Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/cZ0yhsrJTJ8sT9_MlPYW116ORAs.roa
File: cZ0yhsrJTJ8sT9_MlPYW116ORAs.roa (raw, json)
Hash identifier: jJBS0uB2hB7IStXR63a0swh6e/ubs+tiCgSE0cGZDFo=
Subject key identifier: 71:9D:32:86:CA:C9:4C:9F:2C:4F:DF:CC:94:F6:16:D7:5E:8E:44:0B
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01935918124C766BEDBC0D2BD131144C0D0C
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/cZ0yhsrJTJ8sT9_MlPYW116ORAs.roa
Signing time: Sat 23 Nov 2024 12:56:10 +0000
ROA not before: Sat 23 Nov 2024 12:56:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45027
IP address blocks: 2a11:91c0::/29 maxlen: 29
2a12:5a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:18:12:4c:76:6b:ed:bc:0d:2b:d1:31:14:4c:0d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Nov 23 12:56:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=719d3286cac94c9f2c4fdfcc94f616d75e8e440b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:8b:c3:9b:8f:0b:3c:ed:26:21:90:ac:db:
fa:f0:a6:fe:3d:57:76:9f:18:e0:3c:25:30:07:99:
d8:b8:7d:39:a2:e0:20:24:5e:36:4b:7a:cb:fa:44:
9b:ef:2f:10:3c:65:0d:c7:a3:55:66:79:87:27:11:
d6:74:82:0a:82:eb:ef:4c:e6:3b:3e:e7:26:d3:3a:
4a:3e:75:e3:a0:39:dc:b0:a3:17:14:ea:24:bf:2b:
bc:b1:28:4f:02:9d:43:bf:94:a2:ad:79:d9:ac:b1:
4a:6e:ce:3d:2b:96:c6:ab:d3:42:7b:af:64:bd:81:
8f:3d:c0:a5:30:94:1e:64:d2:f3:99:d7:5d:39:f7:
01:a2:83:58:8e:c7:ee:ed:f8:57:95:77:29:81:50:
dd:10:85:9e:86:28:97:a0:7f:a3:02:95:b2:62:4e:
22:b0:d0:a6:45:c7:0a:3e:81:6a:1d:24:ba:64:1f:
1c:06:e6:a1:98:11:4a:67:fc:1e:ff:56:48:3e:24:
2e:5a:13:26:e7:07:f8:81:74:15:58:bc:49:bf:ef:
1b:d7:87:b4:67:85:2f:12:37:df:0e:f9:b9:b2:e6:
68:42:e2:be:34:89:76:bd:5f:62:bf:b0:81:5e:9c:
54:90:9e:6a:7a:59:1a:dc:f9:74:e0:f9:e3:73:a7:
97:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9D:32:86:CA:C9:4C:9F:2C:4F:DF:CC:94:F6:16:D7:5E:8E:44:0B
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/cZ0yhsrJTJ8sT9_MlPYW116ORAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:91c0::/29
2a12:5a00::/29
Signature Algorithm: sha256WithRSAEncryption
ca:c0:92:67:2b:40:59:a9:ac:74:b7:8a:ff:e6:57:2a:50:a3:
94:f8:b9:cc:cb:1e:23:cf:f4:95:3d:2c:5c:8d:47:6d:62:19:
bf:54:be:2c:88:67:ee:1d:0d:6c:af:db:c0:6b:b9:82:86:d8:
ee:9f:67:1a:fb:d8:2d:8e:b9:8b:c6:7f:62:56:0e:b6:68:3c:
d1:a4:37:b6:fb:ff:ef:de:dd:24:43:b1:8a:79:7c:51:9d:7e:
c6:5a:de:54:24:5f:4e:b5:f6:63:ca:82:c1:35:8a:86:76:94:
6f:bc:49:0f:a1:cd:83:06:48:ed:8c:83:20:5f:ef:81:59:8c:
99:4c:7e:f4:d9:78:19:91:f6:08:2a:0b:a7:f5:96:17:37:b0:
7c:e7:6d:56:eb:99:e2:4f:4b:db:fb:7e:ad:25:0e:32:b1:95:
d0:a7:79:55:bd:d9:59:f8:b4:11:d8:e9:d0:45:fe:11:c1:c1:
93:71:32:fc:23:42:73:8b:b6:03:2c:70:b0:1e:64:5a:c5:a0:
b8:c8:c9:f8:f8:4e:c6:4a:ad:da:70:b6:f5:08:e2:36:59:55:
55:ab:ce:11:56:f7:36:ce:f4:65:30:a2:e2:40:cc:67:9f:64:
ef:38:55:93:f0:b4:89:f6:f0:96:92:e6:93:35:43:80:0a:86:
b2:b6:ea:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 00:20:57 2024 by rpki-client on console-ams.rpki-client.org