Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/EFpi4KKTTEXliGuH2O4gb48_iRY.roa
File: EFpi4KKTTEXliGuH2O4gb48_iRY.roa (raw, json)
Hash identifier: rRZj1LGSDs4ENsQag5aXpS/nsDVst1IDg16EvpaSu/Y=
Subject key identifier: 10:5A:62:E0:A2:93:4C:45:E5:88:6B:87:D8:EE:20:6F:8F:3F:89:16
Certificate issuer: /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Certificate serial: 018CC56E106267861D052F1CE7841930D469
Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/EFpi4KKTTEXliGuH2O4gb48_iRY.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60271
IP address blocks: 2a13:75c1:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:10:62:67:86:1d:05:2f:1c:e7:84:19:30:d4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=105a62e0a2934c45e5886b87d8ee206f8f3f8916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8b:80:1c:3a:57:ac:1e:07:05:2c:2c:ce:55:
fc:f1:18:a2:41:0a:ab:1e:29:dc:a9:40:f0:86:ce:
98:7a:cb:ed:fe:6e:81:ce:74:f0:bb:94:8f:e0:cf:
66:e2:07:95:86:32:aa:0a:1e:4d:2a:5e:c6:e8:f1:
37:3e:2e:f5:51:a3:7b:2b:23:b3:a2:37:91:52:bd:
a2:d8:8c:6c:b7:91:09:01:5d:98:95:78:81:7f:36:
a5:2f:23:fb:22:d8:bb:80:c7:33:81:e6:70:f8:16:
6b:36:c9:b6:24:d7:a3:79:69:a7:9d:51:7a:c3:7c:
05:55:6b:16:f5:56:7d:1b:77:3f:0c:f5:b9:55:3c:
0a:30:12:b9:5f:46:03:2a:43:30:16:2f:81:17:bc:
c7:ce:f2:76:ef:52:b6:dc:66:d7:03:2c:80:4b:ae:
2c:6a:28:13:65:6a:34:8e:3d:ed:29:6f:fc:72:59:
de:3d:74:75:cc:66:05:e3:0e:84:00:9c:b0:4e:bd:
a5:05:9d:9c:be:d2:a4:ae:b3:30:50:4d:4f:7f:e6:
00:65:63:6e:d1:08:45:0d:7a:01:65:08:be:0d:98:
23:bc:25:98:a7:17:52:99:1f:f3:ba:6c:60:28:f1:
c5:c9:74:a3:34:da:16:88:80:73:1c:a7:7e:ed:ed:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5A:62:E0:A2:93:4C:45:E5:88:6B:87:D8:EE:20:6F:8F:3F:89:16
X509v3 Authority Key Identifier:
keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/EFpi4KKTTEXliGuH2O4gb48_iRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:75c1:1000::/36
Signature Algorithm: sha256WithRSAEncryption
8c:e2:5f:4f:a1:52:18:c9:a8:7f:d3:08:5a:3b:48:d1:43:b3:
cb:8f:99:e2:ed:b8:3f:f3:69:0c:12:ec:3b:57:1e:8d:d8:b8:
ee:ff:dc:00:e5:6b:3c:02:31:28:4a:81:b8:43:f7:9a:68:55:
72:61:98:0b:db:68:eb:d2:83:b1:8b:88:b4:99:65:11:aa:1a:
a8:61:6d:8a:1a:6b:cc:96:01:87:76:c2:05:74:d6:ac:ad:36:
7e:bf:bb:55:e7:76:47:03:3e:46:38:1e:53:fc:7e:78:73:0c:
75:c2:84:40:1c:e7:af:94:4d:46:50:19:92:9c:30:6e:f9:4d:
2d:25:f0:fe:0f:b1:1f:9c:bc:6c:28:34:64:4b:62:bd:24:44:
5e:e2:6b:a6:64:91:72:fa:3b:51:f5:cb:f6:a3:b7:a8:db:dd:
26:3b:af:6f:fb:3d:d4:ea:e7:2d:3b:26:6e:f9:e2:09:6c:0f:
0a:e6:d9:22:17:b7:d1:4c:56:5a:4d:0c:ca:6f:14:90:2b:87:
76:13:cf:c9:41:bb:10:74:83:7d:dd:4b:ef:25:52:ee:de:60:
6e:9c:ff:5a:1a:f3:a7:97:0b:65:b0:e3:fd:a3:30:3b:57:e5:
9b:08:1c:97:f7:fa:7c:21:b7:89:a3:c8:e7:43:43:89:a9:75:
7e:39:86:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 06:11:23 2024 by rpki-client on console-fra.rpki-client.org