Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/e7dWBFEMxj60axpTcVrMOlNlwFw.roa
File: e7dWBFEMxj60axpTcVrMOlNlwFw.roa (raw, json)
Hash identifier: ewtF4ej09yKcbBV1hH3zsGfiAH23LU5prH7gbUJMggQ=
Subject key identifier: 7B:B7:56:04:51:0C:C6:3E:B4:6B:1A:53:71:5A:CC:3A:53:65:C0:5C
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018E2D8C2D7E10278882B1B5534F4CF822A7
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/e7dWBFEMxj60axpTcVrMOlNlwFw.roa
Signing time: Mon 11 Mar 2024 12:45:45 +0000
ROA not before: Mon 11 Mar 2024 12:45:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215386
IP address blocks: 2a0e:8f02:f069::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:8c:2d:7e:10:27:88:82:b1:b5:53:4f:4c:f8:22:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Mar 11 12:45:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bb75604510cc63eb46b1a53715acc3a5365c05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:6c:f3:2d:da:8e:4e:fc:8c:85:89:b7:8f:
cc:bb:29:ee:09:b5:ff:7b:d4:9e:ab:c7:4a:88:34:
50:11:e9:d0:61:4b:1f:d9:28:90:5a:5b:4b:43:90:
c3:8c:b1:e3:0f:74:ef:b6:57:c0:96:b4:d8:26:d6:
a8:ec:42:c8:11:c3:d5:db:d0:ed:bc:64:3b:d9:66:
ca:47:4a:4d:a6:a4:89:e7:8c:f7:f8:f0:1c:f8:cd:
a9:e1:04:a2:7b:64:d9:dc:7e:3b:54:04:35:dc:64:
7f:9e:7e:1d:79:e3:50:10:c0:e9:3f:18:36:02:b0:
f3:76:87:74:9f:0c:d8:26:22:20:3b:bc:87:35:03:
86:03:21:c1:29:79:da:dd:15:2e:0f:2d:3a:38:b4:
d3:34:1c:72:f2:4f:63:6e:10:ce:db:3c:5a:4b:5e:
7e:ba:5c:54:f3:9a:42:99:72:76:57:77:ee:32:45:
31:c2:c4:b7:ea:2a:bf:76:cc:0e:61:4d:23:1d:9a:
48:d4:98:6f:8d:48:38:52:58:28:44:b0:7c:7b:53:
6c:41:a4:e6:b0:fc:c0:f3:df:27:d9:bd:99:64:ac:
69:dc:da:2e:3f:e2:2f:29:85:29:db:be:9c:4d:b7:
ce:ef:8f:eb:fe:47:59:ae:56:d0:37:93:12:09:77:
a5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B7:56:04:51:0C:C6:3E:B4:6B:1A:53:71:5A:CC:3A:53:65:C0:5C
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/e7dWBFEMxj60axpTcVrMOlNlwFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f069::/48
Signature Algorithm: sha256WithRSAEncryption
35:54:6f:ee:12:ab:7b:4f:02:92:97:45:35:37:fe:c7:b9:cd:
c4:eb:9e:2f:d5:c2:c3:3c:cc:ca:8e:b2:6a:1b:e9:c9:1f:d3:
55:b8:f3:64:21:1b:78:ee:be:e1:36:b5:35:f3:7b:69:18:8b:
2a:ae:97:a8:1f:2d:0f:27:d9:23:35:a0:2e:d6:f8:bb:4d:12:
21:c3:48:24:d2:82:48:01:85:31:bd:5d:05:51:33:a0:a6:80:
7f:55:18:12:84:60:c3:bd:a1:2d:ad:b7:8c:55:2a:d0:d8:6c:
3c:60:b6:4e:31:5e:ab:1a:e1:2f:64:36:ac:86:1d:d3:fb:21:
68:7d:72:58:f9:12:1e:6e:b2:12:a3:64:5a:16:6c:4c:41:34:
ab:4e:90:4a:65:41:d4:53:3e:6a:4f:cc:13:4b:d7:32:8a:dd:
8d:fe:62:f2:fb:81:e3:c1:9b:cd:d2:f4:bc:66:36:de:b8:f0:
27:37:fe:a0:e2:6e:76:4e:bc:5c:cd:4f:04:cb:68:17:0b:e7:
02:e4:78:1f:27:4d:20:e7:87:a0:ac:78:5a:84:76:49:01:6f:
a4:f4:1d:f4:1c:3d:4f:2e:3f:4e:8d:38:4b:71:b5:ec:21:c3:
c4:37:13:56:3c:42:a2:bc:69:af:48:c9:f6:90:96:56:77:17:
13:d8:63:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 16:55:18 2024 by rpki-client on console-ams.rpki-client.org