Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/7DDMEyR2iTC2gZQ0g7ZAYK7gAeM.roa
File: 7DDMEyR2iTC2gZQ0g7ZAYK7gAeM.roa (raw, json)
Hash identifier: VmCMn9uAVJyv/USsP6EKo4aCyR12nkDqPqHRjIzrAOs=
Subject key identifier: EC:30:CC:13:24:76:89:30:B6:81:94:34:83:B6:40:60:AE:E0:01:E3
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 0192956E61D05E233CDA37CD5B26DC54569A
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/7DDMEyR2iTC2gZQ0g7ZAYK7gAeM.roa
Signing time: Wed 16 Oct 2024 13:04:51 +0000
ROA not before: Wed 16 Oct 2024 13:04:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39686
IP address blocks: 2a07:3500:11e0::/48 maxlen: 48
2a07:3501:1050::/48 maxlen: 48
2a07:3501:1060::/48 maxlen: 48
2a07:3502:10e0::/48 maxlen: 48
2a07:3502:11c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:95:6e:61:d0:5e:23:3c:da:37:cd:5b:26:dc:54:56:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Oct 16 13:04:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec30cc1324768930b681943483b64060aee001e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:f6:4d:97:49:06:df:8e:97:61:5c:be:5a:
fc:72:9b:67:8d:93:e4:a8:b1:ca:63:5c:b8:07:3a:
da:53:60:42:83:e5:ad:e6:d7:09:a5:c6:9b:14:0b:
be:73:e7:11:7c:35:00:81:b5:40:b9:ba:61:c9:a1:
ed:7f:38:5a:f6:c5:9b:16:5e:38:59:0c:2b:b9:43:
a8:b4:53:20:f0:da:88:86:ad:03:21:47:be:9b:6b:
8e:30:a6:c5:5a:1c:9b:42:5b:b1:d5:8e:d1:da:57:
a9:fd:15:48:b5:1c:b5:3a:5a:81:4a:04:f1:7b:4e:
7a:27:18:88:5f:fb:32:5f:2c:9a:fb:3c:08:a0:b6:
2d:22:53:00:b8:11:55:a4:9d:7c:3d:26:a7:43:4a:
47:84:33:4a:b0:a7:c5:6e:d6:23:01:25:1a:fc:a3:
dd:79:13:2c:e3:72:5f:4a:7d:53:c3:f7:74:56:e6:
86:0f:4b:b7:08:e7:21:1d:b0:7a:e3:ff:99:df:ef:
25:c1:8c:8f:5d:a9:6b:b2:2f:e9:18:97:82:7e:89:
8a:b7:d1:f6:1f:a6:b2:e1:4f:28:4e:fd:46:e0:e5:
bf:d1:c8:d0:75:0f:76:bd:be:3a:9e:1e:7a:cd:46:
73:ae:69:e8:85:4e:fd:72:16:f4:5b:8e:d2:3c:c1:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:30:CC:13:24:76:89:30:B6:81:94:34:83:B6:40:60:AE:E0:01:E3
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/7DDMEyR2iTC2gZQ0g7ZAYK7gAeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:11e0::/48
2a07:3501:1050::/48
2a07:3501:1060::/48
2a07:3502:10e0::/48
2a07:3502:11c0::/48
Signature Algorithm: sha256WithRSAEncryption
02:99:23:d6:2b:56:56:94:1c:15:12:a7:91:9c:f2:42:e2:ef:
95:69:b7:73:0f:52:2c:51:14:b1:1e:c0:32:f3:35:50:d3:b4:
59:95:20:81:2b:12:0c:b8:d1:c2:33:6d:25:90:87:f3:6a:ef:
93:1e:07:d0:e1:d4:95:e7:22:35:0a:3b:69:8e:70:14:46:fb:
52:54:9a:3d:88:28:3c:3f:d2:bb:e9:d8:a9:1f:bc:d0:3d:15:
2e:fc:3f:fc:3b:42:4f:32:8f:e5:7c:a9:85:f0:61:c9:f6:80:
b8:0a:41:a1:f6:22:1d:af:04:1f:29:8b:7c:46:ad:c9:2b:e1:
f1:40:aa:29:01:16:de:38:40:79:f9:0b:2d:6d:63:82:37:61:
c1:26:dc:5d:2c:cc:bc:44:e9:90:ae:bf:73:e6:8e:90:c8:01:
d4:4e:29:8e:46:fb:98:cb:ae:71:f4:2a:cf:27:ed:23:5e:42:
0e:27:f2:a5:87:ed:97:b9:d6:6b:72:50:aa:0e:26:82:48:5c:
65:19:bd:4c:51:f3:a7:1f:92:88:57:6e:0f:42:cb:4b:29:18:
07:fb:26:c1:22:af:53:8f:6f:21:dd:da:f5:f0:8a:e2:2a:66:
93:97:c5:e6:5f:18:83:c9:bc:85:21:4f:25:a1:64:4c:8e:99:
6a:b4:59:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:43:44 2024 by rpki-client on console-fra.rpki-client.org