Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/i5_J_yc9fEWDJB0m6eVn9dM_Dyw.roa
File: i5_J_yc9fEWDJB0m6eVn9dM_Dyw.roa (raw, json)
Hash identifier: +aufc/VtxP0DH56cISq2IPlVl1PcsBiFP3UrLERS7FQ=
Subject key identifier: 8B:9F:C9:FF:27:3D:7C:45:83:24:1D:26:E9:E5:67:F5:D3:3F:0F:2C
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018CC3B676C342A353AF0E2C2E05AD5A73BD
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/i5_J_yc9fEWDJB0m6eVn9dM_Dyw.roa
Signing time: Mon 01 Jan 2024 06:29:24 +0000
ROA not before: Mon 01 Jan 2024 06:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21100
IP address blocks: 2a0d:5a80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:76:c3:42:a3:53:af:0e:2c:2e:05:ad:5a:73:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b9fc9ff273d7c4583241d26e9e567f5d33f0f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:dd:ec:64:7b:c9:ae:b6:5e:52:d1:14:e7:
62:81:71:39:0a:1c:0b:9e:52:04:3b:3d:82:05:97:
f7:93:d9:4e:1a:a9:bf:5a:af:66:74:ef:9d:d3:0e:
af:a0:a8:04:98:78:f3:44:3b:23:ec:77:d3:d8:80:
38:25:53:e9:7a:e3:ed:ba:fd:07:4c:52:ee:b5:4a:
bc:ca:6c:bf:dc:6b:1b:72:f7:5a:49:69:8a:9b:05:
73:78:36:62:35:29:af:94:6a:8e:1f:b8:59:bc:33:
c1:c1:95:15:f5:6f:9c:be:d8:e1:22:76:24:fc:7b:
ed:1e:dd:e3:42:bc:d6:3c:a7:09:08:5c:52:e9:0b:
45:21:8c:20:67:e4:31:69:ac:46:83:e9:6e:1d:3b:
32:aa:c8:5f:5f:fd:d6:75:12:7a:4d:5c:99:b8:69:
6d:7b:ba:cd:69:09:43:17:62:fb:7a:77:94:f6:9d:
88:b7:3b:f0:34:25:7a:54:d4:e0:06:5a:8a:cc:cb:
35:75:cb:9c:e5:6d:af:7a:10:49:24:a9:1b:73:7c:
5e:65:a2:5a:33:75:20:36:06:0d:53:16:f9:cc:a8:
4d:56:27:6b:c1:07:ec:fd:d2:27:65:47:f6:b4:6f:
fd:c6:bf:0c:10:b4:94:32:90:f3:90:0b:74:82:2a:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9F:C9:FF:27:3D:7C:45:83:24:1D:26:E9:E5:67:F5:D3:3F:0F:2C
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/i5_J_yc9fEWDJB0m6eVn9dM_Dyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:5a80::/29
Signature Algorithm: sha256WithRSAEncryption
62:13:62:6f:6b:1d:ce:53:7a:be:2f:e1:f5:cb:17:02:a9:8d:
73:d1:97:49:94:26:cf:78:7f:e1:e1:5e:e0:93:1b:9e:78:7a:
67:b1:37:93:a5:7e:b0:47:57:41:74:91:dc:93:23:6d:93:dd:
bb:90:72:0b:45:21:d5:00:99:7e:51:bf:22:3e:3b:57:09:bf:
b2:72:70:30:ee:78:ce:6f:16:c5:81:cc:e4:1b:9f:d2:dc:f3:
a1:11:ce:56:d4:d1:33:1e:0b:82:f6:6b:ea:1e:3b:30:5e:d2:
a7:e2:1c:78:c9:a1:2b:4d:82:96:e8:d9:42:e3:7b:d8:de:b3:
14:92:f5:10:15:e8:fd:97:a4:86:af:65:7c:e9:16:99:32:98:
c2:e0:23:21:79:6d:1c:28:5c:d3:7d:e7:84:26:24:72:0f:ac:
d2:a5:dc:1b:b8:94:f9:7c:e6:01:20:99:36:64:69:0f:49:1e:
95:d4:8b:08:74:4c:0a:c9:58:3e:f2:e6:24:b1:a2:f9:71:3d:
d3:0b:f7:1a:6e:8d:02:fc:2f:27:cb:6a:3e:77:36:75:25:70:
ab:a3:4a:83:a6:b2:73:ee:75:1f:cd:5f:b3:78:16:19:12:55:
a0:f6:8e:c5:80:d3:16:63:7c:83:92:c2:46:77:c2:2d:8e:39:
22:db:d3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:17:02 2024 by rpki-client on console-fra.rpki-client.org