Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/OPh14yJG0vCv4vc8r7Ryn_ZfjAc.roa
File: OPh14yJG0vCv4vc8r7Ryn_ZfjAc.roa (raw, json)
Hash identifier: exV0EgCW9dYsdfE79ZlzRxKtZpvikeyinKdvEA3OorY=
Subject key identifier: 38:F8:75:E3:22:46:D2:F0:AF:E2:F7:3C:AF:B4:72:9F:F6:5F:8C:07
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 01927132915C040CB42F13E72F3283AC04C2
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/OPh14yJG0vCv4vc8r7Ryn_ZfjAc.roa
Signing time: Wed 09 Oct 2024 12:13:11 +0000
ROA not before: Wed 09 Oct 2024 12:13:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13127
IP address blocks: 2a04:9a00:1118::/48 maxlen: 48
2a07:3501:1080::/48 maxlen: 48
2a07:3501:1081::/48 maxlen: 48
2a07:3502:1190::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:71:32:91:5c:04:0c:b4:2f:13:e7:2f:32:83:ac:04:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Oct 9 12:13:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38f875e32246d2f0afe2f73cafb4729ff65f8c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:97:be:03:6d:f7:9b:76:e3:ee:fb:3d:a7:98:
ed:24:6f:e4:89:76:ad:4e:13:10:81:f7:6f:dc:95:
e7:f4:45:76:5b:f5:80:0b:ad:11:1c:3e:f0:d7:36:
48:48:37:f4:5f:ed:79:1e:80:b8:16:67:62:b1:bd:
af:b2:c5:29:36:b0:a0:6c:ad:be:7c:36:d2:87:bf:
f5:b5:4a:bb:13:95:09:f4:24:93:64:cc:ef:f9:39:
94:28:c3:f8:d8:4d:7b:8c:ce:4a:d7:c8:d8:c4:3d:
14:bd:85:bb:eb:a1:b8:d0:f9:78:7c:75:c7:32:fd:
c7:eb:37:f1:85:ac:86:85:fb:75:2b:5f:4a:7e:ac:
4c:6a:33:9a:67:df:f2:91:95:7a:58:0d:2a:62:59:
eb:4a:d8:03:4d:cc:e7:82:cc:e8:44:c3:60:cb:8d:
c1:5f:21:e8:58:f3:4e:bf:75:61:34:15:91:62:d3:
06:4f:c5:10:75:9f:61:74:ef:46:54:fd:a2:d7:75:
77:71:ca:bb:b1:28:00:7d:e6:7c:03:ce:7e:3b:b8:
24:30:dd:cd:7a:b4:a6:00:af:1c:31:19:86:dc:a5:
21:07:f0:2e:43:cf:14:b3:8e:46:6c:71:d7:ce:da:
cb:ca:98:27:f7:95:c6:1d:11:e5:37:7c:3b:31:16:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F8:75:E3:22:46:D2:F0:AF:E2:F7:3C:AF:B4:72:9F:F6:5F:8C:07
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/OPh14yJG0vCv4vc8r7Ryn_ZfjAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a00:1118::/48
2a07:3501:1080::/47
2a07:3502:1190::/48
Signature Algorithm: sha256WithRSAEncryption
49:b5:61:97:ea:49:2c:bc:12:03:4f:e5:ae:df:7d:29:4c:16:
da:4d:1d:89:25:8b:87:cc:48:94:64:00:7a:4e:f8:42:52:87:
90:f7:32:5e:74:d4:cd:b1:98:a9:26:55:b8:96:14:37:eb:d5:
e1:83:29:dc:b2:d6:62:80:b6:fa:3e:9e:73:91:5f:bb:9c:03:
63:d1:9f:aa:76:49:55:be:de:3f:83:e6:2c:a9:8b:cd:9e:4a:
65:e4:70:b8:2d:44:f9:52:6b:bf:b7:c5:82:3f:85:e3:29:5c:
f6:25:d3:1b:39:0c:7f:45:d9:59:4f:92:1c:45:61:ea:82:41:
88:32:e0:37:6e:70:14:b7:93:c4:40:9a:f7:66:c8:d4:94:9b:
ed:03:01:cb:b9:80:aa:a0:8a:6d:3b:2b:dc:2c:67:2a:83:e5:
41:4b:87:35:21:19:88:98:09:d2:1d:b5:59:0c:90:c6:d2:42:
52:ef:7f:d3:99:04:7a:5e:a2:aa:0d:3e:dd:8e:37:ab:c3:a5:
63:82:c8:c7:8b:67:27:17:df:fd:b5:bf:f2:52:72:5b:fb:70:
59:f3:a7:26:4a:38:ab:e0:fc:08:d1:f1:a1:be:b0:56:50:69:
72:d5:34:31:b7:86:13:6b:4e:23:c3:c7:e3:dc:d0:d3:a6:be:
c0:a6:b5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:15:40 2024 by rpki-client on console-ams.rpki-client.org