Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/7EqUTk9ybrIfeMEeD0wLwb0zIO4.roa
File: 7EqUTk9ybrIfeMEeD0wLwb0zIO4.roa (raw, json)
Hash identifier: k0CajAZ9SJ4lr/W6VJqy9YtDhC2z1DYqK6sfpePub10=
Subject key identifier: EC:4A:94:4E:4F:72:6E:B2:1F:78:C1:1E:0F:4C:0B:C1:BD:33:20:EE
Certificate issuer: /CN=68bf1c5a21c3825b8b86516a1a597121b54b3cc3
Certificate serial: 018CC4938EFEB68FE5EA14BF9B78A851DC87
Authority key identifier: 68:BF:1C:5A:21:C3:82:5B:8B:86:51:6A:1A:59:71:21:B5:4B:3C:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL8cWiHDgluLhlFqGllxIbVLPMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/7EqUTk9ybrIfeMEeD0wLwb0zIO4.roa
Signing time: Mon 01 Jan 2024 10:30:53 +0000
ROA not before: Mon 01 Jan 2024 10:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57288
IP address blocks: 176.97.8.0/21 maxlen: 21
2001:67c:1138::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL8cWiHDgluLhlFqGllxIbVLPMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8e:fe:b6:8f:e5:ea:14:bf:9b:78:a8:51:dc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bf1c5a21c3825b8b86516a1a597121b54b3cc3
Validity
Not Before: Jan 1 10:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec4a944e4f726eb21f78c11e0f4c0bc1bd3320ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:57:a2:32:1e:49:44:f7:68:38:7c:01:45:dd:
45:3f:c5:0d:d8:78:ed:ec:c5:d8:f0:2c:a2:55:b0:
a6:b0:1c:ba:da:8f:35:da:fb:62:69:65:5e:6f:db:
71:93:0a:a0:52:ab:7c:44:78:66:75:3a:3a:a7:04:
93:8f:62:69:53:7f:51:21:93:6f:a4:e6:45:19:1a:
c4:b6:15:44:79:0e:ce:c4:e8:39:d9:b6:a9:34:56:
1c:59:cc:71:f5:9c:28:f2:d6:2a:21:0d:20:71:94:
18:bb:b0:ab:a9:2e:b2:c1:6d:ee:35:c7:ea:30:62:
d8:8a:90:8d:fa:6e:4e:4e:ad:59:4f:4a:5e:4e:2c:
1e:89:90:98:54:ae:83:8d:5c:8c:20:c9:32:40:e6:
ef:87:e6:39:e2:41:14:39:2e:f9:77:dd:d6:19:a8:
07:68:45:37:29:38:15:5b:6b:57:dc:69:4b:5c:04:
c2:bf:4f:8b:ef:9b:b9:89:b7:76:4f:69:c6:8c:2e:
07:fe:9f:70:44:17:90:80:ad:93:a6:3b:4c:a7:4a:
bd:6a:76:bb:d6:59:fc:2f:d3:0c:0f:2c:4b:c6:3d:
81:68:b4:55:9a:a2:74:e6:33:4b:41:a9:f0:bd:01:
b2:bd:f3:7c:9e:0d:b9:e6:fe:55:5a:f3:3c:02:64:
46:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4A:94:4E:4F:72:6E:B2:1F:78:C1:1E:0F:4C:0B:C1:BD:33:20:EE
X509v3 Authority Key Identifier:
keyid:68:BF:1C:5A:21:C3:82:5B:8B:86:51:6A:1A:59:71:21:B5:4B:3C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL8cWiHDgluLhlFqGllxIbVLPMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/7EqUTk9ybrIfeMEeD0wLwb0zIO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.8.0/21
IPv6:
2001:67c:1138::/48
Signature Algorithm: sha256WithRSAEncryption
8a:20:dc:b6:6a:dd:cf:8d:dd:df:33:e0:71:fd:10:01:fc:d0:
55:fa:a9:97:2c:68:65:73:99:55:ea:5a:08:71:6e:c6:a7:bb:
2d:24:08:69:c2:91:37:44:d8:a4:1a:e2:90:bc:26:7c:48:d3:
6f:ef:06:3f:86:0e:dc:24:fb:e9:2b:ea:1f:a5:25:50:d5:27:
78:77:62:2e:47:12:1b:ee:23:2f:64:ad:16:30:6c:57:6d:f5:
23:a4:67:2a:a9:81:82:5f:40:ca:1f:d7:08:76:34:76:f0:bc:
8e:d9:16:d2:59:ce:12:d1:b8:19:c8:3e:a7:45:2d:f6:63:38:
d7:d0:d6:89:b9:bd:51:4b:fa:8f:0c:42:82:00:38:48:60:2c:
c6:50:ec:53:3e:b0:bd:a8:77:e3:d4:82:cb:02:30:48:39:23:
1a:c1:3c:e0:9e:90:43:63:a4:b5:7c:7c:a1:07:48:18:e0:a9:
d8:39:45:a8:fc:0a:9e:41:42:76:42:d4:47:2c:02:bb:65:81:
9e:5c:45:6c:ca:2d:3a:5f:fa:a2:a6:49:17:a6:8a:26:9b:23:
a7:38:f3:1d:29:f8:aa:a6:0b:01:81:c9:37:a3:64:c0:d7:b6:
31:a9:fd:94:a5:35:76:be:81:7b:4a:f0:12:2d:19:cc:0c:b7:
38:8b:86:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:56:20 2024 by rpki-client on console-fra.rpki-client.org