Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/3gp7nMzYneV4J4XLNcs7T31Oa-k.roa
File: 3gp7nMzYneV4J4XLNcs7T31Oa-k.roa (raw, json)
Hash identifier: CY19uw/pGm3PJ5SAAUnc6Z67HmnXxmeAhGjy2KClrV0=
Subject key identifier: DE:0A:7B:9C:CC:D8:9D:E5:78:27:85:CB:35:CB:3B:4F:7D:4E:6B:E9
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019179F1E98D731E663A3D8E0F8724F20327
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/3gp7nMzYneV4J4XLNcs7T31Oa-k.roa
Signing time: Thu 22 Aug 2024 11:56:22 +0000
ROA not before: Thu 22 Aug 2024 11:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 2a05:9080:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:79:f1:e9:8d:73:1e:66:3a:3d:8e:0f:87:24:f2:03:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Aug 22 11:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de0a7b9cccd89de5782785cb35cb3b4f7d4e6be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:62:73:34:4f:04:79:d5:39:91:d9:04:5f:
cb:36:5f:36:c5:7b:86:2e:d6:36:bd:0c:74:fc:26:
05:95:84:ec:84:7e:24:67:37:7b:0a:ee:1b:0e:05:
cc:fa:8e:46:04:a3:58:2e:0e:08:77:88:d8:3d:bf:
2e:ee:10:28:30:c6:69:77:2e:8e:10:34:b1:20:ba:
00:1a:70:60:f8:78:08:7d:aa:ae:3d:0b:35:ba:f1:
20:2f:b2:7c:84:66:60:97:e8:54:c8:bd:e4:74:c9:
a5:e3:9a:26:36:84:bc:a2:19:5f:31:59:36:78:d3:
f9:06:44:45:55:d0:af:5e:f5:5a:20:95:7d:80:26:
31:6f:19:d4:fe:fe:33:0d:a2:fb:a7:5c:ae:eb:8b:
9b:f1:fb:65:b2:a1:70:ed:41:81:4b:f9:cb:98:b1:
75:66:ee:73:81:56:ad:f1:a0:6a:19:77:1f:11:3b:
a8:aa:43:b4:44:58:55:89:be:56:37:5a:39:3a:01:
8c:b0:f7:27:a6:94:e6:f4:8d:29:2e:cf:df:d5:de:
81:a2:c5:f4:71:f5:d8:74:33:6d:32:97:76:b0:28:
7d:28:0d:bd:ae:bf:d9:84:f6:20:6f:0f:49:9e:59:
fb:d4:90:48:18:9d:df:e7:41:62:16:4c:fd:41:1f:
9a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0A:7B:9C:CC:D8:9D:E5:78:27:85:CB:35:CB:3B:4F:7D:4E:6B:E9
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/3gp7nMzYneV4J4XLNcs7T31Oa-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:2::/48
Signature Algorithm: sha256WithRSAEncryption
32:97:35:bc:96:d5:66:e4:08:f6:54:6e:42:cf:6d:fb:a8:d5:
37:7c:00:b8:82:1d:1c:fc:4e:07:d2:31:95:1c:b3:35:b9:4a:
cd:4f:a4:e1:bd:c8:dc:0a:8a:5d:1d:ba:79:5b:7d:6b:19:86:
be:bd:6b:09:82:d8:6a:00:21:4e:82:cc:cd:2f:dd:fe:b4:df:
5f:99:3a:9f:27:75:c6:98:c0:24:8d:66:eb:83:00:b3:fd:6a:
60:1b:f6:58:4d:c7:66:be:01:32:20:b5:cb:9e:67:e6:f8:04:
48:01:d1:b9:eb:4c:99:b5:47:b5:9b:b2:2c:ea:71:3e:6e:50:
18:09:bd:87:d0:5e:47:84:98:f6:f9:f2:de:d4:42:90:4a:6f:
32:5e:2f:94:bd:0f:b3:37:ad:d6:13:1c:db:5c:97:38:67:60:
b1:b7:0e:f2:85:0d:c2:4b:26:7c:58:f4:9d:84:8a:ad:6f:84:
86:fc:aa:1e:41:98:f7:ab:d0:68:0a:43:2f:34:b6:4d:85:8d:
fd:1f:84:f4:d9:3a:eb:6c:64:84:9a:f0:f2:77:99:6a:7b:37:
ee:3a:48:5e:e9:c8:55:d9:db:9e:3c:cd:6c:0e:d6:37:07:ed:
d5:30:30:48:cf:88:11:86:a9:43:a9:18:a7:74:68:fb:8b:d8:
7b:8b:d7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:30:30 2024 by rpki-client on console-fra.rpki-client.org