Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/v9m_saqPwpqE5e0uaC42RFA1lww.roa
File: v9m_saqPwpqE5e0uaC42RFA1lww.roa (raw, json)
Hash identifier: F18bhUt2+CChL7OoRCqzNwukdHWAYEPnfj8eoyC/+Ys=
Subject key identifier: BF:D9:BF:B1:AA:8F:C2:9A:84:E5:ED:2E:68:2E:36:44:50:35:97:0C
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 0190777F70F5625E3481975695B0E63A8448
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/v9m_saqPwpqE5e0uaC42RFA1lww.roa
Signing time: Wed 03 Jul 2024 07:29:18 +0000
ROA not before: Wed 03 Jul 2024 07:29:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214704
IP address blocks: 2a0f:7803:fa20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:7f:70:f5:62:5e:34:81:97:56:95:b0:e6:3a:84:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jul 3 07:29:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfd9bfb1aa8fc29a84e5ed2e682e36445035970c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:9c:f2:1c:75:22:fa:7e:40:68:be:67:c5:
6d:bb:b5:13:6c:a8:5b:78:29:e1:ca:d5:df:55:c7:
ce:f3:50:a3:96:77:e0:a2:20:52:80:d4:87:fe:06:
b6:9d:27:d3:8a:9e:72:f8:1b:1e:80:1d:5d:3a:91:
4f:a2:3e:9c:42:9e:2e:84:f1:22:f4:3b:14:41:c9:
d4:76:08:66:02:38:21:ef:cd:68:c1:9e:dc:d3:c0:
9c:f0:6a:e1:51:be:54:37:1c:59:93:fa:ba:51:61:
1c:bb:db:43:af:f3:86:cc:63:cc:f9:a4:12:26:2f:
6f:a6:35:ac:de:d0:6d:61:e6:85:68:be:4a:ab:9e:
9c:1d:95:cd:80:90:c8:f5:30:b6:5d:7f:ff:eb:b4:
7c:90:48:61:1b:5d:44:eb:70:30:4f:45:8a:5b:c2:
1e:16:9f:5a:70:41:53:68:4b:7b:95:7a:36:2c:84:
65:a6:67:88:51:05:00:52:d7:31:64:f6:11:b2:a3:
c6:42:f2:f6:8e:dd:2a:a2:b2:30:ac:75:7c:3e:88:
0d:2e:62:67:16:c1:bc:e1:ba:ca:1e:e5:ee:2c:b0:
33:e9:d1:36:9a:80:88:4e:e2:22:8e:77:95:8a:0a:
a7:73:52:87:f0:e3:4d:a4:37:20:fe:7a:04:f8:00:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D9:BF:B1:AA:8F:C2:9A:84:E5:ED:2E:68:2E:36:44:50:35:97:0C
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/v9m_saqPwpqE5e0uaC42RFA1lww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fa20::/44
Signature Algorithm: sha256WithRSAEncryption
5b:e2:31:76:9a:2e:dc:71:dc:3e:7a:23:8b:d5:ab:13:0c:3c:
ea:bc:b9:7b:5c:98:1c:c0:68:b1:52:0f:7c:e4:4b:ec:6d:65:
2a:1c:fb:af:e7:8a:ae:41:fb:e9:87:d2:5d:32:42:19:c6:78:
9d:f5:19:69:3c:01:78:ea:a7:2f:eb:92:16:6d:51:ed:b5:82:
68:be:a3:17:a4:75:a5:84:e4:a0:db:f1:78:b9:e0:2c:03:ff:
38:43:d4:fc:83:91:cd:c6:dd:b6:5d:98:89:a4:0a:1d:2d:d0:
49:2c:a0:b4:d1:23:04:fe:ef:d1:a0:cc:b9:e2:8f:5a:ae:d3:
03:5c:ec:f8:cb:9a:ef:0b:4f:d6:f5:b0:8d:8f:fb:3b:e8:cf:
e1:77:48:7e:bf:f5:9d:f2:c6:e9:a5:07:ef:07:e2:82:ce:05:
07:6e:9f:b7:a3:e1:40:23:b1:af:ab:b6:c9:49:0a:0f:29:f0:
78:c4:8d:d9:99:fa:a3:6e:24:db:45:41:24:0e:dd:72:ad:de:
ff:5f:40:72:be:83:9d:5d:3c:9e:e7:2f:e1:4c:1b:2c:59:a5:
ac:35:3d:fb:a2:db:67:39:18:46:73:8c:e5:4f:c6:5c:07:4c:
1f:97:74:86:9a:0c:8a:cf:b8:65:b8:e0:20:f5:73:9c:b1:d5:
ca:ac:d1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:25:39 2024 by rpki-client on console-fra.rpki-client.org