Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/ePq15_GWZuTYXrCH6f9gp-FHmCI.roa
File: ePq15_GWZuTYXrCH6f9gp-FHmCI.roa (raw, json)
Hash identifier: ksagnwLSJiHwzYFeXNFfbZpnPImGwiWLXsRWPSuzpzA=
Subject key identifier: 78:FA:B5:E7:F1:96:66:E4:D8:5E:B0:87:E9:FF:60:A7:E1:47:98:22
Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial: 01917F585BB5427BD876728A272FF19AC24E
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/ePq15_GWZuTYXrCH6f9gp-FHmCI.roa
Signing time: Fri 23 Aug 2024 13:06:22 +0000
ROA not before: Fri 23 Aug 2024 13:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47708
IP address blocks: 134.25.0.0/16 maxlen: 16
2001:67c:d8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7f:58:5b:b5:42:7b:d8:76:72:8a:27:2f:f1:9a:c2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Validity
Not Before: Aug 23 13:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78fab5e7f19666e4d85eb087e9ff60a7e1479822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2a:af:76:37:ad:5a:19:b9:c8:e7:44:e7:ac:
ef:7b:db:f2:63:64:9c:ad:7f:c9:4d:40:27:b8:eb:
c6:cc:db:57:ed:6e:db:5e:b4:68:ff:f2:dc:a2:e4:
02:b3:86:e6:b6:2d:5a:a1:89:f6:b9:85:71:dd:e5:
da:07:33:45:47:e9:08:fc:97:7e:43:7e:9c:1c:a9:
27:9b:2d:bc:30:b7:11:1d:8b:66:c4:0b:4a:aa:93:
74:30:88:a7:68:ea:8e:00:91:f4:1f:87:fa:40:79:
58:20:ee:1a:20:15:0f:8c:77:cc:53:b7:2b:2c:bd:
58:37:7e:bb:9e:7a:ec:f3:22:a7:7b:ae:61:fa:48:
44:a0:4d:34:9c:62:1f:af:a9:a7:38:85:80:23:e0:
07:8f:e9:2e:bd:44:ff:60:7d:92:cb:62:2f:1e:56:
96:19:13:d8:4f:f4:25:e9:b4:1c:b0:cb:0c:d0:01:
49:fc:25:7c:ee:64:ad:3a:ab:33:88:18:91:9b:63:
58:11:ea:c7:b9:36:59:6d:68:08:ba:90:47:37:e7:
40:e2:5b:16:b8:8b:4f:8a:1f:8f:0e:12:21:08:d3:
2e:31:0f:bb:fd:be:d6:27:0a:ba:28:c1:e3:5d:05:
0c:41:9b:d8:65:45:ac:d1:fa:44:a5:2f:ad:23:f5:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FA:B5:E7:F1:96:66:E4:D8:5E:B0:87:E9:FF:60:A7:E1:47:98:22
X509v3 Authority Key Identifier:
keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/ePq15_GWZuTYXrCH6f9gp-FHmCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.25.0.0/16
IPv6:
2001:67c:d8::/48
Signature Algorithm: sha256WithRSAEncryption
04:b2:39:7b:d6:0c:ee:31:92:97:71:0e:4d:2d:05:03:5f:df:
48:98:25:70:36:1f:cf:e3:7e:d7:0d:25:a7:43:d7:0a:60:81:
0f:a5:87:39:47:05:16:8d:df:53:93:fc:50:0c:02:0d:f8:77:
2d:4e:1e:7d:21:a3:c0:45:d5:e5:27:1a:cf:3f:20:eb:1f:79:
c7:a9:57:7a:aa:b6:64:26:e3:d2:8d:b3:ce:e1:2a:26:23:3d:
85:54:12:b3:2e:9f:b5:e1:f5:bb:3c:ae:64:38:ad:e7:42:1e:
86:86:37:78:aa:08:7e:14:48:1e:05:dc:7d:04:9d:70:ec:2d:
29:1f:42:8a:cb:50:07:cf:59:81:20:c6:e2:06:a1:f7:5e:2a:
69:1d:3e:a7:39:c6:2f:b4:99:18:00:4b:ee:fb:6a:7e:6f:72:
2b:30:51:19:4b:3c:78:94:1d:28:b6:5d:98:c0:a5:64:ed:a7:
6b:f0:3a:14:13:02:78:09:d0:7b:dc:eb:18:cf:14:43:b8:c8:
b5:2b:32:f8:83:0c:72:82:eb:99:ff:07:91:2a:69:a4:2e:95:
36:ca:a1:bf:26:90:6a:d9:25:a9:0b:88:96:c7:bb:0f:9e:0a:
42:9b:d8:ad:13:83:5e:3c:27:f4:33:a1:33:82:54:90:92:6d:
37:ef:c2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:57 2024 by rpki-client on console-fra.rpki-client.org