Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/7DOmT_GsF89I_kyhL2XoCnTXi5A.roa
File: 7DOmT_GsF89I_kyhL2XoCnTXi5A.roa (raw, json)
Hash identifier: 15KV1uIJGEqeGT/SxNapUYOFY0qGw7CMbR3VcJp7Jdk=
Subject key identifier: EC:33:A6:4F:F1:AC:17:CF:48:FE:4C:A1:2F:65:E8:0A:74:D7:8B:90
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 018CC348EBFD8C12C4968158C89CD497C1F1
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/7DOmT_GsF89I_kyhL2XoCnTXi5A.roa
Signing time: Mon 01 Jan 2024 04:29:45 +0000
ROA not before: Mon 01 Jan 2024 04:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 134.169.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:eb:fd:8c:12:c4:96:81:58:c8:9c:d4:97:c1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Jan 1 04:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec33a64ff1ac17cf48fe4ca12f65e80a74d78b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a4:e4:c5:2c:df:79:5a:d5:ae:ee:9b:f8:0c:
fc:f0:be:de:49:25:16:0d:02:8c:ef:c7:75:78:86:
a0:dd:8b:d3:bb:f5:7a:01:6f:4f:a3:0c:eb:cb:34:
ca:56:6c:27:9c:15:28:d8:17:24:17:27:ba:84:cb:
c1:a9:32:39:11:6e:2f:a8:72:3d:72:15:5f:03:cb:
7b:04:9a:c7:f7:c7:f5:f1:84:3c:2f:4e:a5:99:e9:
08:8f:9f:cd:b5:68:30:79:21:86:d1:28:06:ce:2a:
45:61:6c:a1:65:89:45:2b:c5:69:ab:b2:d1:f8:ce:
d7:ed:63:52:5b:5c:85:8c:3c:35:61:09:b7:53:6c:
47:a8:1a:be:6f:c9:4c:96:4d:81:a8:d6:33:6a:1d:
f3:a0:35:d0:ee:b7:0a:1e:87:ff:27:87:f8:1c:5c:
1b:f3:0d:9a:a5:e8:e3:38:f9:af:05:83:13:93:12:
65:bf:6e:03:5d:37:12:81:85:e3:0d:cf:04:9e:65:
00:be:a8:21:e1:46:38:6c:4a:07:73:be:a4:bb:2e:
6e:2e:cc:7f:32:84:95:5e:5a:97:95:16:ab:0d:65:
5d:25:45:c9:2e:77:ed:78:4d:ef:bc:02:ce:b2:1b:
f4:9f:97:d7:5e:45:a0:64:7a:64:6c:a1:cd:ed:7c:
d8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:33:A6:4F:F1:AC:17:CF:48:FE:4C:A1:2F:65:E8:0A:74:D7:8B:90
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/7DOmT_GsF89I_kyhL2XoCnTXi5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:7d:22:09:ce:d0:b1:ec:45:bb:ce:d4:57:96:77:7a:75:fc:
71:ea:5e:84:54:d7:60:fa:06:16:30:b7:cc:4d:b2:2d:f3:ff:
b3:d3:d2:b9:aa:e0:b0:de:64:31:a4:b3:12:3a:60:3d:81:1a:
fa:35:e2:64:2b:a0:24:3b:91:4f:0a:4d:d2:d5:90:ff:a2:2f:
04:cc:3d:a0:8f:c7:4e:13:cf:41:1e:7e:70:8b:1c:e6:2f:30:
ad:3d:b3:29:3f:04:f0:ea:41:95:e4:7e:d4:89:8e:68:a6:a4:
e9:1e:a4:b2:87:02:63:d2:54:3e:99:82:f3:a4:a6:83:0e:7a:
a8:67:03:96:b9:3e:48:16:4e:88:f5:7d:0e:02:c5:a7:57:22:
79:9e:39:5e:43:c9:5a:12:30:09:6a:23:f4:58:53:f3:05:30:
a3:c5:73:b8:e6:04:42:b4:34:b3:a0:55:0a:fc:f5:31:cb:5a:
8e:23:41:fc:7c:16:f3:6b:63:b3:3b:d1:44:ff:b2:09:61:5c:
cd:17:f7:0e:c2:7c:ca:39:41:53:73:0c:62:e8:a7:5b:55:c0:
bd:4d:8d:f9:37:2b:f3:a8:e2:3e:18:1d:60:7e:39:dd:4b:d6:
af:ba:ec:d5:8f:14:5e:83:b2:ed:47:24:65:4d:fc:43:40:1b:
40:48:3a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:24 2024 by rpki-client on console-ams.rpki-client.org