Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/SUnq5HUwGAMfUP96q-FdcBpMge8.roa
File: SUnq5HUwGAMfUP96q-FdcBpMge8.roa (raw, json)
Hash identifier: Oxe51vExhk2k8VrNwMXXqG0Ps8bbL9w1kJjagS6nxUw=
Subject key identifier: 49:49:EA:E4:75:30:18:03:1F:50:FF:7A:AB:E1:5D:70:1A:4C:81:EF
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0193011A4E96BBE7C7E0BC13C6B3B073A4B9
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/SUnq5HUwGAMfUP96q-FdcBpMge8.roa
Signing time: Wed 06 Nov 2024 10:52:01 +0000
ROA not before: Wed 06 Nov 2024 10:52:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2a05:9080:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:1a:4e:96:bb:e7:c7:e0:bc:13:c6:b3:b0:73:a4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Nov 6 10:52:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4949eae4753018031f50ff7aabe15d701a4c81ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:f0:3d:24:a9:b4:61:22:75:4d:e0:f5:68:
01:98:74:ee:6f:01:e5:db:8a:a0:e3:23:53:09:ad:
8b:0e:c1:8c:4f:03:07:e4:7b:85:84:02:4d:fb:a5:
37:8f:5f:a1:d4:97:8d:32:f9:d4:6a:a4:87:2e:dd:
b2:1e:ab:99:47:73:47:bc:82:a7:08:51:d1:d5:17:
7d:0b:b9:3d:40:3c:99:6c:14:20:f0:3f:d3:aa:91:
fd:59:1e:9d:6e:b3:e8:97:a4:a8:ee:ea:a6:ee:53:
9c:fa:b1:9b:e4:39:79:b2:df:a8:45:fb:0e:1f:a8:
50:63:cc:18:a9:4e:77:f5:bc:b6:22:ae:14:fa:58:
77:20:db:9d:27:5a:a8:b1:0e:49:cf:87:37:3d:44:
e9:bf:cb:c4:97:c3:05:fa:dd:b7:5a:4b:76:86:85:
57:19:ad:99:55:13:fc:ca:2a:1e:71:e8:2a:97:f4:
4b:f8:fb:ef:5b:e2:64:49:4a:12:e2:24:19:0a:5c:
46:19:7a:d0:54:74:e2:61:00:ab:e0:ab:de:b7:d7:
ca:b1:db:f6:76:c4:97:6c:5d:9f:e7:d0:06:11:50:
03:89:b1:31:5f:da:0e:ae:be:3e:1b:00:1a:a6:da:
db:c4:58:ee:22:f8:ff:59:91:06:ac:51:d3:56:3e:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:49:EA:E4:75:30:18:03:1F:50:FF:7A:AB:E1:5D:70:1A:4C:81:EF
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/SUnq5HUwGAMfUP96q-FdcBpMge8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:5::/48
Signature Algorithm: sha256WithRSAEncryption
83:cf:fc:ea:89:ed:ad:1d:d9:b9:32:93:8d:01:dd:79:14:96:
52:f9:74:cd:49:0a:f7:04:49:bd:3d:56:ff:90:13:cb:90:9f:
30:eb:27:21:a1:d2:8f:d2:26:e1:3d:da:2c:fe:b5:9b:91:52:
af:ef:61:94:5f:d3:07:e3:9a:05:88:60:ec:87:03:df:cb:bf:
e3:19:78:21:02:30:71:2f:dd:2f:c8:28:10:11:5e:22:50:ff:
e4:a4:f8:b3:06:db:02:34:58:49:c2:ee:96:5e:35:93:f5:a3:
91:5f:29:db:d5:9c:56:ac:25:df:11:18:fd:2c:f1:15:06:98:
ed:72:91:73:72:bd:b5:2c:21:21:05:dd:b3:d6:06:45:34:1c:
33:bc:be:ee:8d:6a:5e:c8:66:5f:74:6b:f6:a1:b7:03:f3:dd:
d4:46:ce:87:d6:87:00:57:fc:3e:03:89:bf:a8:c4:45:52:91:
87:49:4b:00:e8:dc:6d:fa:1b:47:00:f0:62:c7:51:48:c2:b9:
ac:c9:0f:97:22:61:98:fd:fb:51:18:a2:d9:08:ef:7a:e5:61:
0b:19:7d:1c:7d:85:89:75:35:6d:e5:30:7b:d3:e7:af:50:fe:
8c:6f:cf:9d:d4:12:85:d4:0b:8f:2f:40:89:f9:a2:03:03:40:
ff:6b:d5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:50:04 2024 by rpki-client on console-fra.rpki-client.org