Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/CliJIh4Q4p_jlh3ITtGkFXaHGD8.roa
File: CliJIh4Q4p_jlh3ITtGkFXaHGD8.roa (raw, json)
Hash identifier: TEFw6wjuHcO6IQ4mRqbu7ZfStBr9Jk9pY6e31ZYDJCU=
Subject key identifier: 0A:58:89:22:1E:10:E2:9F:E3:96:1D:C8:4E:D1:A4:15:76:87:18:3F
Certificate issuer: /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial: 01925A5712D48890AB5B367568633708709D
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/CliJIh4Q4p_jlh3ITtGkFXaHGD8.roa
Signing time: Sat 05 Oct 2024 01:41:48 +0000
ROA not before: Sat 05 Oct 2024 01:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216394
IP address blocks: 2a01:f905::/32 maxlen: 32
2a01:f905:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5a:57:12:d4:88:90:ab:5b:36:75:68:63:37:08:70:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Validity
Not Before: Oct 5 01:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a5889221e10e29fe3961dc84ed1a4157687183f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ce:a1:ad:a9:22:76:e7:ca:8f:62:74:ff:fb:
81:74:4c:cb:a0:16:cd:cc:dd:2d:0a:15:22:b9:ac:
8d:64:47:35:1b:0f:e6:bc:59:21:16:6f:89:a3:94:
90:01:f8:af:f4:3f:a9:38:33:fa:25:78:32:62:a0:
bc:27:90:f3:31:a3:00:69:d8:0a:1e:ea:05:aa:16:
55:40:6f:f4:c7:0f:77:28:51:9b:81:44:7c:fb:dc:
d8:d8:0e:f6:83:30:e0:6f:19:9b:84:f4:b5:6e:97:
a6:4e:f8:fa:fc:f3:16:67:34:74:cb:df:12:6c:16:
8c:62:70:dc:0f:a6:4f:ef:a6:b6:48:13:bc:02:1a:
70:41:3d:30:6c:e1:8a:28:79:bb:5a:58:6f:51:1a:
dd:d0:e1:11:db:de:69:a8:1e:05:45:40:f9:a8:a5:
2e:b5:12:6d:cb:48:e0:d5:10:ea:01:81:58:ce:39:
59:45:0b:12:86:c4:4a:40:64:a5:1d:88:a4:04:bc:
fd:b2:01:42:e7:bd:a3:21:35:e9:a4:47:41:a3:9f:
22:88:45:05:a2:5f:51:69:f8:3a:0a:ce:6f:d7:a8:
a4:66:d2:cd:b0:75:6e:00:3c:90:24:aa:dc:7d:d8:
53:5f:bb:cd:59:1b:d6:ef:45:e1:22:36:b8:2d:9d:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:58:89:22:1E:10:E2:9F:E3:96:1D:C8:4E:D1:A4:15:76:87:18:3F
X509v3 Authority Key Identifier:
keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/CliJIh4Q4p_jlh3ITtGkFXaHGD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f905::/32
Signature Algorithm: sha256WithRSAEncryption
83:5b:21:d0:1a:15:e3:a1:d5:28:c9:02:a0:8d:31:61:22:48:
f9:dd:15:bc:06:0b:6a:c9:49:6d:21:4c:13:27:5b:2f:c4:00:
f9:d0:6d:42:02:8f:8d:ee:70:8f:b6:fe:7a:e6:aa:6a:e9:62:
13:a8:7c:ed:ec:ac:9b:5f:f4:75:2a:a9:1e:5e:20:74:b9:6f:
4b:30:67:8c:8b:21:cc:c8:29:ba:b0:39:b6:e0:63:18:ff:31:
80:31:6b:14:02:9c:96:24:60:0c:7a:3c:e3:35:1e:32:a4:a3:
e9:89:f8:ea:64:54:10:6e:5c:63:bd:c8:08:d8:15:fe:37:5c:
68:f7:24:d6:95:fe:37:4c:31:cd:79:64:fc:d5:42:21:90:72:
a6:6e:ed:a8:8d:80:a3:29:53:04:3d:cd:d3:f5:2c:4a:fd:24:
e5:07:ce:88:2a:81:b6:3c:9c:de:eb:ad:ea:1e:88:5b:51:f4:
c2:6e:08:a0:51:7c:41:a3:ec:23:de:d5:40:23:c5:8d:bd:30:
ff:4e:e1:35:f7:a9:96:e2:5c:7b:d1:b1:c3:0f:36:4a:c9:3c:
9f:23:03:7a:9c:21:d5:56:41:66:53:66:98:b3:dc:6b:59:f0:
a5:7d:a0:d4:76:d4:65:df:81:a2:be:ec:de:4a:ce:f0:1d:27:
b6:8e:a8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:02:25 2024 by rpki-client on console-ams.rpki-client.org