Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9VgaVpn2RBKUEeoUudbhkq_P4QY.roa
File: 9VgaVpn2RBKUEeoUudbhkq_P4QY.roa (raw, json)
Hash identifier: b9Z6l+O+6ZtNdS8VdjW+93RAabtCXEn2eLXiA/jxUuw=
Subject key identifier: F5:58:1A:56:99:F6:44:12:94:11:EA:14:B9:D6:E1:92:AF:CF:E1:06
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190C47FE7C0F06F8AE148A00C0E60BC1CC3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9VgaVpn2RBKUEeoUudbhkq_P4QY.roa
Signing time: Thu 18 Jul 2024 06:20:35 +0000
ROA not before: Thu 18 Jul 2024 06:20:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139791
IP address blocks: 2a06:3600::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c4:7f:e7:c0:f0:6f:8a:e1:48:a0:0c:0e:60:bc:1c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 18 06:20:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5581a5699f644129411ea14b9d6e192afcfe106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:49:20:29:da:32:6a:16:57:17:51:87:2e:
41:51:7e:39:86:06:be:50:ea:d7:b4:39:7d:c9:7a:
f6:56:0d:5f:d6:59:c1:3c:b4:9f:dc:36:2b:2c:36:
56:4e:15:66:ab:fb:17:1b:4a:f3:71:d9:4b:d3:94:
16:c9:87:3c:57:77:2e:de:7b:b1:5f:0e:60:4a:b7:
35:4e:ff:d2:7a:85:7f:9b:f8:b2:ef:70:c6:80:6c:
7f:9f:4d:1a:6f:e5:87:e1:43:f2:e0:cf:90:dd:be:
49:9e:a1:89:a2:0b:3c:91:59:89:c5:f9:7d:c1:b0:
a8:31:2f:55:f9:a5:34:8b:5d:3d:51:dd:f5:e3:f9:
a8:ad:35:60:a6:63:a2:e5:7e:61:ac:01:ad:ea:81:
c7:b8:e0:f2:98:dc:50:de:87:8d:e2:bb:ce:e5:02:
45:a5:f9:8a:0e:0d:1b:6c:e7:96:ab:2c:a5:45:89:
bf:69:66:42:2e:fd:57:6f:04:60:1a:45:bf:3c:e6:
23:43:75:9f:36:77:63:1c:d0:f3:cd:47:22:14:6b:
a4:6b:a2:4c:12:d5:e1:0c:90:48:98:ac:35:a1:55:
b9:d1:78:62:cc:58:54:3f:03:a7:f8:8b:61:e3:c4:
d1:d7:77:f5:de:1a:95:e2:aa:8a:50:3a:bd:aa:d2:
ef:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:58:1A:56:99:F6:44:12:94:11:EA:14:B9:D6:E1:92:AF:CF:E1:06
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9VgaVpn2RBKUEeoUudbhkq_P4QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:3600::/29
Signature Algorithm: sha256WithRSAEncryption
66:56:fd:89:60:e4:15:4c:d5:2f:57:85:20:5f:ba:90:44:31:
5d:17:5f:44:47:2b:3a:d1:2c:4e:9b:fa:5f:06:35:a5:fe:d2:
11:ca:cf:69:2d:6c:6a:0d:8d:7f:a4:b5:ef:d3:b3:3a:8b:cb:
76:89:d6:1e:24:13:a5:bb:e6:51:34:0b:fd:1a:e5:f2:56:02:
c2:90:37:40:6d:7d:19:bc:0a:07:cf:f6:28:95:fb:f0:a1:33:
a6:45:2e:c7:e6:7d:76:51:d0:45:97:d7:e7:5b:da:ef:7d:70:
3a:a3:8b:b6:5f:b5:0b:51:fe:5d:79:37:69:27:51:7d:af:3e:
44:dd:f3:16:54:be:2d:33:ee:f6:9b:a2:c1:58:04:5d:99:b9:
1c:90:68:2d:28:ae:1a:aa:26:74:72:ab:9d:52:8e:97:c0:d4:
cc:f9:e0:98:c6:bd:b6:55:7e:7a:5d:8b:8b:57:04:ec:cb:41:
23:41:56:95:a1:87:eb:70:6b:e7:5c:45:25:d4:05:21:59:31:
77:e3:39:f6:45:a9:96:08:1b:f2:ea:f2:cb:8e:a7:0f:51:6a:
ff:d2:a8:44:89:3a:3e:bd:75:0e:c7:52:ba:8d:0c:02:7c:2c:
af:06:88:78:cd:eb:1a:5f:0c:ce:1f:60:c5:ff:82:79:99:cd:
ab:41:dc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:02:08 2024 by rpki-client on console-fra.rpki-client.org