Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/e7oxwpFKrVdBIRmcQnmR5ALykSk.roa
File: e7oxwpFKrVdBIRmcQnmR5ALykSk.roa (raw, json)
Hash identifier: sVhs4W8WGv05cSXYTqNTcVFHy1afOIT0s8s3oq/2oWA=
Subject key identifier: 7B:BA:31:C2:91:4A:AD:57:41:21:19:9C:42:79:91:E4:02:F2:91:29
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA296C607AFE6444FA39DB85EC7C6A37
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/e7oxwpFKrVdBIRmcQnmR5ALykSk.roa
Signing time: Tue 02 Jan 2024 12:32:41 +0000
ROA not before: Tue 02 Jan 2024 12:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212154
IP address blocks: 2a0e:8f02:f047::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:6c:60:7a:fe:64:44:fa:39:db:85:ec:7c:6a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bba31c2914aad574121199c427991e402f29129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:60:62:3c:8d:80:d7:90:17:68:cc:44:25:0b:
06:5d:ff:32:d1:5f:35:c9:49:cf:4d:2d:7f:d9:f8:
ed:fa:2a:37:14:fa:f3:f1:d6:0e:20:e7:c1:0a:3c:
4b:39:36:6d:dc:1a:e3:0a:5a:76:52:61:7e:45:e8:
9b:ba:f5:1e:cf:69:05:c5:3b:06:1a:dd:ac:84:de:
ec:88:9f:70:cc:ad:c8:31:23:30:37:75:95:01:53:
e2:26:f1:4c:d9:85:95:f4:87:aa:8f:b0:b3:bf:34:
12:2c:86:1c:aa:06:d6:03:37:05:e9:ca:d1:8f:d2:
21:04:56:d1:5f:9a:45:12:cf:b9:e0:95:ee:d3:e3:
d8:5c:e6:50:b2:87:fb:e4:f7:7f:06:b6:7d:04:f3:
d5:20:db:6d:e6:85:e1:25:29:d6:44:a4:ba:4a:b4:
8b:3d:b2:d4:1b:f0:1e:76:28:e5:f9:d1:c6:28:62:
cc:45:13:46:f4:e4:f0:fd:28:5b:d6:a0:77:77:0d:
80:97:34:dc:38:1f:ee:9e:49:ab:29:4f:e1:cb:ab:
41:f5:6e:6a:bc:a2:6e:e7:47:47:ef:be:66:78:5a:
a0:cd:47:24:13:33:87:38:b2:37:9a:c5:b8:30:c2:
e2:42:1b:75:57:00:44:95:8d:de:af:f2:7e:26:65:
d7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BA:31:C2:91:4A:AD:57:41:21:19:9C:42:79:91:E4:02:F2:91:29
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/e7oxwpFKrVdBIRmcQnmR5ALykSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f047::/48
Signature Algorithm: sha256WithRSAEncryption
33:cb:5c:63:8b:3d:38:f9:44:59:5d:03:c1:4d:4e:e2:a7:8d:
67:fc:f7:22:9e:d4:ba:36:56:0f:bd:6e:ec:af:17:70:c1:eb:
ef:1f:96:c4:a1:87:34:6b:26:79:b9:67:00:50:51:f3:3c:48:
90:bf:8e:10:81:04:9c:61:1f:64:27:d2:31:db:5f:07:a7:fc:
1e:a5:6d:ff:9d:15:94:b8:14:b3:d9:35:34:d1:01:d1:ac:b9:
4f:80:5d:88:8e:73:71:64:8d:80:92:5b:9d:b1:15:a6:57:a9:
a9:22:3c:59:ff:c1:ae:e2:32:7d:a1:1c:c4:6b:b3:9e:26:f3:
a6:ca:ae:7a:a7:ed:5c:13:98:98:a0:8f:f4:fc:31:73:69:08:
93:0d:91:70:5a:c2:20:ae:d7:36:a4:8f:f2:b1:8e:a7:3f:91:
7b:d3:39:ca:89:6d:3c:0d:2b:f9:72:e5:5f:31:6c:72:1a:5d:
d7:0c:ce:73:0a:de:d0:76:c9:33:c8:da:32:ee:ea:75:3b:63:
51:50:03:a5:f4:15:ae:77:16:92:b5:5e:72:f1:23:33:ea:d8:
e2:95:c4:9d:de:d6:06:7a:50:c7:a9:d2:6d:65:42:62:2b:d8:
1f:4d:69:8a:9c:f2:e4:54:0e:86:8f:f0:58:1c:c6:e0:31:1e:
9a:9e:6a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 13:32:07 2024 by rpki-client on console-ams.rpki-client.org