Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FdjphHyqM3vylX33WMxpT-mI5Pw.roa
File: FdjphHyqM3vylX33WMxpT-mI5Pw.roa (raw, json)
Hash identifier: Yyxrrie+15XfV2paezO6SAFa8fW+Y8hjefnTzyStEf4=
Subject key identifier: 15:D8:E9:84:7C:AA:33:7B:F2:95:7D:F7:58:CC:69:4F:E9:88:E4:FC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019223BEA352302E5AD429AF695A9C4A3014
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FdjphHyqM3vylX33WMxpT-mI5Pw.roa
Signing time: Tue 24 Sep 2024 11:15:48 +0000
ROA not before: Tue 24 Sep 2024 11:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200021
IP address blocks: 2a10:3040::/29 maxlen: 29
2a10:7d00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:23:be:a3:52:30:2e:5a:d4:29:af:69:5a:9c:4a:30:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 24 11:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15d8e9847caa337bf2957df758cc694fe988e4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:d0:ec:ec:69:6f:57:70:81:40:d8:32:61:
38:5f:5a:b2:42:a3:a6:a7:7f:8c:d2:76:ab:8a:d8:
ad:18:33:c9:39:7e:ea:97:9c:e3:61:25:33:b8:2d:
49:2b:89:c1:e9:08:81:9b:2e:20:0d:9e:b5:6b:4a:
e5:23:80:89:aa:e1:f8:05:72:3b:d9:a0:4b:31:e7:
db:af:3f:dc:65:89:41:75:87:60:26:0c:7f:05:16:
4c:f7:ec:36:29:c5:f7:fa:60:83:c1:5c:33:5c:de:
94:48:e4:f4:f2:a5:6f:b0:99:0a:6b:e9:20:f7:6f:
68:89:8a:98:17:11:76:45:6c:3a:7e:88:39:0a:b6:
b0:f8:a8:e4:72:52:ef:62:2b:e9:c3:93:82:7c:9b:
b8:28:ab:8e:f2:b3:72:2e:7b:dd:28:9c:ad:eb:b6:
d3:d5:79:6c:a1:80:fc:a7:15:f4:b9:ad:6c:fc:0e:
ec:85:d0:1d:29:64:be:52:24:23:cc:87:4c:ee:c4:
d0:67:8b:57:8f:68:3f:8d:f1:52:56:a9:79:38:d1:
32:d8:86:a5:2c:a7:96:bf:9f:71:4e:37:7d:a9:c1:
fc:95:8c:46:d0:d4:28:b5:c0:73:5e:68:38:8e:41:
b8:fc:3a:e2:dd:6c:0e:ae:07:5c:a6:33:15:a5:33:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D8:E9:84:7C:AA:33:7B:F2:95:7D:F7:58:CC:69:4F:E9:88:E4:FC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FdjphHyqM3vylX33WMxpT-mI5Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3040::/29
2a10:7d00::/29
Signature Algorithm: sha256WithRSAEncryption
35:c0:2c:16:f0:c2:cf:48:b5:12:9a:ab:e5:49:83:1a:45:02:
e0:d8:95:63:55:34:e0:ef:eb:70:86:97:8d:44:f1:82:26:37:
c2:1a:97:66:fd:e9:3d:61:bf:67:b4:c0:4f:b6:73:6f:c3:42:
06:49:e3:eb:36:06:b6:d5:a4:b4:b9:96:c3:35:49:7c:47:a8:
9a:59:ff:95:59:81:61:5a:9a:cc:09:5a:f3:01:8b:62:41:b0:
29:be:20:14:58:3d:e8:7f:1a:24:6a:17:79:88:20:88:34:a6:
6d:77:8c:68:3c:f5:c7:24:d7:a8:63:a8:39:7c:00:27:46:2a:
31:11:3d:64:75:8c:6c:3f:60:e4:11:79:0d:aa:6d:2e:f0:6a:
8b:80:6a:99:26:ce:ee:da:d0:7a:7b:0b:a9:1f:b5:b2:d4:17:
7a:5c:b4:f6:a4:18:f7:9b:12:c2:4b:44:f1:2a:5f:db:10:93:
87:eb:2e:4f:39:9e:b8:6a:dc:7b:a2:6f:46:9a:ff:17:45:b2:
93:f3:54:be:9c:51:38:d3:96:cc:83:85:8b:ff:6f:ac:65:d4:
6b:3b:49:39:0b:8e:55:e6:13:bb:2e:cf:ed:09:87:fc:1c:a2:
89:c0:f7:7f:8f:da:fb:18:d9:1f:d2:48:0a:b9:4a:11:05:12:
1a:74:d5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:48:28 2024 by rpki-client on console-ams.rpki-client.org