Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/EhFnK0uXUkL2_gyAijhVVmJ4vrs.roa
File: EhFnK0uXUkL2_gyAijhVVmJ4vrs.roa (raw, json)
Hash identifier: s6S3g/WGMTMpFsXwKXDgFeiAwsESNLXDg8kAahHE3j4=
Subject key identifier: 12:11:67:2B:4B:97:52:42:F6:FE:0C:80:8A:38:55:56:62:78:BE:BB
Certificate issuer: /CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Certificate serial: 018CC2DAC583926CC960E15C03ABFF62BC06
Authority key identifier: 2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/EhFnK0uXUkL2_gyAijhVVmJ4vrs.roa
Signing time: Mon 01 Jan 2024 02:29:26 +0000
ROA not before: Mon 01 Jan 2024 02:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208328
IP address blocks: 2a0d:b287:ec00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/L8sw_X1uRJST7Hyw2feGAEWL4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/L8sw_X1uRJST7Hyw2feGAEWL4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c5:83:92:6c:c9:60:e1:5c:03:ab:ff:62:bc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Validity
Not Before: Jan 1 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1211672b4b975242f6fe0c808a3855566278bebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:a7:79:4d:87:b3:8d:e4:d5:91:c8:c8:f5:
21:b8:06:03:8c:d8:70:3a:22:e2:3b:ba:73:3c:ba:
7b:a9:e5:56:2a:f8:8b:fc:99:2f:ca:7b:fe:08:b9:
b8:6f:ad:bb:82:92:19:64:85:59:12:47:f8:23:e4:
12:a6:05:19:11:9a:13:e1:05:b5:c1:8d:8c:94:60:
31:26:c0:c6:7c:32:2a:3a:42:99:2a:a0:31:3a:02:
2b:e9:cd:aa:5c:1b:72:e0:52:e2:66:33:af:b6:e4:
5d:ec:1a:67:eb:97:b2:7e:f4:c1:cf:52:5b:0c:e2:
61:85:1c:95:46:d1:ec:c8:6d:fe:8c:9f:4b:15:11:
40:26:3d:d2:72:77:b3:39:f1:9f:0d:f8:a0:60:dc:
30:c7:1b:04:75:a0:f9:a0:7c:15:85:b2:4c:c4:66:
de:1f:0c:0c:2d:9d:57:09:15:14:94:c6:28:3e:8f:
82:4d:4e:ba:cd:ea:9f:26:19:bc:1d:81:2c:15:8f:
e2:95:4b:52:6a:ae:f9:80:df:d5:98:70:74:29:14:
15:95:32:88:32:d4:07:95:8c:04:f4:a5:c9:7f:6a:
dc:9f:9d:99:07:a7:91:e7:19:2b:22:65:56:65:fd:
70:99:80:07:46:cb:e5:4e:05:4a:11:ec:21:cd:bd:
bc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:11:67:2B:4B:97:52:42:F6:FE:0C:80:8A:38:55:56:62:78:BE:BB
X509v3 Authority Key Identifier:
keyid:2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/EhFnK0uXUkL2_gyAijhVVmJ4vrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/L8sw_X1uRJST7Hyw2feGAEWL4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b287:ec00::/40
Signature Algorithm: sha256WithRSAEncryption
07:47:6c:b2:82:66:12:2a:83:18:3b:60:77:2e:8c:76:f7:11:
94:e6:e9:31:f7:9c:58:6c:a5:ff:c4:71:83:b1:dc:71:1b:ce:
32:0c:28:82:d9:5a:9f:21:28:ac:84:3f:bb:39:76:9e:c1:69:
8a:be:c0:d4:88:4a:3a:66:a9:cd:de:d9:19:b3:c6:c9:bd:d9:
2a:8c:74:c8:f3:84:39:98:fa:d0:df:9a:de:b8:82:de:b5:d4:
5b:9c:07:71:83:6a:a6:4c:e5:6b:e6:4e:9c:5a:be:a3:43:fc:
4d:23:f5:6e:cc:b6:c9:07:82:94:61:9b:a5:1d:85:cc:10:45:
f4:02:d0:c5:36:d4:c5:fc:76:36:43:67:33:b7:d7:d6:a9:f2:
3e:a3:e2:64:80:f0:a6:6c:72:a5:e0:46:20:d9:0e:27:4d:0b:
f4:bd:ed:5a:8d:ad:ad:ff:07:aa:a2:18:88:40:93:53:3a:c0:
70:18:a5:6a:df:d0:f6:51:52:3d:dd:c2:02:6a:9c:94:c0:cf:
65:0d:29:06:e3:ba:89:57:13:7f:06:f1:0e:13:6b:41:a7:58:
fe:3b:2f:d1:ce:7a:1a:6a:fc:17:97:3b:2f:aa:01:4c:10:9c:
e0:52:e3:88:cc:fe:46:9d:02:15:6b:6b:e5:cb:54:3d:5f:b1:
21:e2:02:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:07:22 2024 by rpki-client on console-fra.rpki-client.org