Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/Zxn1mEJCIXoj_tyZDcomiMe-nXU.roa
File: Zxn1mEJCIXoj_tyZDcomiMe-nXU.roa (raw, json)
Hash identifier: AQd1W53lnuo8r14IraVBc3rlzSF/t0izno1AoREiUPk=
Subject key identifier: 67:19:F5:98:42:42:21:7A:23:FE:DC:99:0D:CA:26:88:C7:BE:9D:75
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019205BC732EB4036B94CE284156841E1662
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/Zxn1mEJCIXoj_tyZDcomiMe-nXU.roa
Signing time: Wed 18 Sep 2024 15:24:49 +0000
ROA not before: Wed 18 Sep 2024 15:24:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a09:e1c1:f000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:05:bc:73:2e:b4:03:6b:94:ce:28:41:56:84:1e:16:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Sep 18 15:24:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6719f5984242217a23fedc990dca2688c7be9d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:69:dd:06:33:48:73:d2:d6:71:01:a8:b8:
d2:4e:d4:a1:4a:a3:45:a7:b8:70:38:44:e2:2f:2d:
1e:a1:3c:37:4a:b6:e9:c0:9f:2f:57:cf:11:ee:dc:
9b:0b:06:ea:e6:b5:78:0e:fd:3f:57:32:43:f5:a0:
56:f0:d2:b1:2f:cf:6e:22:5f:1c:fa:b6:a3:32:56:
64:9d:25:aa:28:f2:26:39:49:b6:5b:0b:20:28:e7:
d9:48:2a:24:59:43:8a:dc:36:85:a4:58:7b:48:28:
f9:e2:73:e7:a0:b8:e4:a6:e7:3b:73:de:dc:09:fa:
14:4e:e8:99:ad:04:9a:c1:4c:1f:fb:3a:e3:26:bd:
44:bf:55:2f:ec:e3:c7:4a:b5:f2:83:0e:1a:ea:2f:
9f:68:2f:13:a7:26:9f:f1:ea:a3:2b:47:46:ec:1d:
6a:8b:24:3d:01:26:73:aa:86:86:79:4a:48:a8:db:
38:2c:25:d7:d6:46:7f:42:02:d5:37:bb:05:b7:63:
ef:20:59:88:73:c9:6e:4e:48:16:c1:d5:20:15:30:
ca:60:3e:da:e0:96:e4:32:b5:17:46:5f:82:e1:ac:
8b:cd:85:ad:23:b1:d6:6e:f4:9a:4e:4d:aa:46:40:
b2:f3:97:a3:1a:4e:ab:99:43:d9:51:fa:bb:b9:22:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:19:F5:98:42:42:21:7A:23:FE:DC:99:0D:CA:26:88:C7:BE:9D:75
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/Zxn1mEJCIXoj_tyZDcomiMe-nXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:e1c1:f000::/44
Signature Algorithm: sha256WithRSAEncryption
b1:1d:f2:10:fd:73:26:d5:85:d5:d5:88:8d:ea:d0:ae:e2:0e:
8d:ea:e6:18:95:7b:4b:14:81:4a:2f:9a:07:e3:c7:2d:4d:e2:
f3:a3:37:c5:49:f3:d6:18:55:42:9c:b3:dd:00:c9:12:51:69:
dd:cf:ab:f1:eb:ba:b8:c0:5b:0e:a2:ad:ba:cc:4d:16:b3:96:
53:90:0e:82:09:9b:6c:80:29:b8:6f:3e:93:0b:0a:18:4f:73:
00:f3:eb:54:66:72:a6:c1:25:1c:4d:bc:d1:11:a2:6b:34:52:
cd:f0:cb:d5:e7:f8:fe:98:2d:fa:13:f1:6a:6f:63:76:03:bc:
b0:3d:02:54:b4:14:5a:5d:f3:a0:ef:2f:c4:da:c2:68:21:79:
48:aa:e6:bf:5a:08:70:6d:71:e7:e3:29:cd:85:a9:33:46:f5:
de:eb:a5:6a:75:72:d9:ca:ab:e4:2d:7e:d5:12:97:7d:f2:9d:
0c:3b:0b:ad:6a:80:c7:26:9f:68:1d:ac:fe:31:ab:67:68:6f:
22:1a:66:5e:5c:10:ff:ec:eb:b7:a9:44:84:e8:f1:56:04:6e:
f8:43:5e:53:cc:ea:7b:24:81:61:bb:9b:09:aa:57:31:06:a9:
12:76:ba:39:b6:01:37:7b:09:e1:5b:e8:ff:97:06:f9:aa:8d:
5e:ec:2e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:41:28 2024 by rpki-client on console-fra.rpki-client.org