Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/75hYzpNmJWH_W1y6-J0KmujJ3pk.roa
File: 75hYzpNmJWH_W1y6-J0KmujJ3pk.roa (raw, json)
Hash identifier: HhR2H3lUj9wzmTo+hRGFncrw6xnqIZ1rbRpXNwyoakw=
Subject key identifier: EF:98:58:CE:93:66:25:61:FF:5B:5C:BA:F8:9D:0A:9A:E8:C9:DE:99
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D39C479C01D90F1C7A8DB63D077CB
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/75hYzpNmJWH_W1y6-J0KmujJ3pk.roa
Signing time: Mon 01 Jan 2024 00:29:47 +0000
ROA not before: Mon 01 Jan 2024 00:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209584
IP address blocks: 2a0e:aa07:e04c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:39:c4:79:c0:1d:90:f1:c7:a8:db:63:d0:77:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef9858ce93662561ff5b5cbaf89d0a9ae8c9de99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:9e:1b:31:15:03:af:32:c8:25:a2:d7:49:
9b:bf:a4:1a:61:0a:20:2c:cc:b0:cf:07:86:af:15:
9c:56:1e:9d:ea:fc:c2:0e:6a:26:3c:14:d4:b3:3c:
51:4e:0f:a3:9b:de:53:cb:d1:79:a6:b6:b0:b3:69:
21:eb:d6:37:b2:58:4b:79:49:e3:62:df:ad:d2:af:
67:a7:ec:da:ca:b8:8d:48:ba:b2:76:da:9a:45:52:
31:74:7d:9d:15:45:70:28:52:ae:b8:fd:70:ed:8f:
b5:8c:d3:bf:67:45:c8:6d:f3:4b:ea:aa:5b:6f:39:
12:59:cc:7d:48:7e:d6:f7:d8:32:a2:43:c5:b2:ec:
37:41:6e:44:9d:a2:0c:f3:86:a7:a3:bf:55:41:17:
cf:cf:c9:f6:a8:16:fb:32:b1:ef:93:14:45:31:85:
ba:74:4f:31:70:42:cf:ea:e8:1b:75:27:a9:b5:ba:
2d:73:39:31:7d:bd:f9:2e:d8:ec:a3:77:1b:99:a3:
ac:1f:56:62:fc:61:bc:28:65:38:89:40:1f:48:36:
98:40:d0:01:df:73:37:0e:e5:cd:a6:84:db:0b:c0:
3b:bf:4f:12:06:8b:27:e0:c9:e9:a3:c9:bb:39:ac:
e9:3b:47:8c:2d:b4:e4:28:5a:a0:f8:55:02:57:9a:
77:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:98:58:CE:93:66:25:61:FF:5B:5C:BA:F8:9D:0A:9A:E8:C9:DE:99
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/75hYzpNmJWH_W1y6-J0KmujJ3pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e04c::/48
Signature Algorithm: sha256WithRSAEncryption
83:19:7b:7d:76:ed:f8:d3:bb:c0:f5:1d:8e:b3:5a:d4:e1:f5:
81:50:a7:a1:56:bf:c4:f0:08:8a:38:9f:ae:21:05:d7:1a:f3:
cf:cd:13:c9:fe:4a:6c:2a:56:92:3b:2b:15:fc:35:51:59:be:
32:f0:30:b5:2f:4c:bf:2b:df:c9:8c:5c:6d:2e:06:db:bf:92:
45:7c:a1:4f:9e:b7:b3:fa:5a:a5:c0:cd:28:01:5f:03:3d:ed:
11:09:a6:51:8a:08:f3:45:42:f0:59:f0:45:b2:f7:d0:7b:24:
40:6c:74:2b:4c:e6:73:d3:95:7d:b5:79:7d:85:79:c6:59:48:
0d:ea:4e:f5:b5:67:d7:83:9f:9a:91:58:3c:fa:88:ec:41:aa:
c0:04:e9:3d:b4:f9:ff:15:02:88:30:ca:05:05:00:b9:85:3a:
23:d9:b8:0b:28:e2:5a:14:7d:88:0e:55:18:73:05:9e:ce:d7:
5f:01:10:e4:ab:07:f2:b4:af:04:4c:ee:7e:8c:47:7f:67:d4:
33:31:52:f2:6e:df:40:e3:4d:c7:59:02:04:96:3c:6b:5d:7c:
01:08:4d:cc:9a:a6:42:3e:9e:f4:3d:47:a2:f2:2b:7f:30:47:
d7:f2:26:56:05:1d:ec:6f:b7:ee:40:52:ae:60:48:8f:ba:d0:
29:46:88:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:33:28 2024 by rpki-client on console-fra.rpki-client.org