Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/e26UcCbEll1RgT1JDUnEKSfRhHw.roa
File: e26UcCbEll1RgT1JDUnEKSfRhHw.roa (raw, json)
Hash identifier: oaT2Ku/SB21hi7dI3fRD+m+mKxi/G3r6lHfKWtylvDU=
Subject key identifier: 7B:6E:94:70:26:C4:96:5D:51:81:3D:49:0D:49:C4:29:27:D1:84:7C
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 01904FF3C938C575968D83C6C5687D90F9F8
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/e26UcCbEll1RgT1JDUnEKSfRhHw.roa
Signing time: Tue 25 Jun 2024 15:11:35 +0000
ROA not before: Tue 25 Jun 2024 15:11:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44070
IP address blocks: 78.41.8.0/21 maxlen: 21
89.31.8.0/21 maxlen: 21
2a10:c540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:f3:c9:38:c5:75:96:8d:83:c6:c5:68:7d:90:f9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jun 25 15:11:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b6e947026c4965d51813d490d49c42927d1847c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e3:96:59:93:74:79:8d:f4:5c:a2:52:72:86:
a4:6b:4f:6a:16:20:98:72:91:05:eb:1b:c8:35:07:
84:69:d5:ce:7e:6a:83:23:a7:0b:0c:3e:97:7f:49:
98:67:e8:51:be:57:11:3c:50:b9:c6:52:53:f4:29:
96:aa:a3:66:02:4c:5c:9f:32:fe:a4:cc:63:1f:43:
72:ca:cc:5c:3a:ac:1c:4d:89:b9:f1:50:50:2d:92:
b8:8c:81:d8:4e:a2:d3:08:df:e5:30:ae:9b:86:0e:
ec:cb:ef:14:68:42:5a:08:ad:cc:6a:79:67:e0:db:
d2:28:ce:90:b2:f1:77:a6:45:2a:2c:4c:4d:0a:b5:
ba:79:4d:43:7f:78:5e:db:17:e4:87:43:d0:74:45:
12:d5:75:4f:a6:48:e0:0d:38:5d:d0:2f:ad:22:5f:
ab:0d:6d:b5:6e:d7:98:8e:b4:e0:74:65:10:73:fc:
4e:e8:13:cb:b6:08:fa:63:05:32:cc:67:38:9a:4d:
d2:70:20:f3:63:df:f7:e9:2a:5d:97:e5:3e:02:6c:
23:a8:ed:ba:11:f4:1c:73:ff:e9:ba:4e:46:cb:54:
77:67:a2:f9:58:0a:96:17:54:30:1c:db:48:e8:c8:
35:62:04:96:00:a9:d9:34:bd:a7:b4:44:57:f6:ed:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6E:94:70:26:C4:96:5D:51:81:3D:49:0D:49:C4:29:27:D1:84:7C
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/e26UcCbEll1RgT1JDUnEKSfRhHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.8.0/21
89.31.8.0/21
IPv6:
2a10:c540::/29
Signature Algorithm: sha256WithRSAEncryption
7a:9c:bf:fc:de:65:e4:a2:7f:02:19:99:7c:97:40:3b:3f:02:
5d:3c:a6:d5:0b:93:c9:9f:37:f8:e9:d1:2b:f5:7d:01:6d:15:
20:2f:4a:40:0d:cd:d4:ce:7e:48:3e:8b:86:1e:56:4b:ba:78:
6c:d6:01:f1:59:1c:ca:f6:f4:81:c1:91:88:ae:f4:2a:8b:ff:
4a:17:d6:34:00:d1:23:c2:82:81:9c:01:1b:2c:8e:11:38:1d:
f3:cd:57:e3:ba:6b:fd:e2:fb:51:82:56:2f:b8:20:b5:c8:a6:
38:df:54:91:52:48:1b:84:6c:ce:1a:f5:d6:07:b0:8b:b9:74:
6b:01:ee:f7:97:cf:b0:46:78:ea:b4:cd:7f:c1:2e:e3:1c:05:
5c:86:33:5e:9a:f8:de:08:a5:10:6a:61:69:d0:6e:2c:98:e6:
32:f4:8d:59:f7:13:61:da:24:bc:9e:35:a2:a2:d7:3a:3e:94:
34:93:07:01:42:47:48:39:d8:eb:4b:e9:1f:62:f2:4e:16:d9:
eb:2f:f4:35:60:14:fc:3a:db:6a:cc:50:f9:9d:3b:18:fb:fd:
72:5b:11:e6:74:ac:ae:bd:cd:5b:03:9f:fb:8e:66:86:c7:0f:
8c:43:9c:28:b8:3a:50:27:06:bc:6b:a8:6d:50:55:c3:32:ea:
ee:93:bd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:17:09 2024 by rpki-client on console-fra.rpki-client.org