Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa
File: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (raw, json)
Hash identifier: Stu4rCpjsW++1o+hLBBUMrcI9XDVGgCDFxr3l7VjbgI=
Subject key identifier: EC:D6:97:BF:CA:9D:DE:46:2A:17:25:F0:3A:EA:4A:C9:12:6F:89:7F
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 0AF2D0CE414658C3366B6E00E51B61B9EFB45D8D
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa
Signing time: Sat 14 Sep 2024 01:22:27 +0000
ROA not before: Sat 14 Sep 2024 01:17:27 +0000
ROA not after: Sat 13 Sep 2025 01:22:27 +0000
asID: 35537
IP address blocks: 2a04:6f01:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:f2:d0:ce:41:46:58:c3:36:6b:6e:00:e5:1b:61:b9:ef:b4:5d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Sep 14 01:17:27 2024 GMT
Not After : Sep 13 01:22:27 2025 GMT
Subject: CN=ECD697BFCA9DDE462A1725F03AEA4AC9126F897F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:2e:29:d1:4d:92:f7:37:b5:ce:b4:80:25:
e6:ab:5d:c5:ca:8d:a5:47:ce:52:63:27:d2:a1:9d:
f7:29:ec:2b:84:95:97:f5:98:21:8e:24:2f:2c:02:
fd:e0:7c:0c:bf:c0:0c:57:07:e7:8e:a1:d4:19:4d:
89:c8:a0:c7:80:bf:65:f4:32:d9:38:58:9f:f6:74:
77:9a:8c:dd:0d:c7:28:50:72:04:de:b3:cb:43:03:
ed:d7:09:3f:38:f8:f6:44:4a:a7:92:0d:e3:f3:44:
20:65:90:08:72:73:78:31:38:78:c2:4c:2f:a1:ee:
e1:49:9e:38:91:36:5e:7a:ba:89:1e:d2:e6:ca:93:
59:02:db:bd:b3:72:1a:77:11:3f:34:b3:96:d3:bd:
78:0f:00:3b:e9:92:7d:f6:f7:4f:fd:0c:99:5c:a1:
00:b8:74:99:78:7f:e3:78:7d:cd:20:aa:11:0a:f3:
48:f1:10:7f:42:f7:c0:99:f5:58:6d:ef:a8:d9:4f:
ea:8d:9e:00:b2:09:63:99:eb:d1:69:1d:93:e6:39:
5a:7b:db:79:76:01:0c:2d:da:7a:b3:eb:e4:94:38:
4f:17:db:de:67:14:24:df:ae:1b:1f:58:fa:11:c1:
96:f2:b8:41:cd:61:8c:f3:36:cf:a8:7f:cd:f5:79:
ee:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D6:97:BF:CA:9D:DE:46:2A:17:25:F0:3A:EA:4A:C9:12:6F:89:7F
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6f01:1::/48
Signature Algorithm: sha256WithRSAEncryption
b2:bf:4e:8a:0b:45:40:de:f0:a0:bf:6a:16:56:14:92:7f:66:
6e:bd:55:f9:96:da:51:ed:47:13:1b:ed:16:9c:b3:a0:d7:37:
d7:11:5b:ba:ea:ad:60:1d:cd:98:fe:93:64:1a:64:a9:08:8b:
7d:f8:0d:43:48:53:6c:93:06:de:fa:4b:d8:1f:af:6e:de:e7:
79:b6:6a:7d:78:16:7e:8f:37:9b:82:51:e0:c7:11:a8:9c:92:
19:f6:1c:01:69:4e:6c:aa:51:c8:1d:c5:05:51:98:be:bc:5c:
07:3b:5d:db:4b:e3:c4:66:4c:03:ba:b7:51:ec:71:4c:e5:25:
8d:26:23:4b:ef:e8:90:a7:b5:04:e1:2b:d8:49:f5:0b:9e:03:
78:af:2b:3c:0f:80:2a:8b:5d:f3:92:3b:f7:3f:e1:02:f4:3f:
22:58:24:32:99:22:f8:e8:a8:db:02:08:13:21:00:b0:9d:fe:
90:67:67:9b:33:aa:a9:66:b5:03:fb:eb:99:3f:54:1f:f5:38:
3a:3b:39:7b:7f:3c:ad:8f:af:10:c8:02:b6:79:77:c2:3c:2b:
23:81:bc:27:d3:dc:c2:6f:8c:55:8a:49:70:f1:d8:de:fb:19:
06:55:7f:da:e1:79:ae:87:26:ad:3b:3a:b6:a5:8e:18:47:8f:
1b:1b:ff:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:17:29 2024 by rpki-client on console-fra.rpki-client.org