Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/et9PjOpdNPx1nUnf4P18Z7yzrEM.roa
File: et9PjOpdNPx1nUnf4P18Z7yzrEM.roa (raw, json)
Hash identifier: QGV7KExuE2XVVMiClknjeCXhvPFdaJ/01fxEeSG/F1Y=
Subject key identifier: 7A:DF:4F:8C:EA:5D:34:FC:75:9D:49:DF:E0:FD:7C:67:BC:B3:AC:43
Certificate issuer: /CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Certificate serial: 018CC2DB3298E083213C94DA99001A14DB25
Authority key identifier: 8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/et9PjOpdNPx1nUnf4P18Z7yzrEM.roa
Signing time: Mon 01 Jan 2024 02:29:54 +0000
ROA not before: Mon 01 Jan 2024 02:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207563
IP address blocks: 2001:678:be8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:32:98:e0:83:21:3c:94:da:99:00:1a:14:db:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Validity
Not Before: Jan 1 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7adf4f8cea5d34fc759d49dfe0fd7c67bcb3ac43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:79:c7:c2:73:88:03:f7:c9:33:7e:4a:3d:66:
f8:86:d7:a5:41:f9:fa:ec:9a:ba:5e:0f:c5:ef:95:
bb:a1:f8:2c:26:70:4c:33:0a:fc:9a:cb:cc:d3:05:
36:8a:69:f4:28:36:15:28:cb:fb:28:ce:98:f0:c8:
e7:af:50:55:bf:2c:06:1e:36:46:5b:b2:3e:3f:03:
68:e7:2e:b1:04:c9:ca:64:51:7c:bf:03:cb:d9:e2:
be:64:f8:54:46:55:cc:ea:a5:99:e3:15:31:4c:47:
97:83:d8:59:b5:93:0a:bd:1a:7f:ce:e5:f3:db:f1:
a5:89:48:65:b0:64:e9:99:44:c4:e2:1a:82:0c:65:
14:3c:b2:ab:17:23:e1:22:d5:8a:6a:21:0f:55:ea:
c0:89:50:3b:21:37:3a:f2:3b:18:d6:4a:71:52:bd:
ff:4e:71:56:7f:1a:08:a3:6c:ce:36:5c:db:82:85:
48:5f:bd:a2:58:00:2f:4e:cf:5b:06:dd:f4:39:92:
4b:49:d2:27:a9:de:b3:8a:06:15:06:d9:47:23:a0:
f3:18:bd:8f:74:85:46:0f:8c:8f:e7:e1:09:f4:33:
4e:27:d8:cb:31:63:90:1e:05:c2:05:07:3d:e1:8f:
8a:dc:fe:99:14:01:6f:73:c2:98:f9:18:b1:30:a6:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DF:4F:8C:EA:5D:34:FC:75:9D:49:DF:E0:FD:7C:67:BC:B3:AC:43
X509v3 Authority Key Identifier:
keyid:8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/et9PjOpdNPx1nUnf4P18Z7yzrEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:be8::/48
Signature Algorithm: sha256WithRSAEncryption
11:dd:1e:df:75:6a:b6:ed:2c:9a:3f:fb:ef:ce:cb:25:d3:81:
28:8a:7a:2a:fb:06:40:ee:02:d2:de:92:25:a8:61:10:99:24:
b2:95:13:12:bc:20:b6:d6:aa:2a:36:cd:99:04:5c:03:b5:60:
bd:29:53:1d:0c:b8:8b:61:67:51:07:79:af:a9:4f:98:09:a1:
e8:97:c6:86:59:1b:4a:44:e8:63:2b:da:3e:1b:af:10:7f:9a:
33:8c:d2:ed:ee:17:d1:81:3e:1c:7d:c1:f6:4e:56:22:d8:d9:
7c:a2:c8:ef:dd:38:51:61:01:df:04:13:61:31:13:00:a4:84:
8f:dc:d8:f7:a9:ec:49:8d:77:c9:5f:21:77:21:8c:e5:b9:28:
80:6a:8f:51:d1:23:3d:ad:61:45:72:2a:a2:40:4d:7a:f6:60:
8f:7f:59:82:b1:74:f7:3c:68:77:a0:a5:a8:69:09:3f:1b:bc:
df:6c:60:4c:c2:2c:22:03:15:d0:63:81:06:da:93:e4:e8:19:
90:16:0d:fd:fb:68:f3:90:42:6f:43:45:71:37:f5:c7:ad:fc:
ff:6e:45:b5:96:b8:c2:85:61:1c:35:c7:40:a3:57:89:bb:32:
2b:23:2f:ff:f2:2a:76:fb:fd:1e:99:6a:af:e9:9b:4a:30:ae:
85:60:d1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:29:22 2024 by rpki-client on console-fra.rpki-client.org