Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/cEYZXahhD5AtRyq_tIvpO_p7lic.roa
File: cEYZXahhD5AtRyq_tIvpO_p7lic.roa (raw, json)
Hash identifier: QFNwLyOSBy/YgDVR/RxJgEvC0mKUAHTAI4XSYa9uxqU=
Subject key identifier: 70:46:19:5D:A8:61:0F:90:2D:47:2A:BF:B4:8B:E9:3B:FA:7B:96:27
Certificate issuer: /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial: 018CC5DBF78A187A8E0D64B8C67D885026A2
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/cEYZXahhD5AtRyq_tIvpO_p7lic.roa
Signing time: Mon 01 Jan 2024 16:29:36 +0000
ROA not before: Mon 01 Jan 2024 16:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2001:678:934::/48 maxlen: 48
2001:67c:bf0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f7:8a:18:7a:8e:0d:64:b8:c6:7d:88:50:26:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Validity
Not Before: Jan 1 16:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7046195da8610f902d472abfb48be93bfa7b9627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:67:da:68:84:10:98:82:f3:8e:e7:e3:f8:fd:
1e:1d:66:e5:7a:05:ae:e2:9c:66:35:7e:86:7c:f1:
75:2d:65:a2:bc:2c:01:f3:e9:0d:43:f0:1e:30:b5:
0e:b9:db:2f:55:d3:21:a1:12:0d:18:d8:e7:b3:04:
e0:a8:eb:40:ac:22:3e:2e:ff:3d:17:10:81:13:c4:
69:e3:5e:f0:93:95:84:c1:c4:38:83:47:4f:ea:3a:
0d:ee:c3:9d:35:3b:d0:9f:de:bc:1e:8e:98:14:4e:
29:7d:7e:4b:01:34:1a:ae:1d:7a:d8:be:e7:ba:f1:
32:40:a2:59:ff:4f:e5:43:b7:05:43:fe:df:18:94:
b4:bf:6f:f1:fb:00:aa:72:ac:6f:16:9f:fb:8c:23:
31:b2:4a:20:4a:90:8c:aa:5a:65:e1:aa:08:9a:6f:
c4:28:28:e7:bb:fa:7a:60:a6:34:a0:41:bf:c8:8d:
51:86:b2:4d:4c:57:02:7d:06:22:40:f3:43:7d:78:
00:15:94:a2:b8:e7:24:98:d0:53:30:34:81:7d:82:
65:b9:5b:bf:50:40:49:0e:03:f3:24:1d:8f:f8:24:
b2:f5:4f:ca:f3:7b:37:64:53:47:e8:63:12:e9:5b:
6f:a4:4d:3b:95:18:c3:3f:21:0c:4b:10:1e:46:9c:
7c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:46:19:5D:A8:61:0F:90:2D:47:2A:BF:B4:8B:E9:3B:FA:7B:96:27
X509v3 Authority Key Identifier:
keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/cEYZXahhD5AtRyq_tIvpO_p7lic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:934::/48
2001:67c:bf0::/48
Signature Algorithm: sha256WithRSAEncryption
df:c9:9b:7c:b1:ae:ad:93:31:57:36:ac:aa:86:28:10:07:34:
c3:ea:a0:02:bd:2c:f1:87:be:84:cd:4d:44:30:dc:b0:29:28:
a0:ac:c7:d7:ab:c1:b3:53:32:2f:64:ca:2c:d0:5d:b9:f4:c9:
02:4b:3c:d0:c4:4f:c7:23:15:2d:65:dc:f3:13:40:49:80:89:
66:37:7c:ac:4b:02:a6:7b:b7:ac:ae:2b:47:18:98:42:6e:be:
63:19:24:42:d6:08:e4:fe:0b:0e:32:eb:8b:66:2d:1f:ca:27:
b9:e4:ef:ba:8a:0e:d6:31:a0:79:2f:60:dc:d1:27:8f:71:62:
b9:5c:3b:bf:5f:d3:a7:45:54:dd:57:db:15:b3:65:73:c9:36:
9f:1f:1a:68:75:3f:0f:96:01:70:97:62:82:50:c6:1e:14:c2:
b5:b6:8a:41:4a:6b:9d:3f:92:65:8b:cd:c2:57:44:eb:29:40:
35:09:fe:45:62:bb:7c:94:85:fe:a4:0a:4c:9d:6a:20:93:84:
a5:c9:8a:b5:dc:ff:c0:37:b1:73:33:58:7d:5c:32:da:cd:a3:
59:aa:05:67:bc:74:1a:90:3c:16:5f:8a:ea:4b:22:02:3f:b8:
47:6d:be:d6:06:a8:76:55:e5:bd:97:55:95:dd:89:40:27:e2:
d7:06:b5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:53:07 2024 by rpki-client on console-fra.rpki-client.org