Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/7eVWLI0hP-_4atu02u2qiEpApuA.roa
File: 7eVWLI0hP-_4atu02u2qiEpApuA.roa (raw, json)
Hash identifier: 5B7SoV1YODYJqUQYYhII4g5xFIT0RMR71kDKBASdU3Y=
Subject key identifier: ED:E5:56:2C:8D:21:3F:EF:F8:6A:DB:B4:DA:ED:AA:88:4A:40:A6:E0
Certificate issuer: /CN=af09503fcac01769515a19f2dc2657d92fd350df
Certificate serial: 018CC9BC5CAD11170B6434A99A71D3CFB9FF
Authority key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/7eVWLI0hP-_4atu02u2qiEpApuA.roa
Signing time: Tue 02 Jan 2024 10:33:34 +0000
ROA not before: Tue 02 Jan 2024 10:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 553
IP address blocks: 141.10.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:5c:ad:11:17:0b:64:34:a9:9a:71:d3:cf:b9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09503fcac01769515a19f2dc2657d92fd350df
Validity
Not Before: Jan 2 10:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ede5562c8d213feff86adbb4daedaa884a40a6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:fa:7c:50:61:18:e7:fe:79:7c:15:d7:d5:
12:67:fb:c9:d4:0e:78:19:66:5c:d8:36:32:d3:07:
3d:f2:0f:c3:fc:10:77:6d:f0:c4:4f:42:f3:5a:0e:
a5:b6:a5:1a:08:5f:32:0f:2f:8d:99:3c:d5:62:18:
d4:aa:82:2e:47:bb:85:96:51:14:9f:6d:da:95:8f:
13:b9:9d:e1:6e:59:10:c7:ee:96:bf:1b:4c:2e:79:
5b:b5:5d:a9:77:a9:24:15:45:dd:e9:10:66:59:e4:
84:ee:75:b1:a3:d4:f9:fc:20:bf:2c:50:8e:30:a7:
46:75:10:88:f9:0c:11:98:13:60:7a:40:12:fe:3d:
63:99:9b:91:6e:a7:c1:c6:75:bb:0f:11:99:91:a7:
06:c4:bb:24:a1:91:65:d9:c6:18:30:c3:a4:2b:78:
f5:8b:c0:bb:a3:42:bc:f9:cc:e2:df:36:15:61:bf:
80:77:18:55:45:54:4b:6c:29:9c:bc:3c:54:3e:75:
a7:c7:ec:3c:e3:29:54:f2:04:ef:58:e2:7c:6d:e7:
27:4f:46:bd:3a:e8:00:2e:83:ba:04:bb:b2:45:5e:
e4:a6:9c:8d:f6:1a:d7:6f:da:74:72:97:92:fa:14:
55:5e:27:a7:54:d2:89:c6:e1:54:ea:e1:72:25:c9:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E5:56:2C:8D:21:3F:EF:F8:6A:DB:B4:DA:ED:AA:88:4A:40:A6:E0
X509v3 Authority Key Identifier:
keyid:AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/7eVWLI0hP-_4atu02u2qiEpApuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:49:64:90:6e:0e:a0:64:bf:de:0e:67:0e:2e:43:94:38:c3:
3f:89:7a:84:84:24:b8:06:0c:6d:1d:f7:ce:4d:2a:91:69:e7:
67:48:4b:bc:92:1d:49:e5:8f:ac:cc:cb:d1:f1:d4:c7:30:5d:
62:7d:dc:16:8b:e5:5a:f9:be:72:47:65:41:9d:b9:3b:10:e4:
21:a6:5e:f4:4b:f7:33:7d:ef:24:2d:a3:05:92:ca:62:4f:f5:
aa:4b:a8:80:34:aa:55:5d:00:c4:a7:67:35:88:94:3d:13:ab:
b6:e0:a7:71:09:41:01:0c:04:5e:22:49:93:b9:4a:f5:0b:73:
f2:52:87:b4:fd:2c:f0:da:e4:0f:f7:f2:b7:e8:33:90:e4:49:
05:94:c7:ce:39:74:c2:40:03:4a:00:49:f5:b8:64:05:6e:68:
6b:c8:cb:2d:96:9c:41:b5:df:19:35:ea:7e:45:0c:f0:5e:5f:
b6:9c:30:b7:9e:92:db:29:6d:3f:a0:64:64:a6:ae:c5:91:d1:
77:f6:b6:0c:98:f3:fc:c2:4c:a7:a4:f7:08:dc:64:56:fd:71:
a2:d8:50:f2:6a:2b:82:79:b1:6b:8f:c2:57:e4:f3:fa:86:81:
a0:40:9b:bb:1c:9a:5e:d7:5d:ab:c2:a6:6e:8d:9f:d4:68:0f:
f1:55:2d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:50:48 2024 by rpki-client on console-ams.rpki-client.org