Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/E9_7jtxIQkxVHr_zna2h4IbNeA0.roa
File: E9_7jtxIQkxVHr_zna2h4IbNeA0.roa (raw, json)
Hash identifier: BNOt1vynLIr/JoitAZPQ2NrySyihu+mTslCDlotl2/c=
Subject key identifier: 13:DF:FB:8E:DC:48:42:4C:55:1E:BF:F3:9D:AD:A1:E0:86:CD:78:0D
Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial: 01934E63E60E696F192EA2C09C5FAA281E04
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/E9_7jtxIQkxVHr_zna2h4IbNeA0.roa
Signing time: Thu 21 Nov 2024 11:03:09 +0000
ROA not before: Thu 21 Nov 2024 11:03:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16625
IP address blocks: 2a10:fa44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:63:e6:0e:69:6f:19:2e:a2:c0:9c:5f:aa:28:1e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Validity
Not Before: Nov 21 11:03:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13dffb8edc48424c551ebff39dada1e086cd780d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5a:53:cd:eb:5b:a3:90:4e:71:8f:7d:62:94:
98:e6:79:a5:71:c0:0b:74:f1:96:df:e3:1a:50:66:
42:05:73:2b:ce:b1:be:9c:64:dd:98:c1:f5:fb:85:
71:7c:a9:ef:06:5c:b7:68:43:a5:87:6a:38:53:6c:
d7:b7:5d:51:13:dc:b8:d7:0b:15:b5:d3:c8:73:00:
1d:18:e4:33:d7:f8:e4:7b:43:7b:ac:f3:9e:66:db:
3d:99:c7:9b:ac:ae:49:1d:b6:ef:b8:72:fc:0f:be:
c5:af:11:37:ff:91:dd:e6:b4:75:a2:7f:a4:28:5f:
1b:fb:1e:71:26:46:1c:d0:38:d6:07:7b:bc:a0:41:
d7:fa:4e:16:56:d1:08:2a:b8:61:89:58:13:05:44:
05:22:a1:2e:fd:76:47:45:fc:a2:30:d8:18:1b:8a:
4e:b9:15:9b:76:ed:11:58:bb:f1:6f:73:b2:bc:ff:
c2:c0:8d:04:32:e9:b0:4f:a7:45:4f:a0:5f:d5:80:
51:14:dd:9c:0d:21:05:a3:6f:a9:51:62:7e:13:b0:
f0:6c:84:99:b9:c6:c3:c9:72:61:43:ad:b1:37:e1:
a3:90:c5:84:d1:1d:0f:f4:cb:99:dd:3b:7d:14:57:
e2:06:0e:ec:37:1f:52:d5:21:74:7b:14:93:16:e3:
15:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DF:FB:8E:DC:48:42:4C:55:1E:BF:F3:9D:AD:A1:E0:86:CD:78:0D
X509v3 Authority Key Identifier:
keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/E9_7jtxIQkxVHr_zna2h4IbNeA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa44::/48
Signature Algorithm: sha256WithRSAEncryption
48:da:49:78:0b:d7:f8:65:6e:ed:4b:b5:b6:99:59:b1:eb:68:
f8:16:66:94:20:eb:c4:f8:be:aa:76:55:d8:57:4f:56:3d:5b:
ee:9e:95:b8:43:94:fd:2a:8d:46:b7:09:f2:a9:dd:de:bb:cd:
89:34:45:ed:d7:1a:0d:8a:a1:23:2c:c8:03:6c:d6:9d:4b:a4:
80:d9:81:c2:dc:fe:19:a1:ac:fa:da:3a:c0:be:61:17:81:13:
a7:e2:12:0d:72:36:74:20:2a:3d:a7:31:30:e5:29:36:a0:91:
11:11:7a:a6:eb:a6:88:12:a2:58:c8:dc:b1:c6:33:45:bd:0c:
7e:71:ce:17:f2:a3:c5:e2:6b:17:85:26:65:24:e3:7d:b4:c5:
f4:55:87:b0:4b:24:e9:05:dd:5d:39:c5:d0:f7:af:37:05:c9:
00:0b:c7:b0:96:e1:2c:65:86:2e:0f:0e:ad:48:96:dd:fb:aa:
85:b5:8c:b7:97:78:8e:c7:f5:7e:1c:78:66:02:5f:62:45:7f:
61:25:df:00:7c:18:33:c8:ee:e7:b6:79:18:4b:8a:5e:dd:50:
99:50:b0:9f:01:83:5c:e0:60:cc:4c:ae:a4:c3:1b:33:82:58:
eb:fd:c2:e5:37:3e:dd:50:17:cf:6c:8b:a3:d5:e3:77:c5:f0:
d9:16:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:34:39 2024 by rpki-client on console-fra.rpki-client.org