Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/7PufSKzERU07yrZJVYHR2nOBSn4.roa
File: 7PufSKzERU07yrZJVYHR2nOBSn4.roa (raw, json)
Hash identifier: 7qlE4j5SjeB/oEwxKx0aFcj4U9qfnJhVEQls/z6OA3Y=
Subject key identifier: EC:FB:9F:48:AC:C4:45:4D:3B:CA:B6:49:55:81:D1:DA:73:81:4A:7E
Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial: 01930DFB1E8D17DCF8CB6BAA4FDAFFB26BEE
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/7PufSKzERU07yrZJVYHR2nOBSn4.roa
Signing time: Fri 08 Nov 2024 22:53:01 +0000
ROA not before: Fri 08 Nov 2024 22:53:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213887
IP address blocks: 94.141.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0d:fb:1e:8d:17:dc:f8:cb:6b:aa:4f:da:ff:b2:6b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
Validity
Not Before: Nov 8 22:53:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecfb9f48acc4454d3bcab6495581d1da73814a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:9a:ed:e1:f8:df:ad:9c:a5:b3:49:de:5c:
00:3b:3e:17:70:2c:b6:86:8a:77:18:cb:7d:22:6b:
52:9c:ef:3a:fd:09:d4:43:04:e0:1c:f9:9b:4f:7d:
d4:d5:ab:68:e9:65:b8:dd:47:d9:1b:eb:6e:5b:42:
43:61:80:85:26:b8:73:e3:99:15:1a:5b:aa:e5:83:
8b:ef:41:71:d4:e4:a7:c6:44:0f:a2:98:5b:87:63:
46:29:c7:38:d0:8c:a9:39:70:ff:7d:a7:5b:63:cc:
0e:93:b2:d2:04:ec:69:6c:37:92:2a:10:76:bf:f8:
43:fd:18:1b:15:9e:d2:f5:79:32:32:43:25:ab:8b:
55:30:f1:54:88:d0:ba:33:0f:08:32:fe:3d:fa:00:
61:07:a6:76:c2:e2:5d:59:e0:f3:53:9e:81:04:4e:
d5:d9:2b:da:15:93:0c:9e:62:0d:f0:0a:40:08:ab:
d0:ff:c0:33:d0:7e:da:96:83:8e:e6:e4:20:d7:97:
0c:29:d4:ed:fb:7f:76:f3:25:0b:07:51:46:45:63:
0d:56:d8:72:d2:f9:1a:e9:8c:9c:c4:e2:70:31:df:
13:fa:bc:61:81:5e:de:11:6f:f7:22:2f:9e:9c:30:
4f:d2:25:e8:3f:b7:23:41:3c:7f:3d:03:e0:bb:ac:
ec:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FB:9F:48:AC:C4:45:4D:3B:CA:B6:49:55:81:D1:DA:73:81:4A:7E
X509v3 Authority Key Identifier:
keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/7PufSKzERU07yrZJVYHR2nOBSn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.123.0/24
Signature Algorithm: sha256WithRSAEncryption
10:df:41:84:76:e4:87:fa:bb:f9:41:8b:26:13:1f:42:62:76:
eb:88:b8:f3:ac:b3:f9:2b:89:d1:6d:4f:fc:fc:69:2c:59:56:
9c:42:3c:ab:41:6f:08:78:d6:b4:e3:5e:5f:85:3f:26:b5:1f:
44:a5:cb:29:64:98:26:61:20:aa:e1:02:56:69:9e:98:53:26:
5a:45:af:80:eb:d7:1d:ca:49:3a:31:81:44:cb:f7:c8:38:6b:
e1:46:05:79:00:03:15:28:c4:0e:ec:8f:a6:64:b9:f8:95:3f:
c9:6f:a4:f5:e5:3c:eb:9c:dd:01:0e:dd:97:0f:b9:74:9e:c0:
f0:ef:d4:94:16:dd:f8:7b:b0:4e:4a:62:c7:8a:bf:6f:24:6f:
a3:ef:4c:58:fd:f7:a0:56:a2:4f:73:95:20:37:77:75:44:00:
df:b3:e0:7b:08:94:50:bb:e8:6c:e3:93:5a:b3:1d:62:47:9e:
83:c0:f5:a3:2d:bd:ce:7c:b5:7f:21:66:51:44:55:28:60:54:
b2:6a:e4:1c:4d:2f:8d:e4:9e:bf:29:4f:20:f1:34:80:31:db:
2e:92:d3:da:a9:22:83:01:e6:04:a7:1d:e4:0d:e3:7c:35:d0:
07:51:03:9e:86:71:7d:5d:9b:9c:a2:f0:75:b2:45:87:05:a5:
51:99:08:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:33:26 2024 by rpki-client on console-ams.rpki-client.org