Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/9rW8AeFGveUb6VKy-l6IXFfIYX0.roa
File: 9rW8AeFGveUb6VKy-l6IXFfIYX0.roa (raw, json)
Hash identifier: NwCOAwZLFUrH2aZPGkEDhrym+8cf0fv1a/ibL/yaf+8=
Subject key identifier: F6:B5:BC:01:E1:46:BD:E5:1B:E9:52:B2:FA:5E:88:5C:57:C8:61:7D
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0190DE7EEF42E564BDA904D3252346B235EC
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/9rW8AeFGveUb6VKy-l6IXFfIYX0.roa
Signing time: Tue 23 Jul 2024 07:29:39 +0000
ROA not before: Tue 23 Jul 2024 07:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215350
IP address blocks: 2a05:9080:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:de:7e:ef:42:e5:64:bd:a9:04:d3:25:23:46:b2:35:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jul 23 07:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6b5bc01e146bde51be952b2fa5e885c57c8617d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0d:ad:41:28:90:37:83:26:95:05:a3:01:24:
c2:f0:28:14:d6:02:12:6d:6c:24:0c:2e:b0:19:64:
d5:3d:5c:2c:5f:e4:42:2f:f6:7b:6a:9e:7d:1a:86:
57:66:b9:36:31:d7:e6:6a:cf:99:d7:04:2b:2a:50:
08:62:83:fa:75:50:f2:8a:7a:55:c9:9c:77:ee:3b:
29:8c:83:eb:ed:d6:32:6a:43:be:a8:a6:85:3a:2b:
1f:54:02:4f:51:eb:d4:3a:ef:aa:7d:17:d2:e7:b1:
dd:3b:85:e9:2d:89:4c:2a:85:14:46:d0:a1:df:ca:
22:e8:4b:34:1e:df:85:f4:16:ac:18:bb:91:b2:c9:
d4:26:00:90:99:ed:50:8a:e7:94:40:0f:3d:bf:71:
2f:03:a7:58:c5:fa:40:69:f9:22:df:8f:e8:6f:1e:
8f:e0:97:8e:61:1d:6b:52:0f:5a:c9:1d:ef:06:69:
ec:5d:77:7b:18:ae:d2:aa:51:92:49:8d:d1:02:bd:
4b:3c:10:63:2e:5c:74:98:55:c3:68:5a:d4:60:4f:
2a:07:e5:17:42:59:5b:91:74:9c:fc:99:d4:9b:a9:
91:84:8f:fa:3b:56:54:b4:25:74:dd:56:f7:98:ee:
4c:32:cb:8c:ba:69:69:bc:94:4f:af:9d:07:2a:6e:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B5:BC:01:E1:46:BD:E5:1B:E9:52:B2:FA:5E:88:5C:57:C8:61:7D
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/9rW8AeFGveUb6VKy-l6IXFfIYX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:1::/48
Signature Algorithm: sha256WithRSAEncryption
78:cb:86:47:b5:67:75:01:e2:f0:37:b7:b5:8b:b7:11:26:8a:
b9:61:2a:2c:05:3a:25:91:bc:fd:09:d2:60:3b:7c:5d:0c:c5:
e0:bf:34:e6:67:55:c7:18:e2:d1:c5:38:70:2f:08:89:07:4b:
30:d8:ed:8c:29:76:3a:ac:14:ed:3a:0e:a7:bc:23:82:54:bd:
de:3d:9a:aa:b8:19:d8:0c:db:36:28:8b:a5:88:c8:64:2d:d3:
bf:50:13:15:6d:24:6a:3c:67:7d:5a:a1:b9:77:66:d1:a9:3c:
da:54:5a:66:b4:04:6f:01:cb:e5:e9:7e:c8:86:bd:a4:b3:53:
3b:43:3a:48:d5:6c:c3:ab:62:8a:9a:d4:f0:41:1b:0d:c3:7a:
c8:3b:c0:5e:1c:95:e2:27:38:72:16:b0:3a:09:17:ac:25:b9:
10:2f:96:49:1b:31:7b:17:8b:ee:99:ad:6a:b9:a6:e3:c6:d4:
94:c8:d7:75:a6:18:45:d1:3e:1f:6d:6d:d9:fb:aa:a8:f1:be:
cd:29:57:b0:c0:ba:37:00:15:0e:f0:2b:ae:ef:4e:fe:22:b4:
a3:31:c7:d9:07:cf:b1:3c:2b:8c:80:08:3a:1c:b7:38:a7:19:
da:8f:be:2b:40:bf:a7:5b:87:2c:dd:48:20:14:84:fc:82:97:
21:75:d4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:30:30 2024 by rpki-client on console-fra.rpki-client.org