Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/873889-e950-4449-88b3-3b35087e418c/1/eKB1a00gUrTeUxis91hsgoFaO-U.roa
File: eKB1a00gUrTeUxis91hsgoFaO-U.roa (raw, json)
Hash identifier: Xn18j2CYlfE/zq0D2BbdrrqB5JsL5Hrhdqavtz96e1Q=
Subject key identifier: 78:A0:75:6B:4D:20:52:B4:DE:53:18:AC:F7:58:6C:82:81:5A:3B:E5
Certificate issuer: /CN=cbf4ce8ccac9963b55af4fbc33332d595861c752
Certificate serial: 018E52348C3DECC254BF480C9611DC474296
Authority key identifier: CB:F4:CE:8C:CA:C9:96:3B:55:AF:4F:BC:33:33:2D:59:58:61:C7:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_TOjMrJljtVr0-8MzMtWVhhx1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/873889-e950-4449-88b3-3b35087e418c/1/eKB1a00gUrTeUxis91hsgoFaO-U.roa
Signing time: Mon 18 Mar 2024 15:35:59 +0000
ROA not before: Mon 18 Mar 2024 15:35:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215294
IP address blocks: 2001:67c:e44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/873889-e950-4449-88b3-3b35087e418c/1/y_TOjMrJljtVr0-8MzMtWVhhx1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/873889-e950-4449-88b3-3b35087e418c/1/y_TOjMrJljtVr0-8MzMtWVhhx1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_TOjMrJljtVr0-8MzMtWVhhx1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:52:34:8c:3d:ec:c2:54:bf:48:0c:96:11:dc:47:42:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf4ce8ccac9963b55af4fbc33332d595861c752
Validity
Not Before: Mar 18 15:35:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78a0756b4d2052b4de5318acf7586c82815a3be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f1:bb:01:a7:d7:4f:39:15:5d:70:e5:63:77:
ef:01:bc:27:12:53:ba:91:3b:7f:7f:63:9c:3c:a1:
f5:ba:c9:5f:cc:16:99:6d:f4:89:e4:ae:0d:28:7e:
8c:d5:bb:b8:a3:30:21:71:22:7f:d6:d4:08:f1:76:
83:5c:f3:2b:c8:ec:4d:da:a9:ba:14:ad:d7:dc:07:
e0:52:83:b7:7b:6e:28:af:08:48:ff:27:f6:c1:2b:
16:b0:6b:ea:d2:0a:d5:19:d5:c8:ab:ac:0c:5e:b3:
dc:77:2d:18:12:e8:77:60:16:40:b7:58:ce:cb:66:
21:06:50:df:a4:53:62:82:e4:8c:7d:63:29:64:f3:
d4:a1:c2:d1:72:86:12:4b:7b:63:89:13:b6:ad:93:
c0:86:1b:d0:85:cd:82:f9:c4:38:b4:22:29:7a:0a:
f1:4b:6c:04:44:52:88:cf:82:78:84:d1:e7:8f:22:
d4:46:c6:a6:bb:51:44:09:62:46:48:65:09:cf:6c:
e1:91:58:ac:18:b3:3d:2f:7f:58:de:70:a7:2a:42:
91:17:6f:14:6a:23:de:64:2c:18:86:ef:29:60:5c:
35:ea:e9:19:a3:ce:f1:8f:d0:c2:19:0b:92:b9:ef:
8b:9e:15:15:19:31:d4:99:e2:7e:db:30:b3:43:88:
b7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A0:75:6B:4D:20:52:B4:DE:53:18:AC:F7:58:6C:82:81:5A:3B:E5
X509v3 Authority Key Identifier:
keyid:CB:F4:CE:8C:CA:C9:96:3B:55:AF:4F:BC:33:33:2D:59:58:61:C7:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_TOjMrJljtVr0-8MzMtWVhhx1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/873889-e950-4449-88b3-3b35087e418c/1/eKB1a00gUrTeUxis91hsgoFaO-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/873889-e950-4449-88b3-3b35087e418c/1/y_TOjMrJljtVr0-8MzMtWVhhx1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e44::/48
Signature Algorithm: sha256WithRSAEncryption
49:28:33:5a:67:87:d4:59:53:88:54:ca:ad:cc:0d:26:3e:35:
c0:c1:ff:21:ba:d5:2d:c4:c9:c1:fc:3f:65:6f:a3:2f:89:c7:
a8:5a:f5:1f:ab:02:e0:8f:b7:6e:78:65:77:f0:7d:bd:7a:e2:
1d:ef:c7:8f:4f:86:ad:eb:9a:ff:33:e1:5c:ad:44:db:ea:79:
23:0a:63:ac:cf:30:ba:47:5e:a4:44:49:dd:7f:d2:8f:ac:0c:
39:85:11:28:5f:35:ba:9e:8d:3a:83:b4:e6:d4:5a:c8:fb:a8:
74:68:46:cc:85:9f:09:8c:08:9d:bf:52:ed:93:82:30:f0:d9:
8e:b9:c6:db:2a:17:a2:d4:e4:70:93:fa:82:6a:ef:5f:a2:66:
29:4c:5d:93:37:21:12:18:4a:c1:2b:17:98:d4:f5:65:a2:c3:
a4:da:a6:c2:e2:90:14:d4:12:33:a2:5d:ec:12:93:6c:fc:04:
39:02:3b:d6:40:14:f8:66:8e:3d:d9:24:cd:5b:df:54:dd:17:
0b:3e:26:43:05:bb:dc:9a:88:de:1c:f9:f2:b9:fa:88:81:b2:
f4:97:d3:04:52:10:37:5a:29:e6:04:9c:14:c1:17:77:e5:02:
29:88:a0:7b:df:86:4e:ab:fd:9d:8d:03:96:dd:a4:74:be:12:
16:a1:57:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 17:40:46 2024 by rpki-client on console-fra.rpki-client.org