Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/7FEjOXgzuUi6i23snIKy56SZCAY.roa
File: 7FEjOXgzuUi6i23snIKy56SZCAY.roa (raw, json)
Hash identifier: KkeJ1drFs6gXsHEusfcuV89xxrM3472E/FUUp12Oby0=
Subject key identifier: EC:51:23:39:78:33:B9:48:BA:8B:6D:EC:9C:82:B2:E7:A4:99:08:06
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018F804F3655F6BA0C98419716442C67B2C8
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/7FEjOXgzuUi6i23snIKy56SZCAY.roa
Signing time: Thu 16 May 2024 07:30:25 +0000
ROA not before: Thu 16 May 2024 07:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214930
IP address blocks: 2a0e:8f02:f06f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:4f:36:55:f6:ba:0c:98:41:97:16:44:2c:67:b2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: May 16 07:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec5123397833b948ba8b6dec9c82b2e7a4990806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c2:4b:e9:7d:41:01:08:dd:ac:ed:15:ec:2d:
5e:0f:62:99:bc:75:2b:df:f1:2e:40:d4:36:7c:c9:
34:00:a3:21:44:97:65:d6:75:53:c2:dc:c5:a5:71:
7b:1b:49:7d:96:ba:ca:cb:e0:39:69:28:6e:b8:95:
0f:f6:3b:7e:f3:63:28:78:a8:63:63:bb:30:1c:0f:
81:a6:7f:4d:14:44:44:a4:34:c9:5b:a1:88:01:79:
8c:81:9f:62:2e:36:9e:44:b7:d4:da:45:6a:45:06:
22:f4:07:04:00:8b:58:ce:93:a5:6e:9c:d3:4e:59:
d3:bf:52:2c:93:0a:b2:8d:12:84:f3:75:be:25:7f:
05:10:52:ed:8e:93:05:61:07:65:58:07:66:68:4e:
d6:4f:b8:ef:07:f6:e5:a7:2b:2d:af:88:5a:31:ad:
2c:2b:7e:54:f0:55:e4:e3:ba:98:9f:e0:3a:1e:e1:
d3:a3:ee:a4:a2:ed:d8:b8:f1:9b:ac:3d:c2:ac:16:
f5:c7:ed:b2:e2:42:b6:27:cf:47:c0:d9:5e:24:9a:
b9:76:bc:cc:db:c1:3a:3e:a7:08:17:64:50:89:db:
bc:40:3b:fb:2f:f3:b1:d9:1d:ae:55:bc:09:0b:82:
ab:00:be:b8:87:55:28:b9:16:c4:f2:45:52:f2:8e:
78:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:51:23:39:78:33:B9:48:BA:8B:6D:EC:9C:82:B2:E7:A4:99:08:06
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/7FEjOXgzuUi6i23snIKy56SZCAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f06f::/48
Signature Algorithm: sha256WithRSAEncryption
9b:57:8a:fd:86:e8:1b:07:51:7f:68:05:71:77:3a:00:fe:ea:
e3:01:6e:7e:4a:7d:d6:15:03:14:48:99:3f:24:1a:3e:fe:e2:
10:26:fe:cb:82:ea:4d:6b:5f:44:fa:84:c7:bd:69:7b:1f:ee:
45:06:ac:45:1c:8f:31:55:81:ae:b0:1d:f0:f5:10:89:34:aa:
ae:00:89:ec:2b:5f:e5:10:f2:33:07:d0:ac:3b:53:2d:91:a0:
97:f7:9b:d6:be:81:bc:e7:f8:ac:54:f0:54:f3:ed:82:03:89:
0d:58:e7:51:fc:b8:de:20:b2:d7:65:86:45:fe:f6:b4:fd:5f:
1f:6d:90:64:bf:5c:a2:9e:8f:c0:81:8b:1d:88:59:d5:28:74:
ac:93:26:38:ea:d1:39:31:5e:05:bd:bd:32:8e:ad:97:c1:19:
f0:e7:21:22:0c:ec:10:38:46:0f:d0:14:89:28:f8:3a:74:85:
dd:bd:04:31:ce:60:f4:60:e5:80:de:d2:5a:ce:00:ff:05:b4:
85:02:d0:6e:ae:27:24:d5:48:bd:72:d9:5f:bd:cf:35:9d:d8:
64:0a:92:7e:fc:3d:88:70:dc:b2:74:b8:4f:a8:49:3a:00:7a:
5c:35:9f:69:4c:06:f2:0d:25:95:84:0f:ad:e5:ec:1b:10:0e:
fe:8f:1d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:38:18 2024 by rpki-client on console-fra.rpki-client.org