Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/vuupopNxdD6PgFhf1hnChU--N1Q.roa
File: vuupopNxdD6PgFhf1hnChU--N1Q.roa (raw, json)
Hash identifier: HqCPSvK3BF6gLvD9HCvwgGm7UaDMfYXHwdTEkXs1zBI=
Subject key identifier: BE:EB:A9:A2:93:71:74:3E:8F:80:58:5F:D6:19:C2:85:4F:BE:37:54
Certificate issuer: /CN=f91d20c92c6539ad66da87c7cfe65a9faacca063
Certificate serial: 0192D1BB77BC5571C72D63EA6ACD7BC46B67
Authority key identifier: F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/vuupopNxdD6PgFhf1hnChU--N1Q.roa
Signing time: Mon 28 Oct 2024 06:06:16 +0000
ROA not before: Mon 28 Oct 2024 06:06:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201929
IP address blocks: 2a02:65a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d1:bb:77:bc:55:71:c7:2d:63:ea:6a:cd:7b:c4:6b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91d20c92c6539ad66da87c7cfe65a9faacca063
Validity
Not Before: Oct 28 06:06:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=beeba9a29371743e8f80585fd619c2854fbe3754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:4e:38:f3:95:51:0f:a4:c4:f4:22:f8:0a:
3c:7a:5d:97:c5:8e:4a:ba:96:96:3d:a4:70:a9:b0:
22:75:44:bc:1d:72:61:7e:d9:a1:6d:e3:3d:77:77:
87:52:c7:f6:ff:f3:d8:8a:b1:48:b5:45:32:55:7f:
bb:49:0b:41:cc:a4:5c:fd:c0:1e:49:68:1f:d3:2c:
ea:05:a2:01:89:24:df:4b:5c:c9:26:f3:43:e9:09:
82:3d:8e:98:ee:ce:15:c8:f6:ad:b9:cd:1f:eb:59:
9a:87:df:69:e1:cd:48:fd:a2:5c:15:c5:52:71:7d:
7f:ef:ea:a1:9f:fc:0a:ce:72:f2:bf:84:d7:6a:16:
d1:a1:fa:20:4c:f7:04:12:2d:b9:1f:dd:d7:1f:83:
6a:da:b7:33:db:8f:b4:8b:0f:d4:fe:2c:e5:8a:fd:
86:0f:9e:37:77:a9:a4:b7:9f:07:9a:5b:49:9a:f3:
1f:da:15:14:e0:85:33:90:d3:a8:ef:dc:7c:03:4a:
0c:75:ac:16:ab:f9:9d:b2:cb:36:a5:95:cb:5a:a6:
5f:d1:c1:4b:d7:d0:0a:99:92:a9:2f:5b:18:11:da:
40:b9:fe:27:aa:00:a3:ab:24:e2:0e:dd:45:2c:e6:
ee:43:5d:c0:fc:00:67:22:c7:e6:71:66:f9:ca:99:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EB:A9:A2:93:71:74:3E:8F:80:58:5F:D6:19:C2:85:4F:BE:37:54
X509v3 Authority Key Identifier:
keyid:F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/vuupopNxdD6PgFhf1hnChU--N1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:65a0::/32
Signature Algorithm: sha256WithRSAEncryption
65:6e:02:3a:60:b4:88:3b:b6:98:03:f8:78:25:0d:6e:85:1d:
04:10:5b:a3:d2:f9:c8:d2:27:13:9d:04:9c:29:06:b8:82:e4:
cc:d9:6d:ca:37:59:5e:4f:66:3f:5f:de:db:46:45:56:4f:74:
18:74:bc:82:b0:af:18:92:d9:e4:1b:20:15:de:39:82:72:15:
8f:d6:42:60:9a:4f:7c:22:aa:a8:ba:ab:91:c3:3f:2f:cf:80:
c2:a0:8c:ac:9e:86:25:84:16:3c:41:57:93:45:f6:3a:36:cc:
6b:8d:d6:ec:5b:87:a7:34:76:bf:24:ca:d3:df:6c:7f:ec:36:
fe:20:c5:71:f7:f0:b6:be:c6:f7:4f:3d:09:d1:bd:4e:13:0a:
7b:c3:02:4c:73:f3:c1:2a:01:b4:37:f5:50:8d:f7:fc:1e:4a:
ee:a8:52:ef:7b:e4:37:f8:4a:9d:0d:e7:eb:58:ca:12:50:cb:
3e:14:c8:5e:e0:02:ee:6f:78:f9:19:58:93:7c:1e:11:b9:a0:
af:df:8f:ba:ca:95:44:2e:5c:41:c3:1b:07:92:f7:a0:6a:48:
e8:33:25:31:1c:a2:a4:41:c4:ab:36:14:e5:51:3a:94:dd:21:
0b:b3:f6:fd:4d:d0:52:df:d1:39:50:d3:26:6e:a6:e1:99:23:
48:ca:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:58 2024 by rpki-client on console-fra.rpki-client.org