Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8Rwedjiw917k3HdhA0_4YEvWkr8.roa
File: 8Rwedjiw917k3HdhA0_4YEvWkr8.roa (raw, json)
Hash identifier: uTkNYIpywTAIo+U4B2BXvkjuZ+QarpcZsmrQWNIG0AM=
Subject key identifier: F1:1C:1E:76:38:B0:F7:5E:E4:DC:77:61:03:4F:F8:60:4B:D6:92:BF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019349497186C98F6A3F3DE2078B43E7002F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8Rwedjiw917k3HdhA0_4YEvWkr8.roa
Signing time: Wed 20 Nov 2024 11:16:10 +0000
ROA not before: Wed 20 Nov 2024 11:16:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28753
IP address blocks: 2a04:9f40::/29 maxlen: 29
2a06:1184:100::/48 maxlen: 48
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a09:17c1:66::/48 maxlen: 48
2a09:17c1:77::/48 maxlen: 48
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:88::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0e:1a83:77::/48 maxlen: 48
2a0e:f603:66::/48 maxlen: 48
2a0f:1206:55::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:2500::/29 maxlen: 29
2a0f:3d86:88::/48 maxlen: 48
2a0f:3d86:99::/48 maxlen: 48
2a0f:7d06:88::/48 maxlen: 48
2a0f:7d06:99::/48 maxlen: 48
2a0f:d200::/29 maxlen: 29
2a0f:e1c1:22::/48 maxlen: 48
2a0f:e202:44::/48 maxlen: 48
2a0f:e202:55::/48 maxlen: 48
2a0f:e202:100::/48 maxlen: 48
2a0f:e6c6:100::/48 maxlen: 48
2a0f:e6c6:101::/48 maxlen: 48
2a0f:e7c6:66::/48 maxlen: 48
2a0f:e7c6:77::/48 maxlen: 48
2a0f:e7c6:88::/48 maxlen: 48
2a0f:e844:22::/48 maxlen: 48
2a0f:e844:33::/48 maxlen: 48
2a0f:ea44:66::/48 maxlen: 48
2a0f:ea44:77::/48 maxlen: 48
2a12:ac46:77::/48 maxlen: 48
2a12:ecc0:168::/48 maxlen: 48
2a12:ecc0:178::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
2a13:18c6:77::/48 maxlen: 48
2a13:18c6:88::/48 maxlen: 48
2a13:7d80::/29 maxlen: 29
2a13:8c86:10a::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
2a13:8c86:130::/48 maxlen: 48
2a13:c900:88::/48 maxlen: 48
2a13:c900:99::/48 maxlen: 48
2a13:e107:99::/48 maxlen: 48
2a13:e107:9c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:49:49:71:86:c9:8f:6a:3f:3d:e2:07:8b:43:e7:00:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 20 11:16:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f11c1e7638b0f75ee4dc7761034ff8604bd692bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a3:82:55:0d:b6:a1:d1:31:38:a6:11:2e:d0:
0f:e8:2c:92:38:b9:4b:54:6b:b6:5d:0d:61:aa:af:
bc:4a:af:2c:01:cd:49:c4:20:63:95:17:55:3d:b9:
a3:69:69:d2:0e:f0:c3:27:72:dd:56:74:b4:61:6d:
9a:19:c4:82:cc:b5:5d:60:e3:7b:76:cb:71:0a:49:
96:53:50:b2:22:53:bf:1d:9f:20:e7:a6:af:26:0b:
8b:4e:ea:94:c3:73:bb:53:11:cd:94:e6:dd:0d:f4:
76:b1:d9:60:cc:6f:aa:f1:bc:22:9f:84:40:61:aa:
a9:25:d3:e2:90:27:5b:0e:d8:5c:48:2f:68:f6:53:
2a:f5:29:b8:a0:67:e9:00:d9:71:f6:b2:8c:2d:af:
fb:8b:39:8e:48:9c:c1:09:be:e7:85:f4:32:13:6b:
f8:e0:8a:ee:20:ce:91:00:54:44:f2:75:a6:42:e0:
4a:9f:3f:ca:9e:0e:d7:a5:61:08:90:39:ca:d0:22:
bf:d3:b8:7f:86:cb:e2:95:bf:2c:8f:e1:c0:20:32:
fb:77:0e:95:cd:e5:fe:e0:1c:cd:c4:9a:87:4b:13:
7f:c4:d3:09:09:df:dd:36:c0:aa:5d:fd:ee:6a:e9:
3b:04:60:0d:a8:01:89:07:4d:20:4f:f2:44:43:1e:
f6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1C:1E:76:38:B0:F7:5E:E4:DC:77:61:03:4F:F8:60:4B:D6:92:BF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8Rwedjiw917k3HdhA0_4YEvWkr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9f40::/29
2a06:1184:100::/47
2a06:3bc0::/29
2a07:8a40::/29
2a09:17c1:66::/48
2a09:17c1:77::/48
2a0a:2d06:102::/47
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:88::/48
2a0e:15c7:99::/48
2a0e:1a83:77::/48
2a0e:f603:66::/48
2a0f:1206:55::/48
2a0f:1206:66::/48
2a0f:2500::/29
2a0f:3d86:88::/48
2a0f:3d86:99::/48
2a0f:7d06:88::/48
2a0f:7d06:99::/48
2a0f:d200::/29
2a0f:e1c1:22::/48
2a0f:e202:44::/48
2a0f:e202:55::/48
2a0f:e202:100::/48
2a0f:e6c6:100::/47
2a0f:e7c6:66::/48
2a0f:e7c6:77::/48
2a0f:e7c6:88::/48
2a0f:e844:22::/48
2a0f:e844:33::/48
2a0f:ea44:66::/48
2a0f:ea44:77::/48
2a12:ac46:77::/48
2a12:ecc0:168::/48
2a12:ecc0:178::/48
2a13:18c6:55::/48
2a13:18c6:77::/48
2a13:18c6:88::/48
2a13:7d80::/29
2a13:8c86:10a::/48
2a13:8c86:120::/48
2a13:8c86:130::/48
2a13:c900:88::/48
2a13:c900:99::/48
2a13:e107:99::/48
2a13:e107:9c::/48
Signature Algorithm: sha256WithRSAEncryption
93:8e:2d:f3:fb:40:f2:64:d8:34:41:1a:0c:34:91:39:e3:fd:
bc:05:34:18:c1:b8:5d:05:dd:cc:65:b0:9b:c6:10:2f:ea:47:
66:bb:78:86:b6:5d:5f:dc:d6:90:99:12:de:1e:cd:db:ef:6f:
d0:da:84:02:85:d8:7e:34:d0:0f:f5:dd:f7:d1:00:f2:5c:c7:
1a:07:99:84:67:07:d3:b9:02:15:5b:6e:05:d2:2c:0d:92:c8:
ef:32:a3:84:d5:62:69:82:e1:8c:bc:78:dd:ac:d7:83:3d:83:
56:c2:0d:07:04:a9:7a:26:92:a7:eb:0d:dd:58:42:bd:01:ca:
c9:ab:85:d6:b9:7a:d5:53:95:86:d6:4a:22:2b:9b:9e:80:37:
99:ab:24:1a:03:49:0e:ac:74:8e:e5:4c:f5:7c:7e:80:51:9a:
30:71:b4:72:2f:e3:a9:83:55:90:8b:bc:4d:e0:4b:fb:7c:88:
9f:95:e0:74:8d:ff:b2:54:0b:8e:a3:3e:dc:f9:2a:87:15:85:
23:fb:af:5f:6f:bb:2b:9d:ed:8c:4d:18:55:66:d1:55:e7:3a:
49:54:7f:14:5d:f5:3f:d9:d3:f3:14:48:33:e9:be:57:db:e9:
72:75:7c:a1:d3:81:2d:1a:73:c1:55:fd:cb:ba:4a:ed:89:3e:
55:37:86:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:45:40 2024 by rpki-client on console-fra.rpki-client.org