c4:
9c:2a:98:8f:47:0d:d0:a6:66:12:72:9e:c8:4f:cb:96:b7:a2:
9d:aa:fc:64:74:9c:dd:21:4e:20:b3:54:2f:5d:f4:56:11:8c:
c0:61:bd:f0:d5:b0:f1:94:22:4f:24:81:90:8c:1e:ae:9d:8d:
3c:6d:00:0c:e3:fd:8e:b0:d2:44:bf:fa:ad:e3:21:17:fe:fb:
d5:45:01:79:a1:f6:61:61:07:d3:ce:4c:d4:06:53:19:27:1a:
fd:44:bd:52:d3:63:51:18:ae:87:42:b3:40:2f:c4:ba:8f:be:
09:4a:e1:d9:92:4f:c8:e0:47:79:fb:e5:d7:b1:6d:18:83:89:
a4:25:ed:44:31:7f:a1:aa:ad:51:fc:ed:25:02:de:ea:df:f7:
a1:36:06:8c:14:92:7e:a8:57:bc:23:44:35:46:79:b1:3f:26:
89:3c:c1:3e:14:0d:90:80:e2:89:ed:06:0f:1d:5e:62:0c:ae:
db:7f:f3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:47:47 2024 by rpki-client on console-fra.rpki-client.org