Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/9K7EpGA0Gxi4DaJwrPbkclvPXXc.roa
File: 9K7EpGA0Gxi4DaJwrPbkclvPXXc.roa (raw, json)
Hash identifier: pjl0QNQvGwL7Q0288U5htiT+OODw4NelIaUAquM2uw8=
Subject key identifier: F4:AE:C4:A4:60:34:1B:18:B8:0D:A2:70:AC:F6:E4:72:5B:CF:5D:77
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA2972D4A0BC508FC9D370A04B7ABA71
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/9K7EpGA0Gxi4DaJwrPbkclvPXXc.roa
Signing time: Tue 02 Jan 2024 12:32:43 +0000
ROA not before: Tue 02 Jan 2024 12:32:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212577
IP address blocks: 2a0e:8f02:f02a::/48 maxlen: 48
2a0e:8f02:2070::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:72:d4:a0:bc:50:8f:c9:d3:70:a0:4b:7a:ba:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4aec4a460341b18b80da270acf6e4725bcf5d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:f6:ef:e1:77:36:54:d5:33:3c:72:c1:2e:
73:b1:3a:54:ea:92:9e:ec:62:c8:4b:aa:a7:d6:89:
be:14:ab:5e:96:f8:20:78:16:55:65:26:4b:47:ea:
62:fc:ae:d4:98:59:9b:ee:dd:c3:e9:05:30:c9:62:
1d:c1:ee:84:fc:06:09:24:20:82:ff:fa:7d:52:bc:
37:8f:07:0b:db:aa:17:21:09:a7:9e:7b:ce:c4:f4:
f6:89:db:31:12:b2:7d:6f:24:be:67:2b:33:db:bb:
dd:9c:3e:a5:e0:17:6a:7c:5d:5f:d4:74:8b:35:bf:
8f:23:50:69:97:e6:dd:76:d1:42:f8:2d:bb:6d:c2:
c3:4d:4b:dc:89:93:2e:92:36:6e:30:ad:2a:ea:30:
9e:da:10:05:fb:c8:72:4d:80:8d:bb:5a:47:57:85:
9b:1f:35:93:dd:e5:f5:ef:2d:ef:9a:2a:8a:97:89:
ba:e9:5d:1e:70:0c:6b:ea:a9:9d:8d:b8:8f:3f:d7:
75:a2:a3:29:42:2e:af:1b:cb:46:08:2f:09:b7:a5:
8c:fa:fd:38:df:9b:a7:d7:b7:72:1b:2f:14:04:30:
a8:0a:8a:cf:ab:de:c2:42:b9:38:91:a9:4b:0a:a3:
f9:a2:1d:3e:f2:48:99:c5:4c:59:a4:b5:b5:27:13:
42:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AE:C4:A4:60:34:1B:18:B8:0D:A2:70:AC:F6:E4:72:5B:CF:5D:77
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/9K7EpGA0Gxi4DaJwrPbkclvPXXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2070::/44
2a0e:8f02:f02a::/48
Signature Algorithm: sha256WithRSAEncryption
23:ec:91:53:34:64:63:05:0f:66:02:17:b7:35:9c:4c:5b:ce:
c0:2e:38:04:5e:ef:e8:1c:a2:0c:97:b9:be:3f:c3:0f:09:e8:
88:d0:14:d8:24:7d:f1:f5:35:76:c9:55:17:b4:f4:fe:ce:a3:
24:b0:82:8b:3e:01:f9:90:c2:c6:62:cc:7d:92:cf:2d:30:b7:
2b:1c:f6:41:b4:ec:a3:80:75:bd:6c:f0:e1:9c:d4:cb:fb:9b:
f4:df:56:7d:eb:0f:10:7c:9b:3c:48:a3:3f:c7:4c:3b:5f:26:
d3:7d:c0:76:e1:28:e5:7c:d0:40:39:08:65:ee:35:da:37:84:
d8:e0:c3:59:cf:d0:be:6c:2d:d9:3d:9f:44:26:4c:8c:1d:79:
d7:8e:3f:b0:19:3b:cb:66:14:3c:1c:57:3e:cc:b9:1d:f3:44:
ba:9e:d4:c4:dd:bb:c8:67:e6:ae:14:81:b1:58:b3:1f:cf:68:
e8:f6:f7:fc:74:f8:22:00:98:b4:bf:99:83:25:36:eb:43:45:
a4:6e:65:b6:54:b4:a5:b4:c6:82:62:5b:f6:4a:dc:b0:85:3e:
e9:0f:f2:ac:01:0b:c8:67:a9:aa:8a:90:11:53:a6:44:4d:2b:
8d:ad:e0:e5:3d:df:44:64:30:ba:6a:b2:a1:f9:30:7f:70:8e:
f9:5d:c5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 22:31:55 2024 by rpki-client on console-fra.rpki-client.org