Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/vvXohKlcBGA7ZmGhiQeKlMHxJqY.roa
File: vvXohKlcBGA7ZmGhiQeKlMHxJqY.roa (raw, json)
Hash identifier: VR3+30/iRr7DMdsPAQPFXwmZPwN/sZZBbFzphJvwnJA=
Subject key identifier: BE:F5:E8:84:A9:5C:04:60:3B:66:61:A1:89:07:8A:94:C1:F1:26:A6
Certificate issuer: /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Certificate serial: 0191DFE19625290FCF9AC63CF7BBE8C7C1C3
Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/vvXohKlcBGA7ZmGhiQeKlMHxJqY.roa
Signing time: Wed 11 Sep 2024 06:59:48 +0000
ROA not before: Wed 11 Sep 2024 06:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214235
IP address blocks: 2a10:b9c7::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:df:e1:96:25:29:0f:cf:9a:c6:3c:f7:bb:e8:c7:c1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Validity
Not Before: Sep 11 06:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bef5e884a95c04603b6661a189078a94c1f126a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e5:e3:b9:03:34:0f:8d:a1:44:03:a9:ad:59:
ac:5d:03:f6:43:0d:ad:0b:2e:bb:aa:26:59:34:ba:
ce:d9:cc:28:ff:e0:8f:c7:49:bd:5c:de:e7:cd:84:
ee:0f:48:cd:ac:38:4c:95:14:e0:43:66:24:66:f6:
e4:79:96:d4:28:e4:44:c2:4c:2a:7c:99:50:6f:65:
f1:32:38:20:d8:8c:60:a7:cf:ce:eb:ec:79:d7:21:
a0:ba:fd:24:ee:23:db:a1:2d:23:9a:e1:70:59:8f:
68:c9:96:17:b6:91:97:54:3f:47:8d:8f:87:8d:b2:
4a:c7:05:1e:cb:ef:ad:5d:6a:59:e4:1a:91:fc:5f:
7e:38:09:14:61:12:16:92:a5:f0:c5:56:f9:42:0c:
db:69:92:9b:2b:bd:fe:eb:55:28:6b:95:d8:7a:fd:
81:f2:75:e9:8e:83:63:5b:de:ce:b2:54:46:ec:6e:
a8:ca:c9:f1:d0:ee:e1:74:2b:da:d8:61:e2:c7:56:
dd:f5:fe:44:22:56:63:da:ac:86:5d:e4:61:88:07:
9d:41:6b:91:78:a0:f2:c6:58:94:4a:dd:5d:e5:c6:
7d:a3:a2:bf:d1:ed:9a:ff:37:82:09:6e:70:35:09:
d4:cf:d3:e5:c7:bb:64:08:4e:5c:cf:d7:63:74:cc:
d3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F5:E8:84:A9:5C:04:60:3B:66:61:A1:89:07:8A:94:C1:F1:26:A6
X509v3 Authority Key Identifier:
keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/vvXohKlcBGA7ZmGhiQeKlMHxJqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:b9c7::/44
Signature Algorithm: sha256WithRSAEncryption
c5:ca:a1:e6:e4:be:fc:4a:b7:75:69:e9:8e:c0:53:70:d0:eb:
ab:63:1b:7e:05:10:79:7a:0b:5f:80:d7:9c:15:5d:07:b3:45:
a8:32:5f:ac:36:bc:01:38:69:f5:05:94:9c:db:65:1c:eb:a6:
26:af:48:3b:40:c4:de:ad:de:41:ae:ce:bf:ad:4d:e5:c8:b1:
07:56:3c:13:2a:24:a1:42:3e:79:ff:1e:44:46:1e:2e:c3:53:
e0:56:2a:72:05:04:4b:c5:50:89:8f:f4:7c:de:1f:46:46:7b:
26:ad:4c:3b:91:9c:2a:c2:cc:d2:41:41:fb:9f:3c:11:f7:62:
78:8b:67:40:a6:39:7f:2c:52:cb:29:10:bf:f4:00:e4:35:a6:
a4:be:02:eb:b2:12:7a:36:71:33:1a:86:aa:8c:4f:55:4d:68:
2b:24:3e:4e:87:a5:85:3e:36:96:bf:b7:d3:c7:0c:9b:67:99:
0b:49:d7:b9:2b:46:3d:a5:e2:8c:65:e1:c1:b5:62:17:ce:56:
79:95:76:a8:f2:4c:bf:ba:be:1b:3e:45:e8:fe:a7:72:b5:18:
39:09:fe:79:3a:08:1c:cc:38:2b:fd:7d:d8:df:13:5f:ba:86:
c4:36:c1:c3:b4:72:04:46:34:bd:34:9c:da:86:4a:d2:8f:6c:
ab:39:9e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:06 2024 by rpki-client on console-ams.rpki-client.org