Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Ff4deV3fpPByG-Vf0xYsIgxWbwQ.roa
File: Ff4deV3fpPByG-Vf0xYsIgxWbwQ.roa (raw, json)
Hash identifier: E1jCboVp1BPRzbJD+cuqHS0EiDDo2u60phPS7xQlY8U=
Subject key identifier: 15:FE:1D:79:5D:DF:A4:F0:72:1B:E5:5F:D3:16:2C:22:0C:56:6F:04
Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial: 018CC4255A7E017856231ABDFAFB3A568BF3
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Ff4deV3fpPByG-Vf0xYsIgxWbwQ.roa
Signing time: Mon 01 Jan 2024 08:30:31 +0000
ROA not before: Mon 01 Jan 2024 08:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41887
IP address blocks: 2a04:ab80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5a:7e:01:78:56:23:1a:bd:fa:fb:3a:56:8b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15fe1d795ddfa4f0721be55fd3162c220c566f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:11:5b:72:9f:ba:be:03:4d:85:c4:36:7e:67:
0d:c5:7b:04:69:42:37:74:ac:3f:98:2e:61:d3:ea:
a0:65:e6:e3:da:a9:a6:02:3d:c0:a0:97:9a:59:f9:
36:f1:97:16:3f:a9:75:d3:4c:64:f2:d9:95:4c:33:
34:d7:ff:66:cc:94:f2:c3:64:c0:ec:7c:dd:b4:84:
09:b7:55:64:ac:fe:4c:6e:19:d5:50:f2:55:25:60:
c4:c5:34:53:6d:f1:b8:70:98:8c:8d:04:c9:92:65:
de:50:69:d7:a3:20:5c:6a:d6:dc:20:ce:35:35:0b:
33:2f:4b:00:b2:df:74:19:15:0a:ea:59:4b:dd:5e:
f2:78:5a:f4:57:a0:a1:6a:00:c3:b0:f1:09:8a:a8:
95:0e:7d:d7:8f:ab:13:d8:b1:bb:8a:1d:79:47:39:
d1:70:dc:71:35:73:30:8b:81:55:29:3e:c6:45:0b:
cf:19:64:8a:9b:6e:ca:98:b9:36:d8:3b:7f:b5:cd:
0c:ff:ce:b7:18:fb:2d:8b:df:d4:97:60:79:50:08:
ad:b6:96:04:db:8a:27:d5:72:6f:ab:41:2c:80:64:
78:81:e4:9f:80:a0:10:9d:9e:59:35:54:73:0f:13:
85:a1:5f:a6:24:50:b1:88:8c:39:fc:8c:59:10:13:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FE:1D:79:5D:DF:A4:F0:72:1B:E5:5F:D3:16:2C:22:0C:56:6F:04
X509v3 Authority Key Identifier:
keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Ff4deV3fpPByG-Vf0xYsIgxWbwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ab80::/29
Signature Algorithm: sha256WithRSAEncryption
2f:52:35:25:99:2d:11:66:fa:9c:ce:d0:b4:ef:e5:7c:e7:c8:
9d:bf:2b:2b:01:d4:91:77:94:76:ef:31:c7:7b:ad:08:c2:87:
6e:f9:98:0d:5c:17:e7:04:d5:03:03:47:4b:4d:22:cb:71:5f:
d1:32:67:9b:be:42:40:8b:85:2f:ae:58:f4:19:4f:07:da:3a:
a4:58:28:84:de:46:3e:75:5d:76:f8:80:64:26:ce:eb:f0:06:
48:43:d0:72:c9:1f:37:df:93:05:78:0b:63:70:ab:5b:00:58:
f6:e2:47:42:16:06:49:cc:97:e7:a7:e2:5f:d6:81:1b:a7:9d:
fd:ed:b1:1b:54:ab:a4:28:8d:52:24:b6:11:4e:0f:50:19:cd:
05:b9:54:00:c7:76:b1:8f:a1:c2:7c:f7:0e:3f:e7:7d:a4:d2:
44:ed:46:4a:74:94:bc:00:5c:2d:16:2f:d4:fd:1a:89:03:33:
3f:74:a7:81:e9:b9:11:64:dd:b4:8f:8d:44:1b:0f:28:cb:3a:
15:94:c1:e0:b9:2f:c7:41:ee:88:0b:5f:66:37:c5:61:19:54:
8d:14:f8:e9:82:e2:6c:82:ce:ca:c7:f7:9d:fa:c1:68:25:45:
12:d6:69:71:f8:28:3e:ed:36:8c:d2:f3:96:01:68:91:f5:91:
39:d1:04:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:49:29 2024 by rpki-client on console-fra.rpki-client.org