Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/5ePq1YVUZ29WQdSFvMRNKmd3Umo.roa
File: 5ePq1YVUZ29WQdSFvMRNKmd3Umo.roa (raw, json)
Hash identifier: 3mpEo2ljX9okWGDt/5qfYmhOqYd60Egn/mPrFvDugNo=
Subject key identifier: E5:E3:EA:D5:85:54:67:6F:56:41:D4:85:BC:C4:4D:2A:67:77:52:6A
Certificate issuer: /CN=603b31bc6e7f42f6303870f0234b40def71fa03d
Certificate serial: 0191282D0538C81E738DEB2CFD01169ED778
Authority key identifier: 60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/5ePq1YVUZ29WQdSFvMRNKmd3Umo.roa
Signing time: Tue 06 Aug 2024 14:52:04 +0000
ROA not before: Tue 06 Aug 2024 14:52:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215123
IP address blocks: 2a14:37c0::/32 maxlen: 32
2a14:37c0::/48 maxlen: 48
2a14:37c1::/32 maxlen: 32
2a14:37c2::/32 maxlen: 32
2a14:37c3::/32 maxlen: 32
2a14:37c4::/32 maxlen: 32
2a14:37c5::/32 maxlen: 32
2a14:37c6::/32 maxlen: 32
2a14:37c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:28:2d:05:38:c8:1e:73:8d:eb:2c:fd:01:16:9e:d7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603b31bc6e7f42f6303870f0234b40def71fa03d
Validity
Not Before: Aug 6 14:52:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5e3ead58554676f5641d485bcc44d2a6777526a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ff:70:92:cd:72:2a:ec:b5:31:c0:16:db:c1:
78:92:23:f7:b1:5f:1b:e0:01:5d:0a:aa:ab:ea:07:
00:12:9e:f0:3e:cd:b2:8e:31:29:97:47:a6:d5:1e:
29:3a:29:c8:df:b5:37:fd:36:28:8f:da:14:6c:5d:
80:93:6b:93:b1:4d:2e:21:4f:a0:b0:b0:5f:0d:e4:
15:a8:8a:0d:b7:0d:12:f3:a0:a5:2a:2f:cc:6a:2e:
6e:62:92:c5:60:e7:a7:59:39:ec:fe:7c:76:46:38:
71:0f:6c:7f:26:1d:57:6e:a0:0d:c4:b3:5c:b6:91:
9c:f1:9f:ca:f5:f9:e1:44:eb:3a:10:49:62:7f:a1:
40:71:5f:66:e9:24:9c:cc:99:bd:70:89:ae:26:f3:
72:0f:be:9e:63:6a:6c:22:a6:6b:e5:ae:a2:e1:4a:
fa:0a:28:3a:c8:76:c9:4c:90:17:97:e1:38:e3:2a:
52:6f:57:70:9a:24:b7:84:b5:dd:52:d7:38:fd:98:
f7:dd:18:52:04:8f:05:32:0f:e5:01:f9:42:4a:33:
ed:c6:93:23:8b:63:09:43:47:0c:1b:a3:f9:81:14:
06:92:e5:cc:bc:63:7a:c0:75:f4:c1:a9:4d:17:a5:
58:29:14:77:77:b7:5b:3d:14:8d:11:a4:8a:bd:d5:
f7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E3:EA:D5:85:54:67:6F:56:41:D4:85:BC:C4:4D:2A:67:77:52:6A
X509v3 Authority Key Identifier:
keyid:60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/5ePq1YVUZ29WQdSFvMRNKmd3Umo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
67:b8:0e:cc:57:85:84:5a:14:3a:12:f2:b9:01:10:38:b9:7a:
92:76:78:ba:60:71:e5:94:68:93:9d:45:4d:3c:ac:d3:cc:e2:
a6:18:71:93:a2:01:71:0e:cc:c2:ed:2d:f1:48:86:09:02:d6:
2b:7d:ae:3b:ae:b6:1b:66:42:92:cd:6a:c5:42:6f:07:a5:09:
36:2e:ef:07:9e:fe:1e:40:32:48:57:db:dc:c9:34:b8:97:91:
c7:ec:49:a4:7b:9b:62:15:c1:dc:2c:f6:5b:7d:0a:0c:77:01:
36:7b:cb:91:d0:74:af:df:c8:24:a1:17:8b:ac:f4:ce:b0:92:
3d:f7:ae:cb:3c:24:7e:dd:a8:7c:16:1a:3e:6f:8f:dd:04:2d:
35:4c:d4:66:e4:09:fe:0e:39:59:b8:0c:34:78:e3:e7:04:6b:
99:02:f4:69:84:5d:4b:5c:a9:bd:e5:1e:f0:eb:16:e3:73:dc:
9e:ce:e8:70:cd:23:4a:57:85:85:b5:cb:90:3b:aa:1c:35:76:
9e:7c:99:10:be:30:bc:99:93:86:33:fa:60:d5:97:2b:67:bc:
a1:fe:5e:e8:36:1a:a9:b5:ed:56:c2:a3:b2:99:1f:0f:88:0a:
87:7d:e9:a5:3d:d5:ae:0e:3e:36:0f:42:69:13:1c:b5:40:19:
3b:97:3a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:41:22 2024 by rpki-client on console-fra.rpki-client.org