Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/tOGlDUHJ8vZ6YE7KOpN8KiU2xYA.roa
File: tOGlDUHJ8vZ6YE7KOpN8KiU2xYA.roa (raw, json)
Hash identifier: /sQe9rCBDFr49XtimAeO7GgXhc1C87iIRu4OjJD6lOw=
Subject key identifier: B4:E1:A5:0D:41:C9:F2:F6:7A:60:4E:CA:3A:93:7C:2A:25:36:C5:80
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 0192757D31F0A33F5E551056EEF2831FC91F
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/tOGlDUHJ8vZ6YE7KOpN8KiU2xYA.roa
Signing time: Thu 10 Oct 2024 08:13:11 +0000
ROA not before: Thu 10 Oct 2024 08:13:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 2a04:9a00:1480::/48 maxlen: 48
2a04:9a00:1484::/48 maxlen: 48
2a04:9a00:1488::/48 maxlen: 48
2a04:9a00:148c::/48 maxlen: 48
2a07:3502:1191::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:75:7d:31:f0:a3:3f:5e:55:10:56:ee:f2:83:1f:c9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Oct 10 08:13:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4e1a50d41c9f2f67a604eca3a937c2a2536c580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:7d:c0:f9:08:10:54:2d:55:dc:cb:6e:5c:
61:a7:3b:70:d2:57:b4:de:0d:61:2d:1b:0d:1b:f0:
d7:50:30:f1:9c:05:c7:87:d1:e4:62:1f:02:67:cc:
4c:da:86:21:77:1c:40:7f:af:2a:3c:54:96:ff:be:
1d:c2:ee:77:65:cc:21:3f:db:c1:3f:a1:dc:1b:2b:
07:c6:02:b3:23:55:07:7e:5c:f2:61:20:f5:09:c6:
c4:dd:82:80:70:aa:ce:07:ff:2f:55:4f:b5:9a:32:
bb:00:21:f8:24:53:04:79:ec:e2:58:5f:86:50:ca:
b9:86:e1:4d:d9:ea:1e:83:b8:7e:06:5f:c3:a8:75:
d9:1a:cd:46:e0:f8:b1:ca:09:58:95:ae:f0:8e:f4:
f9:91:6c:f4:be:8e:30:93:d5:b5:c3:aa:52:06:df:
2f:05:76:9d:f1:44:fe:cb:88:c5:2a:2a:8b:30:74:
81:16:2e:4f:c0:c7:07:ed:84:93:1e:e6:79:2e:34:
01:e8:6d:46:f7:78:fc:d3:04:d7:65:a2:e5:bb:fc:
d3:8d:04:52:3a:d2:32:3b:bb:61:d4:00:e7:c8:3e:
77:c1:37:90:cf:6b:26:62:77:cb:b0:c7:db:3b:ba:
10:40:0f:cb:0c:c2:ea:41:ed:17:0d:f7:af:18:fc:
98:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E1:A5:0D:41:C9:F2:F6:7A:60:4E:CA:3A:93:7C:2A:25:36:C5:80
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/tOGlDUHJ8vZ6YE7KOpN8KiU2xYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a00:1480::/48
2a04:9a00:1484::/48
2a04:9a00:1488::/48
2a04:9a00:148c::/48
2a07:3502:1191::/48
Signature Algorithm: sha256WithRSAEncryption
0d:a7:f9:05:d7:66:87:dd:a4:8d:35:28:ba:ce:e6:3b:43:a4:
7c:eb:9a:53:4a:d9:2b:b7:c4:00:38:5b:33:4f:02:54:cb:33:
04:cf:3e:4a:e4:ee:1b:48:90:e4:37:68:4d:bc:62:b2:bf:45:
12:05:15:6b:58:42:f7:51:ee:7a:73:b4:71:43:94:eb:34:9a:
dc:40:c5:8d:e2:27:de:a6:55:27:f2:58:c6:03:7f:4a:d2:35:
8b:de:a8:07:8d:6b:e3:75:0b:4f:f1:bd:a4:98:a5:f1:a5:3e:
b6:9d:fa:12:0b:b5:67:b5:36:9a:5f:c5:e1:0f:7b:18:8b:d8:
09:f3:82:da:20:b6:93:7d:22:7d:73:11:b8:35:35:b3:1e:b8:
97:0e:83:48:0c:4f:80:a9:b7:05:d1:6a:09:ee:e7:f2:4f:0f:
23:89:86:8b:46:5b:79:d6:3c:ee:f9:b1:52:ee:04:02:a4:95:
d7:41:c9:a1:f8:95:64:16:f1:eb:bc:2a:d2:1b:de:5a:a9:31:
e4:2e:11:db:98:b7:37:2e:e9:90:75:14:3a:27:9b:03:0a:39:
a1:02:42:22:24:8d:32:06:4c:ed:f4:f7:27:b4:5b:2e:d5:f0:
6a:04:21:b6:b7:b2:69:6d:86:30:b7:35:8a:8c:3d:d4:f9:4d:
d4:67:99:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:49:04 2024 by rpki-client on console-fra.rpki-client.org