Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/7rmx-UF_TdbW1-DDi4cy1z0gnlk.roa
File: 7rmx-UF_TdbW1-DDi4cy1z0gnlk.roa (raw, json)
Hash identifier: OWHfaOCE4xxMIAgf8SXW+zMS/Kr2W2vUP5inTUSBN94=
Subject key identifier: EE:B9:B1:F9:41:7F:4D:D6:D6:D7:E0:C3:8B:87:32:D7:3D:20:9E:59
Certificate issuer: /CN=b5b537918dd90251eb36538e7181ce933c7ef845
Certificate serial: 018CC34942AE0C045B68C1A9D6F18A49190C
Authority key identifier: B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/7rmx-UF_TdbW1-DDi4cy1z0gnlk.roa
Signing time: Mon 01 Jan 2024 04:30:07 +0000
ROA not before: Mon 01 Jan 2024 04:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207394
IP address blocks: 2001:67c:25ec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:42:ae:0c:04:5b:68:c1:a9:d6:f1:8a:49:19:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b537918dd90251eb36538e7181ce933c7ef845
Validity
Not Before: Jan 1 04:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eeb9b1f9417f4dd6d6d7e0c38b8732d73d209e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8c:d1:e1:3e:de:81:0a:df:78:b5:17:6b:2f:
a2:cc:ca:38:28:5b:18:da:cf:e8:4d:46:fc:60:ce:
36:3e:d3:13:1a:27:18:93:f3:7b:64:bb:5a:58:7d:
fb:0a:48:e2:e0:28:18:4f:6c:1c:c5:85:50:64:fd:
19:02:b5:4c:53:90:7e:0c:f3:86:41:08:ff:18:9e:
ca:16:e8:d1:8d:34:de:c9:de:83:37:fa:a6:2a:17:
b9:44:8b:72:ba:d5:4a:f0:0b:aa:ec:35:f8:d0:06:
4f:13:f4:9e:80:b6:dc:d0:08:8b:f7:0d:38:54:fb:
68:e6:4a:ce:b4:3b:f9:ba:7f:8b:6e:93:af:24:a4:
dd:df:79:81:c5:c6:7d:c7:19:3a:7e:28:74:63:4d:
2a:cb:7f:8a:b6:76:44:49:28:4f:af:a4:30:69:dd:
49:2a:2b:05:62:e8:23:ad:11:0d:ef:44:16:ce:a5:
39:52:fb:46:0a:4c:0f:7f:02:7b:0f:2d:42:74:91:
99:2d:a2:a5:e5:78:ab:71:89:32:c4:7a:e5:1b:8a:
a0:a7:0f:9d:da:91:bd:a2:57:44:be:4a:6c:87:fe:
6a:e7:db:24:36:7c:78:65:21:02:54:64:1f:4c:76:
09:24:43:e6:84:db:c3:b7:13:07:6b:21:eb:d2:e5:
7e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B9:B1:F9:41:7F:4D:D6:D6:D7:E0:C3:8B:87:32:D7:3D:20:9E:59
X509v3 Authority Key Identifier:
keyid:B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/7rmx-UF_TdbW1-DDi4cy1z0gnlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:25ec::/48
Signature Algorithm: sha256WithRSAEncryption
a1:30:42:9d:b1:59:14:dc:4e:ee:da:4e:2b:e4:ed:3f:5e:83:
1e:6d:f5:d7:a7:2d:ce:91:b4:b0:35:9f:12:04:51:56:74:8b:
8a:31:3e:fd:4a:c4:bb:68:da:fa:16:48:cc:35:19:0a:13:cf:
d9:42:ff:a7:68:f1:d9:b3:26:94:92:fb:68:36:1f:41:bd:bd:
82:fe:ba:01:6d:48:35:9f:1f:6f:bf:48:2f:bf:b8:14:ac:23:
f5:5c:4c:5b:2c:23:01:fb:38:a9:97:5b:82:bf:f3:25:2e:29:
e1:29:84:c4:07:3e:17:94:26:d4:70:20:f9:b5:3a:33:af:6f:
06:0b:62:87:33:07:f2:05:f9:91:8f:f0:0c:65:0b:35:53:94:
13:c0:49:66:57:3f:82:5c:2a:35:f8:0e:f9:46:e7:e5:3e:b1:
1c:5b:7d:cf:20:d9:c4:03:5b:3c:0f:8d:73:d0:5c:6a:55:03:
c9:82:24:44:ee:83:3f:ad:ab:eb:87:f4:e3:be:e3:c5:24:01:
4b:02:f6:80:7f:d5:98:50:30:44:44:cc:ef:1d:bc:be:f3:af:
b0:2c:6b:13:e1:c1:a9:18:ed:fa:f9:5a:15:35:aa:23:37:20:
8e:79:7d:34:45:b0:a0:7d:62:bf:33:a8:3f:b8:3c:d6:1a:dc:
fa:4c:5b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:07:29 2024 by rpki-client on console-fra.rpki-client.org