Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/o9Bl7yfDfxYTftzBosuwFgPklfE.roa
File: o9Bl7yfDfxYTftzBosuwFgPklfE.roa (raw, json)
Hash identifier: SuPUmTG9zHs4WYAd2wo2GHLlmSyTvC2NE6NDoNPqyi0=
Subject key identifier: A3:D0:65:EF:27:C3:7F:16:13:7E:DC:C1:A2:CB:B0:16:03:E4:95:F1
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 018CC56DEDB3289B0C235EC68BFFCBB416B6
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/o9Bl7yfDfxYTftzBosuwFgPklfE.roa
Signing time: Mon 01 Jan 2024 14:29:24 +0000
ROA not before: Mon 01 Jan 2024 14:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208911
IP address blocks: 2a11:8280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ed:b3:28:9b:0c:23:5e:c6:8b:ff:cb:b4:16:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Jan 1 14:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3d065ef27c37f16137edcc1a2cbb01603e495f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:b2:97:49:a3:ba:5d:d3:25:21:62:3d:2a:
57:3b:a6:1c:a1:98:40:b1:7e:47:68:29:59:48:e8:
9b:64:85:f5:57:0b:6a:03:91:cf:e6:ac:68:b3:1a:
50:75:4f:bc:4a:ff:c7:3c:0c:77:39:c6:90:89:8c:
60:49:70:70:33:f0:42:65:8a:bc:0a:86:f7:e0:78:
44:19:f1:b2:65:8b:d4:58:24:bb:a7:2f:a5:2f:d0:
41:56:4e:41:9a:23:d6:06:6c:e0:db:a8:57:72:c0:
79:19:37:b9:9a:b0:a0:7c:67:be:e1:c0:ee:32:1e:
21:72:64:b3:10:63:21:1a:98:fc:9b:0c:68:6e:a9:
29:81:b5:fa:92:a2:09:ad:09:9f:45:60:14:86:44:
45:37:e7:f1:ab:5f:eb:52:2a:ab:c0:b0:b6:f5:e7:
2f:c2:66:96:65:02:55:6f:2a:7b:fe:53:6d:68:c5:
37:2c:ff:89:76:95:29:46:d0:61:ea:1d:4b:e1:32:
b9:8e:3f:b4:45:3f:02:f2:ab:9c:da:00:26:e1:ab:
c4:a5:fe:a7:b0:83:86:c7:81:94:2b:c2:d2:29:43:
cb:51:86:9a:3e:7b:5e:61:45:03:1c:24:eb:b3:fe:
00:af:eb:c4:1f:5a:da:58:88:4a:ab:1c:69:aa:f1:
f5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D0:65:EF:27:C3:7F:16:13:7E:DC:C1:A2:CB:B0:16:03:E4:95:F1
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/o9Bl7yfDfxYTftzBosuwFgPklfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8280::/29
Signature Algorithm: sha256WithRSAEncryption
1a:ff:f2:de:44:f7:76:16:94:81:48:35:c4:86:60:2d:99:9c:
6c:a4:ce:42:dc:34:7e:46:8c:fe:24:1b:95:df:e5:85:65:4a:
c9:9b:aa:98:e8:08:41:c3:4d:67:60:93:c8:c7:75:fa:54:c0:
a3:12:90:51:ca:5b:ed:45:98:ee:d3:35:49:a9:9b:7e:ae:50:
d3:b4:76:ac:47:24:57:74:c1:6c:6c:3f:db:a2:72:1c:15:2f:
21:16:41:f9:a6:8d:ee:02:f1:f9:84:b0:bc:7f:5c:ed:d6:75:
e7:4a:a3:17:ed:ac:fb:06:27:1d:36:90:5a:07:52:7f:01:d2:
f3:ac:02:b9:1e:94:4f:3a:e5:63:5a:81:fe:b6:be:96:55:04:
52:fd:44:b2:68:0d:ab:fe:cf:af:46:08:16:6d:78:4f:5a:75:
06:9c:dd:49:f3:4f:aa:76:09:1c:e0:a5:d2:b2:5a:56:75:bc:
31:bf:6c:a4:55:01:5a:13:7e:26:82:67:6a:79:84:2e:7b:02:
0c:59:b1:29:f2:f1:cd:60:42:54:0f:43:ac:e2:59:82:13:c2:
32:40:0d:72:e8:91:d3:68:00:01:a4:a5:af:58:f0:3c:1c:3a:
e7:c7:78:5f:f6:63:4b:0e:85:d9:4b:62:09:a7:28:fa:f9:56:
d4:8b:db:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 19:46:11 2024 by rpki-client on console-fra.rpki-client.org