Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/pcwVsgjeQ6KgIl019fS2tC8uM3U.roa
File: pcwVsgjeQ6KgIl019fS2tC8uM3U.roa (raw, json)
Hash identifier: uP7Wh/Fmer/ec26bD9SC5sU9j8CGDAJ6fTZY2CQ06jM=
Subject key identifier: A5:CC:15:B2:08:DE:43:A2:A0:22:5D:35:F5:F4:B6:B4:2F:2E:33:75
Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Certificate serial: 0190BB2136417EBFF76593BDA0C972C62698
Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/pcwVsgjeQ6KgIl019fS2tC8uM3U.roa
Signing time: Tue 16 Jul 2024 10:40:34 +0000
ROA not before: Tue 16 Jul 2024 10:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 2a14:1ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bb:21:36:41:7e:bf:f7:65:93:bd:a0:c9:72:c6:26:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Validity
Not Before: Jul 16 10:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5cc15b208de43a2a0225d35f5f4b6b42f2e3375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:7a:64:59:a3:47:a2:e8:98:db:b5:82:7c:
46:50:53:64:3f:3d:84:ce:c6:2e:a8:c1:91:97:d7:
e6:71:ae:5b:46:a8:7c:0b:27:ce:40:f9:32:64:fb:
09:f6:49:9c:cf:0e:e2:13:fc:6b:92:ed:7e:a3:bc:
28:45:7b:71:f2:fb:a8:ae:3c:03:b2:da:1f:42:1e:
28:2f:f5:c5:8b:9b:c7:2b:1c:c6:95:63:39:bd:4c:
75:16:77:90:bd:3d:97:64:a4:64:cf:fe:d9:0e:df:
fa:65:69:bf:1e:1d:38:dc:cf:b5:c9:aa:f4:5d:22:
d9:b7:88:14:55:44:79:25:7a:69:a0:78:61:21:7a:
13:1a:4b:3b:19:fa:5d:03:4d:e4:31:d1:d8:6b:4f:
5c:e6:29:e5:4f:f9:6e:31:a1:13:02:e2:6a:92:8b:
0a:23:6a:3f:84:b5:a5:5f:72:82:0b:7d:c5:b7:19:
c7:6d:5d:56:cd:ad:de:91:c7:93:6c:59:59:25:53:
f6:c1:f3:0e:08:a1:2d:78:02:ad:19:a6:c2:c5:04:
66:b9:dd:24:01:c9:f8:54:60:25:28:ed:f1:ac:50:
34:af:4f:7f:71:fa:d5:dc:45:62:97:1e:9a:29:21:
bb:3d:1e:42:18:24:d3:2a:ea:40:69:be:30:8e:80:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CC:15:B2:08:DE:43:A2:A0:22:5D:35:F5:F4:B6:B4:2F:2E:33:75
X509v3 Authority Key Identifier:
keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/pcwVsgjeQ6KgIl019fS2tC8uM3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ac0::/29
Signature Algorithm: sha256WithRSAEncryption
18:28:57:2c:58:dd:2f:ef:b6:84:5d:f0:05:ad:d0:83:13:b9:
5f:e2:52:03:f9:6e:3f:2c:3c:d3:ad:ef:6d:6d:44:56:47:6b:
9d:6e:dc:fa:53:12:51:7b:0c:3b:ed:4c:9c:2d:d4:01:10:9f:
53:29:f4:2f:4a:10:3f:0c:b4:87:3a:0e:be:bb:18:8e:8b:02:
0f:66:64:25:d8:52:b1:e4:38:67:51:71:cd:74:a9:cd:a1:24:
60:c9:76:ca:64:b9:30:c6:c3:9a:76:77:9b:c6:8e:56:ed:44:
6e:2c:43:25:e5:f0:f5:83:79:13:4d:f5:27:01:b0:b3:2b:b5:
47:10:1f:13:7d:13:2b:61:a7:b9:ff:45:34:74:ea:dd:2a:b5:
d7:7c:eb:e8:4f:44:de:e0:dd:f7:dc:4c:2d:92:93:87:26:d0:
3e:c0:5d:24:a5:52:c1:48:4b:24:09:91:bc:13:15:ff:d0:d5:
16:41:5e:93:47:42:81:df:d7:ff:4b:68:80:6f:08:3d:ae:cd:
4c:41:90:82:e3:8c:d5:a6:05:84:1f:ca:85:37:97:ab:ed:79:
3b:51:ca:1e:ac:6f:17:c5:26:6e:65:1c:be:3b:81:53:4b:c3:
80:48:5c:4f:9c:d4:45:83:e5:a5:50:7a:d6:ef:b9:01:84:04:
47:0e:b5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:31 2024 by rpki-client on console-ams.rpki-client.org