Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/74EQ4cQFoD0t1GS9-XszfOzPubg.roa
File: 74EQ4cQFoD0t1GS9-XszfOzPubg.roa (raw, json)
Hash identifier: 7XaR+875j+L0dueXg+FMPf0znrQnfs20mf27Q74sTVI=
Subject key identifier: EF:81:10:E1:C4:05:A0:3D:2D:D4:64:BD:F9:7B:33:7C:EC:CF:B9:B8
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 018D13506BAD2DD43416BD628FF9D4988B2B
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/74EQ4cQFoD0t1GS9-XszfOzPubg.roa
Signing time: Tue 16 Jan 2024 17:27:34 +0000
ROA not before: Tue 16 Jan 2024 17:27:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215703
IP address blocks: 2a03:5840:115::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:50:6b:ad:2d:d4:34:16:bd:62:8f:f9:d4:98:8b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 16 17:27:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef8110e1c405a03d2dd464bdf97b337ceccfb9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:58:49:67:c3:97:53:0a:b7:27:cc:10:d1:d2:
96:a3:0b:c2:80:2a:49:d2:6f:b3:b5:9f:d4:de:75:
2d:fc:1b:6e:f9:29:3a:46:be:02:5e:8e:f8:c2:ff:
a1:b0:d7:f8:17:2a:09:e6:05:85:8d:12:12:67:9d:
d6:f8:2e:ff:40:32:3d:13:ec:2c:11:79:f4:a1:61:
8a:e7:ee:9a:8d:ba:17:67:92:3e:22:dc:3f:9c:1f:
dc:8b:2d:0e:54:6b:3f:28:09:90:9b:fe:f3:a4:15:
fa:62:33:58:aa:bf:7d:73:49:ee:bd:36:04:b1:ca:
0d:81:6a:c8:7a:bd:6d:03:6f:00:3e:09:7a:5c:f9:
3c:a4:41:70:54:5b:8f:8e:d9:1d:59:36:34:62:92:
f2:e5:c1:4f:42:8e:2b:95:d0:ff:c3:ca:29:d0:07:
0d:2b:f0:ac:b1:85:19:83:98:ec:43:28:be:26:4b:
62:34:b4:d6:62:19:6c:79:af:e8:e6:48:24:52:2e:
cf:78:10:84:e4:96:47:3a:fd:f8:22:bb:58:e7:16:
2d:a8:b3:6d:fd:d9:b0:c2:a6:8b:5e:ad:73:8a:4c:
6c:55:2e:44:7b:19:34:70:c4:2b:97:8a:62:b7:2a:
b9:af:32:17:3b:e6:c0:be:ba:0c:98:57:cb:e5:8b:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:81:10:E1:C4:05:A0:3D:2D:D4:64:BD:F9:7B:33:7C:EC:CF:B9:B8
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/74EQ4cQFoD0t1GS9-XszfOzPubg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:115::/48
Signature Algorithm: sha256WithRSAEncryption
27:bb:e6:5b:75:08:a1:75:7c:09:d5:08:f6:98:e7:40:21:8d:
93:2d:94:1f:9f:28:19:a5:42:0e:fb:3c:c4:76:e1:43:c4:02:
08:61:f9:53:0e:62:d3:d9:34:3f:83:d6:a3:ff:ab:4b:4b:22:
28:26:55:7d:f8:3a:78:64:ca:27:c1:8f:60:c5:21:6c:56:49:
01:df:99:7c:43:8e:33:54:b3:9a:d3:42:57:e7:79:7a:7d:b4:
b9:94:76:b1:6c:ba:49:cb:23:07:19:28:b6:00:2a:cd:ff:5c:
91:6d:37:98:a2:ef:cb:62:e4:22:e1:d1:20:31:f8:c8:89:55:
c2:6a:94:76:dd:9a:c1:28:86:d1:c3:31:91:92:b9:a8:0f:34:
87:7d:35:34:5f:4d:43:8c:e9:17:e7:4d:b9:aa:5c:72:dc:82:
8d:ed:1d:e1:01:9e:b7:32:83:66:7b:22:2b:b6:8e:56:44:11:
38:d5:16:db:f1:ab:26:c9:c8:fd:fa:e3:85:9c:fb:7b:db:05:
87:39:86:23:39:e1:e8:76:0b:88:a5:cd:ab:1d:53:8a:88:15:
a2:40:82:3f:22:58:ba:d8:df:ac:47:a0:9d:71:27:f7:dd:44:
3e:cf:99:08:f0:7e:a8:4f:d4:bc:15:ad:11:e7:0f:17:33:4e:
5a:7c:3e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:13:47 2024 by rpki-client on console-ams.rpki-client.org