Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/7HwQ0o-IE4JdFZkCXwuH3K0p00o.roa
File: 7HwQ0o-IE4JdFZkCXwuH3K0p00o.roa (raw, json)
Hash identifier: 8sXEhmrxq8sR2yAta7kUZXVzndSjdzDsjxq5SEyEx9A=
Subject key identifier: EC:7C:10:D2:8F:88:13:82:5D:15:99:02:5F:0B:87:DC:AD:29:D3:4A
Certificate issuer: /CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Certificate serial: 018EF623CFE639C0F962A20808B87F9FAFEB
Authority key identifier: 5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/7HwQ0o-IE4JdFZkCXwuH3K0p00o.roa
Signing time: Fri 19 Apr 2024 11:35:25 +0000
ROA not before: Fri 19 Apr 2024 11:35:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56694
IP address blocks: 2a11:5183::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:23:cf:e6:39:c0:f9:62:a2:08:08:b8:7f:9f:af:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Validity
Not Before: Apr 19 11:35:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec7c10d28f8813825d1599025f0b87dcad29d34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:be:cb:4d:65:67:ce:f2:51:b5:95:23:77:72:
b6:e5:f2:b4:3c:be:64:a0:a1:44:a0:e2:eb:2b:05:
ca:a7:f9:63:a4:32:61:22:5c:02:2a:9a:ce:f2:61:
1f:ee:19:7d:51:97:e6:2c:b8:f3:d0:62:d6:4c:d0:
e5:f5:8c:13:aa:f9:d8:e0:8f:12:ad:6a:6d:0c:42:
37:a0:d7:0d:e6:cd:6d:0c:56:e3:62:4f:59:f9:a0:
fa:32:97:c8:c2:e1:57:60:de:a9:aa:71:31:56:39:
70:8c:c2:43:a6:9c:ec:d8:7e:37:da:6d:b3:ff:88:
2c:5b:36:7a:67:95:56:84:a4:0c:37:29:bc:13:75:
8a:8b:53:22:d3:fe:a6:64:80:a4:79:e7:f6:a4:b3:
d3:70:a7:2f:5b:f7:d1:e9:ad:00:91:25:75:49:7a:
cd:9d:e5:f4:8a:f5:37:ab:df:10:a2:a3:aa:ac:4f:
c8:ac:6d:08:21:1b:71:40:41:a7:be:ca:9a:c0:fc:
a5:0b:81:e7:60:7e:23:3d:85:1b:20:03:f5:a0:e3:
4d:de:7f:cf:f7:c3:5b:45:d5:89:c8:4a:ed:89:52:
d7:b5:37:ab:84:21:9d:30:57:fd:ee:a8:e9:94:e2:
01:ac:8d:80:d4:5d:d0:6e:c2:f5:76:39:c7:5a:07:
8d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7C:10:D2:8F:88:13:82:5D:15:99:02:5F:0B:87:DC:AD:29:D3:4A
X509v3 Authority Key Identifier:
keyid:5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/7HwQ0o-IE4JdFZkCXwuH3K0p00o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5183::/32
Signature Algorithm: sha256WithRSAEncryption
4c:0c:8c:ca:b7:b4:7a:a4:70:d0:92:57:08:1b:e9:06:b0:4b:
3b:b2:43:18:ee:dd:b3:04:17:e3:a5:57:51:51:b6:7f:46:e8:
50:81:26:ff:9c:37:fe:4e:20:0d:15:85:a8:11:8b:c0:ca:25:
04:b1:e7:ac:4d:38:24:2a:19:5a:fd:cd:a3:00:5b:59:39:f8:
f3:42:ab:74:b2:be:91:f2:f3:ca:59:de:40:b9:42:d9:c6:2a:
8e:bf:e6:80:2d:f8:2e:2f:d5:19:27:95:03:5b:fd:db:4e:e9:
3f:fa:8c:16:d5:70:bf:0a:fa:d4:4f:b6:ea:9c:36:87:0c:ff:
fc:23:99:7d:84:3b:2d:09:1f:60:e0:42:e3:10:ef:3b:c3:28:
29:1a:af:60:46:f7:e4:b2:ab:d1:86:3c:cb:0d:76:c8:fc:dd:
f6:79:4a:dc:64:27:b6:c3:77:23:dc:0d:4d:cb:7d:73:f1:3b:
ae:5c:7d:d2:07:41:12:05:e4:c1:f0:b7:a4:cd:34:61:5c:4d:
28:eb:1d:25:fa:b8:9f:68:f4:1a:58:5f:7d:45:f4:31:5b:43:
b1:3c:8e:05:38:27:da:e3:bc:ef:5f:76:8c:83:43:3c:62:28:
01:2c:ea:59:42:c2:ff:17:a7:86:6d:c9:ad:9b:16:b4:27:9b:
a1:49:90:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:10:58 2024 by rpki-client on console-ams.rpki-client.org