Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/2LtDy7PKz6Y8Ts9zjqnV8muRrgI.roa
File: 2LtDy7PKz6Y8Ts9zjqnV8muRrgI.roa (raw, json)
Hash identifier: XbrfRE/Rnom0Vs3tdUAPOsDLOfOk+nGJGyqcNVQAG9g=
Subject key identifier: D8:BB:43:CB:B3:CA:CF:A6:3C:4E:CF:73:8E:A9:D5:F2:6B:91:AE:02
Certificate issuer: /CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
Certificate serial: 018CC7276FB85533C4DDE738EF4EBC768EE5
Authority key identifier: ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/2LtDy7PKz6Y8Ts9zjqnV8muRrgI.roa
Signing time: Mon 01 Jan 2024 22:31:39 +0000
ROA not before: Mon 01 Jan 2024 22:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215988
IP address blocks: 2a14:4d00::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6f:b8:55:33:c4:dd:e7:38:ef:4e:bc:76:8e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
Validity
Not Before: Jan 1 22:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8bb43cbb3cacfa63c4ecf738ea9d5f26b91ae02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:04:76:ea:7b:9e:90:33:91:a9:0f:e3:f4:4e:
3a:83:3c:c5:47:a5:a4:83:4f:6f:a8:05:c3:05:ae:
3e:1b:7c:58:57:da:ea:53:19:5c:ee:a1:85:45:61:
78:d1:c6:ce:93:4f:69:67:1f:50:23:bc:ed:ee:cb:
47:36:b5:d8:ae:54:2b:5e:45:0d:06:7f:6a:3a:a4:
48:c5:0b:75:67:5e:14:e6:84:28:b9:be:41:38:a5:
86:af:01:1f:0b:4b:f2:d5:88:fe:78:a8:93:b3:fa:
b4:7d:9c:1a:2b:c5:b9:8b:00:1d:dc:53:82:70:22:
eb:a6:e2:cd:46:08:8f:9a:5e:8c:11:4a:77:8e:0a:
f9:4e:cb:7a:20:4c:21:82:4d:75:6e:c0:8e:2d:27:
4f:08:c7:ca:c8:8e:4f:2d:83:17:85:71:49:41:ab:
ca:d1:f6:bd:95:1c:ea:f9:20:dc:cf:d7:8a:7e:1a:
ae:d7:9a:9a:c8:d5:e7:81:5a:8f:c1:0c:45:8f:5d:
93:38:92:56:f9:0f:de:f0:75:d5:d9:a2:f9:eb:73:
ec:41:1f:e0:79:31:1b:dc:51:c6:04:9c:c3:1b:eb:
00:b3:11:ae:da:f5:f8:43:85:6d:74:e8:68:bc:52:
54:0b:ad:d2:19:f4:7a:9a:f2:eb:ef:f5:10:69:a0:
0a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BB:43:CB:B3:CA:CF:A6:3C:4E:CF:73:8E:A9:D5:F2:6B:91:AE:02
X509v3 Authority Key Identifier:
keyid:ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/2LtDy7PKz6Y8Ts9zjqnV8muRrgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4d00::/29
Signature Algorithm: sha256WithRSAEncryption
10:95:96:a8:ec:d9:ff:35:f7:23:41:64:51:0a:fb:7c:05:3e:
30:49:1b:8b:1c:06:95:89:88:df:28:01:db:b0:af:f3:d8:eb:
fe:ad:fe:99:b3:e3:2d:f1:7c:03:8e:68:f4:21:fc:eb:a8:50:
17:21:29:cd:14:cf:75:07:92:dd:e7:9e:36:f8:d7:ea:a2:65:
b3:cc:08:d4:83:b1:d8:89:f4:d1:79:0e:a9:3c:a3:30:fb:e1:
46:a6:6f:f6:74:15:b6:6b:6d:eb:b0:5b:7b:7d:4f:f9:9a:bc:
b4:6f:15:21:c4:f0:17:5f:8c:4f:4b:9a:e3:52:96:85:74:fa:
15:94:38:cd:37:f9:14:b2:4b:d4:90:0e:07:5f:11:33:f7:2a:
54:4f:1e:40:1d:f6:34:e5:c4:6a:e8:7b:79:77:75:11:be:05:
77:e6:1b:9e:52:4c:e6:9b:1d:77:cb:18:e9:9f:f5:69:c1:ec:
5f:1e:2a:d3:86:1f:ef:70:38:59:de:78:cc:ee:4f:9b:28:63:
35:67:fc:08:72:a6:15:45:d1:76:56:e0:88:f5:86:ca:05:dd:
2e:94:2e:eb:61:1e:9c:92:01:8e:8d:ff:4e:a6:ad:66:be:0c:
44:35:9c:25:7a:f1:38:52:8c:ff:72:a2:70:0b:74:0c:d2:bf:
3c:34:b9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:03:13 2024 by rpki-client on console-fra.rpki-client.org