Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/seo2SoJGqUg7uffg5dNtcTC6nNE.roa
File: seo2SoJGqUg7uffg5dNtcTC6nNE.roa (raw, json)
Hash identifier: R4wrUK5U18ORWGKNovYbHczl34agjBzBRGjLfpGxWdA=
Subject key identifier: B1:EA:36:4A:82:46:A9:48:3B:B9:F7:E0:E5:D3:6D:71:30:BA:9C:D1
Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Certificate serial: 019003A70165C1EF8FCCFB3E2580A5F4B9A0
Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/seo2SoJGqUg7uffg5dNtcTC6nNE.roa
Signing time: Mon 10 Jun 2024 19:36:34 +0000
ROA not before: Mon 10 Jun 2024 19:36:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 2a14:61c0::/30 maxlen: 30
2a14:61c4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:03:a7:01:65:c1:ef:8f:cc:fb:3e:25:80:a5:f4:b9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Validity
Not Before: Jun 10 19:36:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1ea364a8246a9483bb9f7e0e5d36d7130ba9cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:46:84:59:f9:f2:ff:32:ac:2b:71:25:6d:f0:
2a:ed:46:51:d0:2b:26:a4:0e:9d:ce:70:b3:bb:44:
f9:79:dd:d2:27:75:38:29:0c:4c:e2:23:0a:9c:21:
5b:f6:99:ab:98:04:52:03:86:70:24:a7:a6:f3:b6:
06:18:d8:60:7c:88:a8:d1:ac:14:b7:fb:00:d7:93:
c2:ab:bd:66:8b:ef:c4:f2:8d:7e:b0:65:f0:05:1d:
2c:ab:b2:76:60:3e:8c:a6:9c:1c:8f:a3:fe:48:cd:
df:23:44:11:12:31:59:0e:2d:88:18:db:70:9d:67:
64:51:dc:a0:3b:22:af:82:0b:43:e1:ce:7c:89:b8:
1a:5b:d5:cc:ee:ec:b7:00:0a:c9:d7:d5:43:c1:56:
02:47:1a:0c:7c:b3:1e:9a:1f:1f:ce:6b:61:64:91:
b3:3a:0f:02:3d:29:b4:ef:e4:97:6d:65:c4:26:9c:
bc:d0:14:e4:eb:5c:01:36:8d:94:b3:01:af:39:58:
2a:51:7f:e7:e1:2d:99:7c:1c:55:ea:31:69:bd:7e:
dc:46:ca:d1:32:19:c0:ec:70:3f:73:c0:e6:ed:e3:
a6:cf:3f:bb:61:7d:90:d2:ab:20:68:e1:fa:26:60:
bf:71:ed:69:e3:47:4b:3c:f6:f3:c1:b9:a9:49:c7:
f2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EA:36:4A:82:46:A9:48:3B:B9:F7:E0:E5:D3:6D:71:30:BA:9C:D1
X509v3 Authority Key Identifier:
keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/seo2SoJGqUg7uffg5dNtcTC6nNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:61c0::/29
Signature Algorithm: sha256WithRSAEncryption
1c:16:f8:7b:ea:cf:c3:4c:32:90:69:d0:5b:71:f3:e8:8d:cc:
f5:0b:3b:df:66:8e:5b:93:57:d6:0a:66:0d:aa:c9:d5:7d:2e:
cd:d5:c6:69:85:a0:39:d8:51:87:8c:ae:93:5d:3b:27:fb:8c:
48:24:13:61:ab:9b:c2:8f:ea:80:bb:84:38:37:ff:83:90:45:
84:f2:ce:f9:dc:d2:00:e4:d3:71:5d:dc:b3:1b:24:12:a6:0d:
e3:c0:f5:f3:15:30:14:49:f7:6e:63:83:c9:07:3b:f1:d4:14:
0b:4d:c4:da:6c:0f:9e:f1:69:1e:48:07:0e:de:3e:31:e0:e9:
6e:77:7b:3a:1e:44:b2:5f:de:3a:95:88:45:3f:7c:f3:51:5e:
22:18:c9:e9:c7:85:06:78:03:a6:6c:7c:08:9c:32:c8:e5:fd:
49:05:95:d0:04:c4:37:44:84:2b:43:e2:7f:e9:9b:83:cc:3f:
de:46:c6:8b:56:8d:4f:15:d2:04:0a:49:97:a9:b1:37:05:74:
61:f0:7e:07:65:cf:af:9b:ee:18:7c:31:78:c0:d2:bf:d4:12:
92:ea:8d:04:f5:03:be:51:85:58:14:1b:45:df:43:d6:c2:da:
5d:ed:e9:35:95:2f:e2:3f:7f:47:c4:c8:0d:4d:5e:62:06:c2:
4f:c0:fd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:18:07 2024 by rpki-client on console-fra.rpki-client.org