Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/7nyqPtYoHXMWuhuH0xJUbFGWGgg.roa
File: 7nyqPtYoHXMWuhuH0xJUbFGWGgg.roa (raw, json)
Hash identifier: 2CiqNvbHTLLRuoEDyU+kgv+cV9Gy71Fh4kEypMiMI+4=
Subject key identifier: EE:7C:AA:3E:D6:28:1D:73:16:BA:1B:87:D3:12:54:6C:51:96:1A:08
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 018CC26D2C74A707F3F00B901D8FD5D1EC54
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/7nyqPtYoHXMWuhuH0xJUbFGWGgg.roa
Signing time: Mon 01 Jan 2024 00:29:43 +0000
ROA not before: Mon 01 Jan 2024 00:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2a05:1500:910::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2c:74:a7:07:f3:f0:0b:90:1d:8f:d5:d1:ec:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jan 1 00:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee7caa3ed6281d7316ba1b87d312546c51961a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:63:04:21:11:91:a1:a0:97:0d:1c:6b:7c:2a:
b9:ff:8c:7c:46:86:16:35:a3:d0:27:db:45:b5:13:
5a:ff:27:31:ca:54:e7:e1:a7:65:9b:47:9d:2d:57:
4b:74:ea:e7:be:22:d3:0e:c8:f9:6f:14:72:ed:ef:
0d:5b:12:47:b6:d4:1a:c8:c6:bd:da:f5:a3:91:6a:
3b:2c:ac:c9:e6:de:3e:b9:06:55:89:3d:4e:42:aa:
c5:9c:e7:4f:15:d4:b0:38:b6:c5:97:51:e6:49:3a:
c6:79:a8:fd:d4:5e:5c:a3:1f:46:be:8a:c3:b0:82:
f3:83:2e:e9:76:ef:ba:ec:ba:fd:ca:94:eb:52:87:
26:f4:34:d2:ad:eb:ed:ba:6b:ad:2c:48:90:cf:85:
77:83:07:00:19:e2:8e:c7:62:0d:5b:d2:c5:98:03:
ed:d2:56:6e:82:0f:64:46:f1:06:82:40:55:5a:7f:
3d:4c:01:21:6d:f3:cf:6e:52:c1:46:6a:af:30:80:
73:79:55:73:66:be:4a:d4:5e:46:e7:83:2d:af:da:
45:35:c7:5c:4e:ef:59:3f:92:4a:b0:39:d1:7e:6d:
21:87:67:2a:48:89:f2:ea:b2:c3:3d:eb:d5:ba:0c:
88:55:57:fb:b2:c0:38:66:31:b8:ca:36:d6:ae:5b:
76:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7C:AA:3E:D6:28:1D:73:16:BA:1B:87:D3:12:54:6C:51:96:1A:08
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/7nyqPtYoHXMWuhuH0xJUbFGWGgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1500:910::/44
Signature Algorithm: sha256WithRSAEncryption
39:50:78:ec:1b:b3:4c:e6:a5:c3:a5:f3:7e:c3:35:d7:6b:f4:
c2:1e:a3:ed:c2:1b:1f:07:7c:9a:dc:c1:61:2c:b6:2a:f7:fa:
5f:ae:4a:4f:b9:33:0f:10:22:5d:9a:53:92:6b:2b:1a:1f:71:
a9:56:b5:7f:aa:d9:d5:97:9b:7d:0c:aa:59:ce:b9:fb:ea:66:
21:6a:19:d0:77:82:36:01:d3:77:0f:cf:5b:2a:a3:a9:31:ce:
e3:e9:31:cd:49:b6:a3:d6:13:d9:c6:19:2b:ff:75:a8:b3:e9:
83:7b:30:b8:53:36:2f:c9:5c:60:51:aa:e3:e5:fb:1b:bb:a9:
12:9f:f4:61:19:f6:60:f4:65:fc:cf:6e:ad:50:d8:08:3d:75:
87:3d:0f:ed:8c:e2:6a:d5:19:84:41:be:4a:43:35:67:82:dc:
62:7a:1c:8a:0d:fc:e0:21:51:81:b3:95:a1:56:40:41:34:ed:
c6:c2:9a:4c:c9:05:55:cb:ef:18:44:d3:4a:11:95:b2:ee:5b:
4d:43:f3:5b:97:0d:35:f8:4d:18:c2:01:3e:15:3a:9b:d6:75:
de:8d:36:c1:94:67:05:48:69:d0:36:db:44:84:61:67:8d:85:
12:9a:dc:10:79:2c:6c:86:4c:c0:fb:f3:7f:11:fa:2e:63:29:
e4:e9:28:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:40:15 2024 by rpki-client on console-fra.rpki-client.org