Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/EljBY25fzRaukO_GAd3ezV3sn2Q.roa
File: EljBY25fzRaukO_GAd3ezV3sn2Q.roa (raw, json)
Hash identifier: 9rTSTTg9jfkHCRG+ceKr9nRXkZwPPts4igHALHj3+Jc=
Subject key identifier: 12:58:C1:63:6E:5F:CD:16:AE:90:EF:C6:01:DD:DE:CD:5D:EC:9F:64
Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial: 018CC80147A64B457CA23A8F2B31D4DAC9C3
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/EljBY25fzRaukO_GAd3ezV3sn2Q.roa
Signing time: Tue 02 Jan 2024 02:29:36 +0000
ROA not before: Tue 02 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12337
IP address blocks: 2001:67c:1933::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:47:a6:4b:45:7c:a2:3a:8f:2b:31:d4:da:c9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Validity
Not Before: Jan 2 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1258c1636e5fcd16ae90efc601dddecd5dec9f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:22:a7:6b:de:b1:81:73:ac:c1:01:d5:dc:4d:
37:cf:51:38:96:04:aa:0b:49:ab:cf:07:2d:86:e5:
d8:53:3a:74:b3:c6:1e:e7:97:b5:42:10:56:f9:99:
2f:b5:e9:0f:5d:76:7e:5b:06:d9:94:93:91:72:85:
3a:a9:d7:cd:94:7a:67:cc:71:0a:34:c0:91:a6:aa:
eb:4c:bd:8b:5d:17:8a:e0:de:80:03:21:5c:e9:ed:
23:ca:d0:af:74:53:d0:91:56:eb:f1:d4:3f:4c:a2:
43:73:d9:99:b8:6f:97:60:ef:52:0b:ec:ba:35:9e:
00:23:1e:b4:de:cb:a2:32:0a:21:21:45:40:f3:ce:
81:f6:f0:02:d1:f3:55:b1:77:96:06:f9:7a:68:6b:
b5:a3:9e:74:d3:61:93:52:cb:4d:4f:95:5a:26:67:
7a:fe:eb:bd:53:1a:af:fd:7f:80:32:b0:dd:86:14:
e0:c0:e5:50:3a:57:b1:b6:70:05:9b:67:fc:1d:bf:
a6:1d:6e:75:df:b6:92:ed:05:fa:67:30:81:85:67:
13:f2:35:14:d1:0a:31:36:7c:8d:25:64:24:99:95:
32:2b:0b:5d:71:ef:f1:a3:0a:7c:0c:3e:6d:f1:22:
8d:5f:21:13:85:1c:de:e7:5c:03:d5:d0:e6:28:70:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:58:C1:63:6E:5F:CD:16:AE:90:EF:C6:01:DD:DE:CD:5D:EC:9F:64
X509v3 Authority Key Identifier:
keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/EljBY25fzRaukO_GAd3ezV3sn2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1933::/48
Signature Algorithm: sha256WithRSAEncryption
4a:44:e2:34:a9:77:77:7b:48:bc:47:07:06:ca:ed:65:95:96:
a8:77:e1:b3:c2:46:95:98:49:ae:3a:02:e4:e5:84:44:7f:29:
de:b2:77:a4:b3:e1:1f:6e:0f:af:da:c8:2f:e9:aa:1c:82:4f:
80:0b:8b:be:cf:90:53:82:e2:02:ca:05:ed:d4:ea:fd:6f:ba:
37:99:00:cf:86:9f:63:82:20:9c:32:e8:cb:d1:31:6e:bd:f1:
f1:d8:79:19:e0:1e:a3:a7:83:3c:60:45:ab:43:a0:9e:f1:49:
25:66:66:96:4f:a8:b8:81:29:0d:bf:c5:36:f5:aa:90:86:03:
2a:25:dc:e0:44:a0:d0:2c:ef:76:2f:3d:e9:43:44:af:e9:c5:
18:00:38:22:74:15:89:aa:74:09:20:59:55:f7:23:68:8c:d1:
a4:71:62:78:1c:c8:bc:62:38:ff:7b:e6:28:b5:03:ef:e4:df:
24:3a:62:71:70:e3:9f:9d:69:95:ca:78:b8:6e:32:63:17:98:
56:c8:e6:7b:6d:21:50:3c:32:a5:ee:62:98:cc:f4:39:24:e1:
17:43:ea:17:6a:7d:b9:b5:e9:cd:8f:a5:21:71:c8:67:23:95:
8c:27:fc:03:64:50:be:a3:86:6d:f2:a3:53:a1:55:52:51:0b:
38:96:2e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:10:29 2024 by rpki-client on console-fra.rpki-client.org