Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/EeOk1SC5XOGdtq-qOI-5OjuZDPQ.roa
File: EeOk1SC5XOGdtq-qOI-5OjuZDPQ.roa (raw, json)
Hash identifier: RjHkHcT5YE0zOLIrm3D6cTrxNF8Wjof05Yta7k/Vsf4=
Subject key identifier: 11:E3:A4:D5:20:B9:5C:E1:9D:B6:AF:AA:38:8F:B9:3A:3B:99:0C:F4
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 018CC8DD9417C973386733468A3C4E7E5FEA
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/EeOk1SC5XOGdtq-qOI-5OjuZDPQ.roa
Signing time: Tue 02 Jan 2024 06:30:13 +0000
ROA not before: Tue 02 Jan 2024 06:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40811
IP address blocks: 2a0c:6600:5000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:94:17:c9:73:38:67:33:46:8a:3c:4e:7e:5f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Jan 2 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11e3a4d520b95ce19db6afaa388fb93a3b990cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:70:4b:fe:71:fc:8d:be:7d:3b:39:e2:aa:
80:84:0d:5d:14:33:3f:d3:63:45:8a:a7:03:e7:82:
2b:59:53:cc:3d:e9:ad:16:db:9a:bc:76:8f:70:a4:
62:91:0f:b5:13:17:66:51:6c:72:7b:ab:61:bb:11:
b6:31:c1:59:d6:54:f8:84:e8:20:c8:ef:dc:25:7c:
d7:07:81:6f:23:f3:47:98:8f:e1:6f:c9:46:09:12:
16:77:b9:0c:7a:e6:cb:dc:e8:4f:41:2d:9d:3f:19:
c1:35:37:84:cb:0c:05:55:35:4a:ee:d2:59:bb:ab:
47:d8:d0:e1:b0:b7:2a:e7:8c:b3:28:e8:77:b0:f0:
8a:ac:71:8d:c2:b1:3d:02:e4:d3:15:5d:cf:0c:4a:
93:ea:f1:d1:4a:77:f0:e9:03:d1:ac:ce:32:04:d9:
95:2f:c3:d6:2b:2a:ac:1c:58:29:98:83:8c:1d:07:
38:c1:09:dc:04:42:59:0e:f6:db:c1:37:e7:ad:b0:
2f:0b:3a:40:48:30:35:b2:8b:73:01:78:20:f0:67:
0e:59:9a:99:bc:1a:20:60:34:1a:6d:87:83:76:89:
45:a5:c4:e6:c9:aa:39:41:9f:41:4e:39:4c:a0:9d:
59:7c:14:ba:72:c0:db:40:ea:fa:96:4e:b4:16:58:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E3:A4:D5:20:B9:5C:E1:9D:B6:AF:AA:38:8F:B9:3A:3B:99:0C:F4
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/EeOk1SC5XOGdtq-qOI-5OjuZDPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6600:5000::/48
Signature Algorithm: sha256WithRSAEncryption
96:a3:33:4d:ec:ed:7b:fd:a4:20:b3:77:36:8c:ff:96:f2:b9:
03:b8:35:65:31:c8:f3:27:a1:53:42:80:6d:4e:0b:da:7c:88:
97:26:51:a0:d6:46:a4:13:76:1c:de:9c:10:e8:c5:6b:65:94:
21:1e:bc:4b:5a:3e:0b:de:50:61:97:6b:8a:d4:91:bf:63:d2:
64:1d:70:7b:e7:f9:cc:b4:0e:a0:d4:5d:b8:c0:81:5f:ee:ab:
fa:01:eb:eb:d4:ef:31:44:91:77:aa:bf:2f:1b:6a:b6:f7:3a:
5f:96:65:38:e8:41:33:00:6a:27:6e:1f:18:a5:c8:d5:b3:7b:
4f:93:18:30:93:7f:ef:20:cd:3d:04:3f:4c:0a:0e:1d:77:48:
1b:ef:b9:af:db:26:b5:99:e4:4b:d6:bc:93:9d:c7:22:12:97:
75:44:4a:1c:5a:59:39:67:36:f2:60:bf:f4:cd:ee:93:9e:07:
a6:30:9b:70:05:65:33:3d:67:3a:5f:fb:8c:95:63:62:7b:d2:
71:18:cf:2c:69:c6:da:b3:3d:e8:b3:89:dd:ac:2c:35:9c:f9:
9f:43:d8:f4:1e:a2:83:1a:76:96:49:a1:3d:ce:be:ed:aa:db:
09:aa:d8:dc:f5:d5:6f:dc:26:29:ef:cf:3f:de:f9:32:ce:56:
cb:88:bb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:55:39 2024 by rpki-client on console-fra.rpki-client.org