Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/rSzdhTbw0Iff-41-KEdJRZZh8k8.roa
File: rSzdhTbw0Iff-41-KEdJRZZh8k8.roa (raw, json)
Hash identifier: IqEuGNBw6y5c4TNn3N+cDP5k8SvMDZntLmtUXDDv52o=
Subject key identifier: AD:2C:DD:85:36:F0:D0:87:DF:FB:8D:7E:28:47:49:45:96:61:F2:4F
Certificate issuer: /CN=97ea541c123faa9c0edc729f829e959fd292e37d
Certificate serial: 01909713C85E3BC09BBBEEA7CB14E097F901
Authority key identifier: 97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/rSzdhTbw0Iff-41-KEdJRZZh8k8.roa
Signing time: Tue 09 Jul 2024 10:39:34 +0000
ROA not before: Tue 09 Jul 2024 10:39:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43519
IP address blocks: 2a0d:9b80::/48 maxlen: 48
2a0d:9b80:1::/48 maxlen: 48
2a0d:9b80:fe::/48 maxlen: 48
2a0d:9b80:ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:97:13:c8:5e:3b:c0:9b:bb:ee:a7:cb:14:e0:97:f9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ea541c123faa9c0edc729f829e959fd292e37d
Validity
Not Before: Jul 9 10:39:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad2cdd8536f0d087dffb8d7e284749459661f24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:40:a0:54:13:3a:d3:44:dd:93:70:7e:53:
3f:20:6d:67:d8:b4:6b:60:79:ca:76:61:65:6d:e2:
6c:83:f9:4d:91:b8:36:59:59:b2:1f:35:15:a9:08:
bf:83:76:d5:0d:5c:7b:aa:55:1f:3f:68:1c:96:2b:
6d:42:9f:a1:f3:37:fe:f5:b3:1e:22:e4:30:95:22:
c7:85:8d:47:bd:4d:30:18:df:98:6e:a4:05:cb:8b:
8f:46:9a:a2:75:1d:b4:6b:4b:72:c6:73:66:76:89:
67:d6:36:94:62:64:2e:a3:0a:f4:28:22:15:d4:c0:
3c:e3:be:69:c3:ab:d1:48:05:e5:13:54:24:2e:fc:
29:93:01:8d:e7:45:71:ac:18:c8:8f:d2:26:a2:30:
eb:58:92:2b:86:59:a3:e1:b7:35:b8:7b:e3:b8:29:
27:80:58:71:8f:b7:28:47:27:af:2d:20:55:4c:be:
2d:ea:bd:93:f5:22:fd:ee:e2:e2:90:c9:69:ad:e2:
63:9d:33:19:56:ec:3c:da:4d:5c:38:22:72:6c:c8:
7e:25:68:ff:a5:6c:24:3f:6d:97:72:5d:51:01:13:
4f:6a:d5:fc:ea:58:0d:69:2d:b8:9c:08:06:55:0d:
50:c8:a7:cb:5e:53:7d:86:b2:37:9b:e5:76:d3:99:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2C:DD:85:36:F0:D0:87:DF:FB:8D:7E:28:47:49:45:96:61:F2:4F
X509v3 Authority Key Identifier:
keyid:97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/rSzdhTbw0Iff-41-KEdJRZZh8k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:9b80::/47
2a0d:9b80:fe::/47
Signature Algorithm: sha256WithRSAEncryption
3e:a4:33:c4:26:2b:af:f9:fd:79:e9:3e:d7:b6:65:67:7a:98:
e0:00:be:85:32:90:05:e0:37:b0:ca:c1:67:f8:ea:36:2b:30:
0e:aa:ca:8b:73:ce:46:49:01:2f:e4:e3:9a:dd:c5:46:1a:10:
c0:43:26:fa:45:c3:ae:ca:a9:46:18:3e:b6:4f:5f:93:bb:1f:
42:08:39:92:44:e0:5c:4f:09:d4:42:0a:7b:35:5a:1a:fd:99:
48:83:ab:90:11:7c:e5:9b:8f:7d:37:b3:fb:cf:ca:8d:cc:70:
8b:c8:d9:91:64:de:5a:f3:e8:5e:95:4d:5d:c2:2d:de:cc:3a:
b1:2e:60:43:c4:d9:85:71:33:99:23:ad:8b:c6:c5:56:6e:e2:
12:f9:4b:b5:2e:9a:83:cb:d2:bf:9b:14:5d:cc:6c:ce:db:ba:
fa:03:bc:f3:92:56:0e:bb:0a:2a:41:a7:28:ae:37:f4:39:1a:
9f:2a:5b:97:77:06:0b:24:78:d5:67:ac:5a:8f:50:6c:56:0e:
f3:fe:4b:03:27:15:cf:3e:95:86:a4:75:6e:8c:83:1b:40:86:
33:3f:de:70:64:3c:fc:ec:f3:d9:fc:e5:8d:93:1e:20:aa:6f:
23:df:ec:8b:3f:e8:a8:b3:75:5a:e9:b4:e1:65:da:08:33:04:
c6:1b:00:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:52:36 2024 by rpki-client on console-ams.rpki-client.org