Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/oUobQmF3mM6JJXjBrLzPxBoZbrg.roa
File: oUobQmF3mM6JJXjBrLzPxBoZbrg.roa (raw, json)
Hash identifier: gzYxuFujFKtWHPHTjm889HkftwQTnZaxZ2wMZN26f78=
Subject key identifier: A1:4A:1B:42:61:77:98:CE:89:25:78:C1:AC:BC:CF:C4:1A:19:6E:B8
Certificate issuer: /CN=9097f97237ef366de5ab6d758eee543e08d57f5c
Certificate serial: 0190112F5B64909DB13EA846EE2678ED52E6
Authority key identifier: 90:97:F9:72:37:EF:36:6D:E5:AB:6D:75:8E:EE:54:3E:08:D5:7F:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJf5cjfvNm3lq211ju5UPgjVf1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/oUobQmF3mM6JJXjBrLzPxBoZbrg.roa
Signing time: Thu 13 Jun 2024 10:40:34 +0000
ROA not before: Thu 13 Jun 2024 10:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56986
IP address blocks: 2a03:bc80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/kJf5cjfvNm3lq211ju5UPgjVf1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/kJf5cjfvNm3lq211ju5UPgjVf1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJf5cjfvNm3lq211ju5UPgjVf1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:11:2f:5b:64:90:9d:b1:3e:a8:46:ee:26:78:ed:52:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9097f97237ef366de5ab6d758eee543e08d57f5c
Validity
Not Before: Jun 13 10:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a14a1b42617798ce892578c1acbccfc41a196eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dc:39:88:56:b2:22:e7:2a:11:a6:dc:08:cb:
61:80:72:32:2f:eb:e2:43:cc:5d:a1:7b:ab:65:d7:
2d:37:06:43:7d:5b:d0:00:9c:6b:86:ce:7a:6b:9d:
a6:c6:af:e6:6f:5a:a1:58:bd:47:92:66:5d:59:f1:
ee:d4:c5:8f:bf:78:11:95:33:45:c6:4d:da:c1:1a:
89:d9:a5:07:40:63:3c:e1:06:29:79:73:fd:5a:a2:
62:07:c5:e8:bd:21:19:73:e3:37:4a:b0:03:87:f8:
75:a5:90:ca:fd:51:62:1e:6a:16:a4:a7:89:a6:dd:
f4:dc:60:2b:35:e1:34:4e:67:42:c8:c1:be:d5:f1:
04:cd:1d:a9:86:de:d9:f9:63:a2:4b:07:54:75:5f:
58:6c:6c:8b:f7:83:a0:1f:4d:93:52:38:cd:f4:24:
28:62:e6:a7:f1:91:aa:77:0f:6c:d0:15:fa:de:80:
ab:0e:45:8a:da:14:ef:e6:8c:7d:75:7e:42:61:94:
a8:35:bd:52:39:11:af:9e:04:be:a6:1c:8a:30:64:
ce:be:3a:9c:fe:e3:a7:ec:c6:33:b4:58:fa:b9:bd:
1c:ad:e9:1b:82:a2:80:38:93:e1:63:d1:92:81:e0:
1d:c2:73:76:43:46:51:1b:b2:ab:9f:a7:7c:c8:8e:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4A:1B:42:61:77:98:CE:89:25:78:C1:AC:BC:CF:C4:1A:19:6E:B8
X509v3 Authority Key Identifier:
keyid:90:97:F9:72:37:EF:36:6D:E5:AB:6D:75:8E:EE:54:3E:08:D5:7F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJf5cjfvNm3lq211ju5UPgjVf1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/oUobQmF3mM6JJXjBrLzPxBoZbrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/kJf5cjfvNm3lq211ju5UPgjVf1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:bc80::/29
Signature Algorithm: sha256WithRSAEncryption
2a:a9:81:92:54:fd:74:05:84:c8:c0:db:98:0a:61:d8:35:7d:
ce:9f:48:ca:74:77:37:8a:00:de:d6:54:cc:db:c9:0b:8b:64:
3d:df:37:82:81:e7:f1:cd:57:b3:47:7e:7b:4a:53:84:f1:ea:
d7:f1:d2:45:4d:85:85:bb:fd:dc:a5:17:12:75:7b:b5:d2:dd:
fd:2f:e0:be:58:82:6c:c0:93:9a:e3:f0:ad:af:64:76:b2:bf:
36:d8:a4:ca:38:06:10:2c:34:3e:b7:5a:83:7b:53:e1:2b:e8:
94:8b:53:8d:6f:b2:c9:e5:67:03:68:40:9a:d8:8c:91:ba:1f:
28:55:78:87:b4:ba:69:c5:30:0e:54:68:85:20:6f:cd:b0:97:
9a:0e:ab:c4:da:a7:ce:35:b2:33:bf:57:d9:7d:d1:c6:d0:05:
bf:0e:05:1a:d4:d1:1b:3b:3d:70:b1:90:a3:da:83:9f:02:ef:
15:48:c9:9a:7c:ce:31:d2:d3:10:11:40:e2:b9:5c:05:e5:7a:
ad:12:42:7a:e2:94:4b:7f:11:37:69:e3:f1:3b:7a:a6:71:d2:
c6:1c:d6:97:36:17:84:b6:9a:06:7d:cc:8d:81:34:db:de:e6:
f4:53:c1:63:a5:2b:7c:db:8b:22:d4:c2:3e:01:b3:d3:0b:0a:
55:84:aa:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:20:48 2024 by rpki-client on console-fra.rpki-client.org