Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/7yM3JGL8mF62FSdFf0Yhco117a8.roa
File: 7yM3JGL8mF62FSdFf0Yhco117a8.roa (raw, json)
Hash identifier: k/iVk1qRaJ6AV9H44rOssQ7DHXlyroQDYlYb/SMYmmY=
Subject key identifier: EF:23:37:24:62:FC:98:5E:B6:15:27:45:7F:46:21:72:8D:75:ED:AF
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA29746A0B25CFB18A532C294919B10D
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/7yM3JGL8mF62FSdFf0Yhco117a8.roa
Signing time: Tue 02 Jan 2024 12:32:43 +0000
ROA not before: Tue 02 Jan 2024 12:32:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213021
IP address blocks: 2a0e:8f02:2010::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:74:6a:0b:25:cf:b1:8a:53:2c:29:49:19:b1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef23372462fc985eb61527457f4621728d75edaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1d:b5:85:3f:bc:45:5f:ee:36:49:26:a4:2d:
72:1e:42:b3:2f:f6:3d:a6:58:ab:cc:65:ed:19:bd:
6c:5e:18:e0:54:5d:80:86:53:d8:63:1e:12:15:42:
5c:4d:fe:0f:52:54:98:bc:19:1b:18:c9:fd:37:10:
79:59:0b:69:fb:fb:05:bb:01:ec:c3:68:0c:33:fe:
65:09:2f:77:bb:18:c9:3b:1b:40:d6:1c:38:9c:2a:
13:40:e5:c8:c4:5a:b4:e3:44:a9:b3:8c:cc:de:79:
1a:dc:4a:ee:e8:8f:a6:5c:e9:61:e3:3b:fe:37:bb:
2e:9a:d2:03:64:73:37:0c:4c:51:f4:48:e7:70:a3:
14:04:21:a0:3f:2b:59:52:92:47:6b:41:89:68:36:
1e:3f:52:40:5b:39:cd:7a:a1:96:a3:4b:0d:e1:9a:
d8:9f:ac:61:ac:17:07:9a:78:1a:21:15:5d:94:fc:
92:4e:42:78:2d:33:8d:ba:98:17:13:2f:5e:e6:5d:
e0:19:db:d6:ca:42:c2:ef:24:a5:9f:c0:52:77:3d:
ec:40:cf:6d:30:c1:e3:8b:9c:88:5b:88:9d:b2:23:
8e:98:a9:b0:ad:ad:9c:17:ca:f1:4f:42:1d:2e:1e:
a9:5d:6c:17:48:7c:88:ac:b6:bf:4a:8d:62:0b:68:
5d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:23:37:24:62:FC:98:5E:B6:15:27:45:7F:46:21:72:8D:75:ED:AF
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/7yM3JGL8mF62FSdFf0Yhco117a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2010::/44
Signature Algorithm: sha256WithRSAEncryption
a8:60:b7:d7:56:ad:37:0f:44:50:8a:5b:a8:02:10:84:7a:28:
66:6b:ec:d1:1b:52:4b:87:97:6e:cb:0d:81:4d:c0:fc:1d:d6:
cf:e7:54:01:02:34:0c:01:35:48:3f:15:59:35:d4:89:09:d1:
36:ca:1e:52:bc:e7:a7:b8:ab:18:14:5b:06:7f:45:86:be:fa:
c5:c0:20:89:92:16:22:3a:4d:35:b1:2e:ed:45:73:87:ed:a2:
b2:cc:4f:ed:8f:7b:91:5e:44:24:3e:86:db:89:26:d1:e6:27:
d0:43:29:36:89:f6:75:c3:5e:ab:39:2a:d2:68:d2:a4:f1:ba:
c9:2b:1b:0b:4b:c2:c0:e2:7e:f1:ee:c0:2b:3e:f6:48:fb:1d:
d0:c7:d4:eb:99:b1:5c:46:f5:66:f0:6a:c1:19:d0:91:65:19:
f7:11:31:6b:66:4c:5a:13:52:9c:e4:fe:e2:59:9e:65:60:a4:
5c:e2:6f:b9:3f:56:f7:05:f3:c9:86:43:5e:ac:ae:bd:90:a8:
3b:a8:40:a3:0c:2c:30:0c:67:fc:cc:ad:8a:c9:09:44:88:3e:
7d:60:ec:78:f1:01:10:4a:3a:21:9f:99:e3:90:cf:27:a1:8a:
c4:52:98:03:cf:25:d5:33:cd:f6:4e:10:46:98:1b:81:27:a4:
a7:4d:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 19:01:56 2024 by rpki-client on console-fra.rpki-client.org