Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/EZEhndTlg1rDowy5E2rk-h7mSgQ.roa
File: EZEhndTlg1rDowy5E2rk-h7mSgQ.roa (raw, json)
Hash identifier: fyNSddUvACMDe4juPA9+2Potkdgbjzru0+C3ftlXT3c=
Subject key identifier: 11:91:21:9D:D4:E5:83:5A:C3:A3:0C:B9:13:6A:E4:FA:1E:E6:4A:04
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 01903BF250EEE9E380F96FF534CE9725F967
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/EZEhndTlg1rDowy5E2rk-h7mSgQ.roa
Signing time: Fri 21 Jun 2024 17:57:34 +0000
ROA not before: Fri 21 Jun 2024 17:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47464
IP address blocks: 2a09:bc00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:11:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3b:f2:50:ee:e9:e3:80:f9:6f:f5:34:ce:97:25:f9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jun 21 17:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1191219dd4e5835ac3a30cb9136ae4fa1ee64a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:69:47:20:44:d5:fb:6a:4e:b7:c7:d7:46:
ef:86:f1:eb:9b:62:4d:91:7e:0b:d1:c9:2e:a4:89:
ae:da:14:ea:87:1d:54:ba:67:90:db:02:94:5c:cf:
17:29:8c:b6:41:5c:b5:9b:be:9a:b2:11:27:81:c1:
55:e6:1f:fc:23:b7:63:ad:ab:90:e5:0f:65:4e:b1:
35:50:93:a9:4c:7b:85:26:ca:db:3e:58:51:da:ba:
71:9b:c6:c7:d7:61:b4:be:f9:b6:5c:fa:0c:72:96:
9e:28:53:ed:a0:78:71:fa:a2:1c:31:5b:39:70:c6:
07:b7:c8:4b:af:30:12:e6:0f:97:30:3d:f2:e8:35:
06:50:44:76:c2:a0:b2:26:d6:00:ba:2c:99:76:99:
2b:ba:3f:07:e7:d7:e0:52:9d:51:30:ae:47:4f:49:
67:9e:ad:f9:6b:8a:7b:74:72:19:15:44:42:9e:a1:
25:ec:11:c3:e5:96:7a:2e:ca:32:f7:42:62:60:9d:
f4:2e:5a:0c:a5:69:bc:d5:59:ab:1b:da:fa:86:09:
9f:32:57:1e:43:22:36:86:6f:5c:de:6e:44:5f:7b:
b7:79:b7:3e:cd:7f:cc:50:02:66:9d:2c:89:ce:e2:
4f:70:2a:a3:03:d9:90:bf:2c:0f:24:d0:cd:a5:24:
6c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:91:21:9D:D4:E5:83:5A:C3:A3:0C:B9:13:6A:E4:FA:1E:E6:4A:04
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/EZEhndTlg1rDowy5E2rk-h7mSgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:bc00::/29
Signature Algorithm: sha256WithRSAEncryption
0e:90:b3:f3:80:97:8b:6c:9e:25:d8:b6:13:94:6f:43:4f:f3:
d2:0d:94:06:c8:31:ea:1a:af:f9:37:ae:d2:a8:e7:34:06:5a:
1f:86:7d:2d:f2:b3:da:5f:46:03:cf:89:a0:0a:53:a0:f2:c6:
fc:d1:44:94:61:12:5d:25:21:fb:c7:e6:8a:09:82:b7:bb:1b:
b5:8e:f1:15:77:f6:7d:8e:23:5d:5e:6f:ef:e4:f4:d4:a2:a7:
25:c3:bf:19:e5:c6:00:84:df:af:ef:66:06:20:bc:81:13:fc:
9d:e5:be:a7:6b:07:b6:64:fc:c3:94:cd:ff:e9:1c:78:0d:a2:
fb:4d:ce:96:ca:29:16:7e:58:aa:d5:04:29:f7:fe:14:ee:26:
06:9c:75:2a:bf:5e:ea:4c:6d:f5:22:80:aa:d0:70:46:f9:54:
7b:18:10:e0:09:f6:3f:b9:2b:a8:85:4c:c3:25:65:0c:91:31:
b5:d6:be:97:7e:cc:c6:46:2d:39:8a:e9:30:3b:50:bd:a8:13:
2f:f9:c1:03:7e:cb:1c:be:e6:0c:db:c9:7d:d7:0d:f4:4c:6a:
68:fe:0f:af:e1:4a:02:94:83:3e:ab:2c:e6:4b:ef:fa:35:45:
cc:12:32:af:cb:24:ef:97:63:9e:3e:a5:f0:aa:39:e6:92:d0:
98:02:5a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:27:10 2024 by rpki-client on console-fra.rpki-client.org