Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XeQY-b9Luhgt0ITZF0juwAFuano.roa
File: XeQY-b9Luhgt0ITZF0juwAFuano.roa (raw, json)
Hash identifier: 4SSrYUG7u0wCrNdaWPbvyf3JQc2lbXJiu/Cdh18OKz8=
Subject key identifier: 5D:E4:18:F9:BF:4B:BA:18:2D:D0:84:D9:17:48:EE:C0:01:6E:6A:7A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0191E2BFD81FA1FBEF743C4E26DC41BB21E6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XeQY-b9Luhgt0ITZF0juwAFuano.roa
Signing time: Wed 11 Sep 2024 20:21:49 +0000
ROA not before: Wed 11 Sep 2024 20:21:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32489
IP address blocks: 2a0f:db40::/32 maxlen: 32
2a0f:db41::/32 maxlen: 32
2a0f:db42::/32 maxlen: 32
2a0f:db43::/32 maxlen: 32
2a0f:db44::/32 maxlen: 32
2a0f:db45::/32 maxlen: 32
2a0f:db46::/32 maxlen: 32
2a0f:db47::/32 maxlen: 32
2a12:f5c0::/32 maxlen: 32
2a12:f5c1::/32 maxlen: 32
2a12:f5c2::/32 maxlen: 32
2a12:f5c3::/32 maxlen: 32
2a12:f5c4::/32 maxlen: 32
2a12:f5c5::/32 maxlen: 32
2a12:f5c6::/32 maxlen: 32
2a12:f5c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e2:bf:d8:1f:a1:fb:ef:74:3c:4e:26:dc:41:bb:21:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 11 20:21:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5de418f9bf4bba182dd084d91748eec0016e6a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:93:ab:42:c2:3e:7f:11:33:8d:c6:c4:2d:
5e:27:85:b7:ce:4a:e1:70:71:34:c9:06:3f:85:95:
59:a2:44:d8:78:14:de:75:80:2d:35:6a:66:7e:3a:
78:0a:5e:4a:25:07:94:ba:98:b4:70:0b:bb:dd:5e:
37:f1:51:bc:cb:19:41:cf:b6:44:db:9e:ba:c9:62:
52:03:51:22:76:bc:64:bb:69:a5:f3:11:cd:67:c4:
3a:9d:67:c8:06:e1:98:79:ad:3d:dc:da:b0:32:2c:
87:7f:53:d0:16:5d:04:39:73:14:c2:17:11:ff:72:
6c:6c:ba:3f:46:88:85:ee:9e:bc:b2:eb:73:d5:7b:
3f:9e:2b:1f:f9:0e:03:a3:ed:6f:c7:f8:ae:42:ec:
d6:e9:5d:c7:58:7e:49:de:1d:31:e6:43:54:07:c6:
e8:0e:c0:d5:62:87:e2:e0:20:be:f1:4d:aa:c3:29:
c7:37:79:42:4a:76:9e:7f:2c:70:fb:ce:66:88:ea:
1e:78:0c:d4:44:e9:a6:e4:f0:95:96:b1:79:55:50:
33:09:ba:93:bb:89:c3:12:7c:4b:8d:a2:5c:dd:f5:
3a:db:6d:fd:a4:b5:2f:b2:50:9d:0a:25:e7:c9:4f:
3a:34:10:a3:2a:cf:d9:a3:e0:4d:30:80:56:1c:c7:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E4:18:F9:BF:4B:BA:18:2D:D0:84:D9:17:48:EE:C0:01:6E:6A:7A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XeQY-b9Luhgt0ITZF0juwAFuano.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:db40::/29
2a12:f5c0::/29
Signature Algorithm: sha256WithRSAEncryption
42:15:c5:a8:9c:a3:ad:75:15:78:11:fd:6e:28:72:91:bd:5c:
c7:1e:e4:0b:7c:dc:e9:24:64:7a:31:95:ad:43:a1:5f:8c:bf:
cd:20:65:99:f0:a6:46:a0:f6:6e:9c:49:a6:9e:ac:2b:33:67:
dd:39:9e:c5:42:81:d2:37:62:99:35:87:84:a6:37:f9:72:99:
0b:94:c3:b5:5d:2c:a2:dc:8e:39:45:0d:86:84:90:6b:18:9f:
77:0f:6f:85:c2:f0:43:68:28:59:97:42:60:42:a0:e0:0a:42:
c0:d1:44:37:56:c5:1d:ea:54:f0:7c:32:df:c5:64:0b:2e:09:
ed:c9:37:66:20:6b:5b:f9:cb:16:9f:70:ad:45:c4:1b:3e:85:
e9:76:4d:c5:12:08:0a:71:22:99:14:50:e0:18:11:09:ea:3c:
6e:bd:a8:f1:49:12:ac:52:d1:99:f2:b3:51:a9:7d:47:28:5b:
8f:83:90:0d:44:54:70:7f:20:da:93:5e:dd:bb:38:28:78:4c:
33:b3:0b:8a:90:c5:99:be:f9:17:14:6c:ff:c3:19:40:27:30:
22:3d:b5:b4:41:60:f4:79:65:57:f2:fa:34:d5:84:b3:ae:1c:
ad:d6:f4:f0:d5:d7:cb:62:93:e0:9e:13:43:69:24:c5:fb:e4:
b3:8f:d5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:02:08 2024 by rpki-client on console-fra.rpki-client.org