Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/RkkqaTwCEAYb60SqH02sjDsrnnE.roa
File: RkkqaTwCEAYb60SqH02sjDsrnnE.roa (raw, json)
Hash identifier: FloHnO36LuADk+0QGMG2vKSbAHmERKdxjWQT3fc1fzA=
Subject key identifier: 46:49:2A:69:3C:02:10:06:1B:EB:44:AA:1F:4D:AC:8C:3B:2B:9E:71
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 0192DCBD76A7D55F522CB9C38C5EAA87D428
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/RkkqaTwCEAYb60SqH02sjDsrnnE.roa
Signing time: Wed 30 Oct 2024 09:24:17 +0000
ROA not before: Wed 30 Oct 2024 09:24:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197706
IP address blocks: 2a0d:1dc0::/29 maxlen: 48
2a0d:4940::/29 maxlen: 48
2a0d:4941::/32 maxlen: 48
2a0d:4942::/32 maxlen: 48
2a0d:4943::/32 maxlen: 48
2a0d:4944::/32 maxlen: 48
2a0d:4945::/32 maxlen: 48
2a0d:4946::/32 maxlen: 48
2a0d:4947::/32 maxlen: 48
2a0e:abc0::/29 maxlen: 48
2a0e:abc1::/32 maxlen: 32
2a0f:4780::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:bd:76:a7:d5:5f:52:2c:b9:c3:8c:5e:aa:87:d4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Oct 30 09:24:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46492a693c0210061beb44aa1f4dac8c3b2b9e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:23:b7:e8:c6:c6:e2:01:fc:b6:30:67:13:e2:
b6:62:c5:27:2a:ed:2a:f8:90:20:7c:78:f8:c8:d0:
6f:00:6c:c3:b0:7d:83:c4:c9:4b:03:9b:91:f7:51:
c6:89:d6:09:6e:d3:90:07:3f:21:94:c0:b8:a3:e8:
9a:1e:44:8d:66:e0:65:34:aa:91:46:51:63:63:b1:
54:52:43:e0:c7:2e:e5:d3:76:f6:b6:12:c1:44:ee:
d1:9a:f9:60:5e:73:f7:c4:93:25:51:4a:70:4e:0f:
3e:b5:f2:d4:6e:91:88:bf:67:55:db:ee:fc:59:78:
31:61:ac:60:45:b1:e6:b7:ec:0e:af:51:07:72:cb:
b4:e9:6f:f6:28:5e:f4:59:ae:2d:af:d3:64:84:cb:
21:a0:34:72:06:02:d5:16:33:53:4b:78:27:3e:08:
0c:2a:56:28:40:20:c9:bf:ff:ea:b6:21:10:74:81:
78:5d:3e:64:7a:ac:95:17:79:8a:41:82:a9:12:9c:
b3:e7:df:56:1f:48:51:c6:88:a5:11:ec:0a:19:46:
21:4f:a5:28:1f:7a:7a:33:34:02:f6:33:63:19:b6:
45:d1:e5:a3:89:6c:94:83:47:9f:f7:64:dd:34:cf:
2c:56:74:81:0c:f8:a9:51:4f:7f:7e:a1:2f:ef:6c:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:49:2A:69:3C:02:10:06:1B:EB:44:AA:1F:4D:AC:8C:3B:2B:9E:71
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/RkkqaTwCEAYb60SqH02sjDsrnnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1dc0::/29
2a0d:4940::/29
2a0e:abc0::/29
2a0f:4780::/29
Signature Algorithm: sha256WithRSAEncryption
67:50:2f:d1:79:4f:f1:c6:bf:9f:d4:f1:98:7f:1f:85:f0:c8:
87:5f:76:f0:46:45:fa:06:3e:e9:b2:c4:71:60:1b:d7:26:3e:
7f:aa:c8:6a:b0:5b:df:8e:68:4b:43:ad:46:49:17:ab:b1:c7:
3a:fe:14:95:76:8b:f7:61:c5:a9:64:ef:ac:9e:b4:40:38:82:
6a:4a:3a:bc:06:23:7c:ef:ba:ae:43:23:69:bf:18:6c:2d:7f:
0b:72:4b:ac:c1:b7:62:21:2f:b7:4c:c3:3e:d8:c9:42:2d:2d:
d8:43:76:f8:b3:51:93:32:49:80:dc:23:fe:8f:ba:d7:11:f1:
bb:ed:d9:d0:dc:37:fd:46:b4:ce:4b:3a:e2:b0:05:59:ea:b7:
57:f9:e7:47:4e:e2:49:2f:59:9e:a6:be:d1:9f:36:9c:66:47:
55:8f:c0:c4:db:a3:98:5a:e2:9e:6e:21:ad:9e:c2:3c:a7:62:
50:ee:c8:80:cc:9d:d6:7a:d5:47:e0:53:e0:ae:24:5b:9a:b8:
1c:6a:80:4d:4e:71:e9:02:85:5f:cc:0c:5f:1c:4b:75:ea:8a:
f8:2c:5e:e6:bf:0a:4e:3b:71:e6:99:b1:38:93:5f:9a:2d:40:
b5:d6:58:47:d3:9e:e4:bd:af:49:d4:de:74:34:59:c9:2b:95:
77:1e:a1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:06:13 2024 by rpki-client on console-ams.rpki-client.org