Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/rlMSAMuQME4_oL647keIrwLXaJU.roa
File: rlMSAMuQME4_oL647keIrwLXaJU.roa (raw, json)
Hash identifier: Z90rhLuz/rqt9mu6ff1flAbFpVqLgdaEodaRWXyO2EI=
Subject key identifier: AE:53:12:00:CB:90:30:4E:3F:A0:BE:B8:EE:47:88:AF:02:D7:68:95
Certificate issuer: /CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Certificate serial: 01906F5C9C19DCD6A802A6CE7F59AC204615
Authority key identifier: 92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/rlMSAMuQME4_oL647keIrwLXaJU.roa
Signing time: Mon 01 Jul 2024 17:34:18 +0000
ROA not before: Mon 01 Jul 2024 17:34:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136468
IP address blocks: 2a00:edc0:136::/48 maxlen: 48
2a00:edc0:137::/48 maxlen: 48
2a00:edc0:469::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6f:5c:9c:19:dc:d6:a8:02:a6:ce:7f:59:ac:20:46:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Validity
Not Before: Jul 1 17:34:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae531200cb90304e3fa0beb8ee4788af02d76895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:30:9e:f0:00:7a:24:17:3f:47:4e:9f:31:db:
3b:d5:21:82:28:c0:90:c3:a6:22:e5:ac:af:4b:42:
b4:bd:3b:79:ce:10:5a:6d:73:ee:14:f2:3b:94:f6:
5b:f9:2f:0a:2a:e9:79:13:3e:ab:4d:74:25:1e:da:
0a:40:6c:57:57:fb:f1:47:a7:59:88:db:3c:86:10:
b8:ab:b3:c5:39:33:02:5c:a5:17:de:23:cf:24:35:
23:e0:84:20:3b:91:bc:41:f4:36:a6:f1:9c:9d:4c:
72:d9:63:cd:81:33:f8:f2:8d:90:5b:ff:9a:ee:0f:
b9:ec:8f:e5:9a:c3:cf:63:89:04:28:5a:12:4c:15:
bd:63:d2:68:ff:2a:b5:d2:86:f7:df:12:99:2d:f0:
8b:0b:8b:3b:99:f7:e9:bd:de:41:8d:b6:45:6e:61:
d4:99:c0:86:b8:49:23:cf:ea:da:b7:fe:35:3b:a8:
9a:ec:dc:25:9f:6f:68:0d:9a:d9:a9:e2:fc:e2:f9:
74:ae:8a:a1:34:3f:e9:d1:12:0f:f0:ac:16:89:31:
6f:27:04:fb:15:75:dc:61:30:98:53:80:2c:dd:34:
da:7f:6a:f7:94:c2:30:1b:f3:5c:c0:38:a8:5d:30:
29:77:f2:d8:4d:12:58:b6:a8:fd:4f:b6:f1:7f:08:
28:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:53:12:00:CB:90:30:4E:3F:A0:BE:B8:EE:47:88:AF:02:D7:68:95
X509v3 Authority Key Identifier:
keyid:92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/rlMSAMuQME4_oL647keIrwLXaJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:edc0:136::/47
2a00:edc0:469::/48
Signature Algorithm: sha256WithRSAEncryption
74:1c:22:df:41:e0:ad:15:b5:8e:35:43:17:5e:15:f6:f2:12:
31:3f:e6:83:19:66:9e:01:1c:93:71:fb:e5:73:a9:11:1a:b9:
89:01:87:40:e7:35:62:22:53:43:af:00:ef:82:64:d6:24:e8:
af:0e:fe:7f:1d:6b:de:e8:0c:6b:14:1b:af:57:1b:a4:46:0f:
b8:21:78:ca:12:ec:55:ad:15:29:9b:1b:77:4f:61:d0:93:2d:
92:70:a3:c1:be:8a:ff:7b:dc:1f:4e:bf:bb:76:12:68:a0:0f:
18:1f:23:74:0a:fc:0b:77:4c:9b:00:00:f2:0b:b7:5f:4e:61:
98:e8:af:23:f8:7b:b5:db:e0:ed:df:b4:5e:6b:4e:4c:c4:8a:
7c:de:85:99:f3:1f:42:a0:8e:39:ea:ef:3c:68:be:b1:ae:7d:
12:a9:71:66:5f:ac:3e:df:ec:1f:57:51:0d:4a:22:21:ec:5f:
71:54:2e:ca:7e:a2:d5:21:77:85:88:4d:67:6c:13:64:db:8c:
69:85:de:fa:b2:72:c0:1e:a3:63:2f:5f:7c:bf:33:5a:66:a5:
27:3a:fa:22:66:50:20:98:4c:a1:b4:d8:1e:34:e8:fe:06:50:
4f:e5:25:9c:9d:aa:95:e9:02:1a:62:49:22:71:80:38:ee:65:
27:82:70:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:25:34 2024 by rpki-client on console-fra.rpki-client.org