Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rtSEAaqw8Nh_42EIiutdbAdwu9c.roa
File: rtSEAaqw8Nh_42EIiutdbAdwu9c.roa (raw, json)
Hash identifier: tM9iZ1engY1uADPNAL1MIvASFJSObBX7Foz7o5+a+uU=
Subject key identifier: AE:D4:84:01:AA:B0:F0:D8:7F:E3:61:08:8A:EB:5D:6C:07:70:BB:D7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01919444311510E28F15E46BCC1041A1D820
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rtSEAaqw8Nh_42EIiutdbAdwu9c.roa
Signing time: Tue 27 Aug 2024 14:36:22 +0000
ROA not before: Tue 27 Aug 2024 14:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395839
IP address blocks: 2a0f:3940::/29 maxlen: 29
2a0f:39c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:94:44:31:15:10:e2:8f:15:e4:6b:cc:10:41:a1:d8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 27 14:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aed48401aab0f0d87fe361088aeb5d6c0770bbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a8:2f:75:ec:fc:4c:77:fa:8f:b9:99:b9:d1:
c3:d0:4b:91:23:d8:33:14:e8:5d:59:bc:d4:67:eb:
20:2c:f4:22:b5:c1:f1:f9:87:fe:1d:94:cd:ea:93:
9c:c5:dc:75:ca:43:10:a0:39:37:65:e5:9b:6a:4a:
31:d8:f9:ea:7b:57:ef:ec:ea:78:de:3d:7d:9e:57:
01:55:b8:63:50:3f:ce:35:2a:75:bc:12:b8:d1:da:
fc:c0:f3:6d:15:87:7d:77:66:4a:84:2c:3b:72:59:
1b:35:b7:6c:09:8e:e4:75:f2:3e:ae:a8:9b:51:6e:
0a:84:5d:84:11:82:0b:4e:c5:3e:43:dc:17:01:11:
e2:4a:d6:16:1d:46:fb:ba:dc:3d:88:8f:71:53:84:
bf:95:de:54:6f:a6:c6:f8:31:a9:bc:7f:15:69:cf:
d3:94:18:27:5a:cf:d1:06:46:44:5b:8e:a4:fc:05:
25:3c:c7:58:ed:cd:43:92:e3:a3:08:5b:9e:b2:b9:
53:ca:2c:c8:8d:46:92:ea:dc:b9:7c:a9:13:25:ff:
81:9a:47:2c:cb:ed:75:50:ae:37:a9:3e:05:ca:0b:
db:60:62:0a:e8:94:ed:1f:1b:df:2a:ba:74:57:a0:
75:5c:c3:0f:29:df:5f:79:2e:10:64:4f:4f:b8:be:
55:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D4:84:01:AA:B0:F0:D8:7F:E3:61:08:8A:EB:5D:6C:07:70:BB:D7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rtSEAaqw8Nh_42EIiutdbAdwu9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3940::/29
2a0f:39c0::/29
Signature Algorithm: sha256WithRSAEncryption
72:d7:3a:b8:94:f9:5e:ac:59:61:94:43:ab:73:18:e2:32:70:
8b:f8:9e:5b:15:85:9b:f5:70:ab:c3:f4:41:d1:d3:e4:80:31:
77:22:e1:a4:4b:6c:c0:e9:e3:d0:ba:b1:5a:fb:42:8a:64:28:
0a:67:06:b1:ea:2b:ef:fc:84:31:8f:7e:d3:7c:cc:9b:88:6b:
56:ed:94:1d:d7:d1:c5:3d:41:92:53:22:d5:d7:07:b5:2b:4a:
95:aa:e6:03:4d:4c:d4:5c:dc:2b:9b:dc:93:82:2a:5d:70:e9:
b5:e7:ea:93:c3:07:60:03:63:a5:07:e0:53:b6:8c:ba:6a:69:
53:6d:f8:9e:2c:0d:e9:1a:fd:1e:44:52:2c:95:17:7e:b7:5b:
d5:aa:73:9c:8f:a4:2f:20:ea:f7:44:2c:47:c4:f7:c6:1a:4d:
ee:55:fa:fd:e8:60:7c:81:a6:85:2b:eb:52:d6:20:dd:a3:65:
81:47:66:b6:4f:76:00:04:37:6b:19:29:31:da:cd:b9:b1:c5:
d8:4b:d2:be:f8:20:41:c0:3e:a5:17:51:95:d3:3a:7e:00:b3:
ef:9c:c6:cd:e2:4a:4d:2a:4f:8a:89:3f:fe:20:37:24:87:4a:
0c:c1:07:79:d4:5e:4c:2d:ca:06:9e:5f:2e:a3:d9:7d:59:c1:
87:8e:66:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:41:19 2024 by rpki-client on console-fra.rpki-client.org