Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/ebX-teiHx_Dv67Aie7dNu_KEeXc.roa
File: ebX-teiHx_Dv67Aie7dNu_KEeXc.roa (raw, json)
Hash identifier: bXQp+DNE9aano7ip7cBXkhi36zjqciXX2GT/gswonj4=
Subject key identifier: 79:B5:FE:B5:E8:87:C7:F0:EF:EB:B0:22:7B:B7:4D:BB:F2:84:79:77
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018CC2DB0E03E417242ED13D72E0B0354757
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/ebX-teiHx_Dv67Aie7dNu_KEeXc.roa
Signing time: Mon 01 Jan 2024 02:29:45 +0000
ROA not before: Mon 01 Jan 2024 02:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215995
IP address blocks: 2a0f:5707:cf80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:0e:03:e4:17:24:2e:d1:3d:72:e0:b0:35:47:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79b5feb5e887c7f0efebb0227bb74dbbf2847977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:21:83:b3:72:d7:93:2e:8a:a8:14:d1:62:b6:
e0:07:2a:30:4d:12:08:fb:53:7b:85:88:68:23:1a:
51:6b:00:8a:4f:3d:a5:8c:9d:bf:19:13:1f:8b:00:
4f:80:46:35:2f:3a:fd:df:8e:33:a8:3e:af:70:a5:
10:12:85:1b:c6:20:61:04:97:bc:5a:3e:86:d8:9a:
99:cc:b3:bb:30:2a:e9:7b:d8:d3:be:1b:ed:a3:20:
f1:d3:a2:de:4e:eb:22:3f:b6:e1:72:9f:e1:45:65:
e1:cd:cd:ee:fe:85:ec:89:e8:2f:3d:5c:1c:db:ec:
ca:18:fb:c4:14:31:eb:a8:88:60:bc:e4:3f:79:9f:
fb:21:f7:68:06:7c:7a:89:69:26:80:a3:fb:0b:8e:
eb:4b:a4:36:38:62:19:9d:4f:fd:c6:c3:c7:84:47:
78:57:5d:c3:7a:8a:ad:eb:1c:7a:64:d3:a5:ed:0a:
62:2f:21:1a:33:5a:b5:66:8b:8b:b9:28:f8:99:57:
36:84:62:6e:31:8e:76:0a:45:4d:d9:13:29:07:79:
f8:c9:5f:ef:70:f4:80:2f:1a:60:ea:7c:bc:05:11:
7e:33:56:9d:fe:df:c8:f9:cd:93:5e:0b:85:b1:98:
ed:02:94:ea:8a:13:e0:c1:25:6c:a1:3b:5a:90:8f:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B5:FE:B5:E8:87:C7:F0:EF:EB:B0:22:7B:B7:4D:BB:F2:84:79:77
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/ebX-teiHx_Dv67Aie7dNu_KEeXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:cf80::/48
Signature Algorithm: sha256WithRSAEncryption
10:2b:96:47:dd:55:60:ef:56:c0:0b:74:e9:ac:48:62:de:cb:
df:2d:5d:92:4e:14:48:df:1e:09:ab:bf:04:b2:80:ee:5c:fa:
55:ac:52:d3:34:6d:38:0c:f3:18:ef:23:21:6c:f8:cc:14:63:
ca:0b:f8:60:ca:cb:62:d5:9e:3f:c4:ce:ad:e3:ce:37:88:ce:
a6:dd:e9:94:8d:7e:ef:e8:93:29:c4:f3:89:f9:32:fc:94:95:
0d:d2:45:e0:cd:81:4f:03:48:d8:3d:3c:d7:a6:c7:1f:7e:c7:
b2:41:7c:d1:dc:91:40:58:e1:b0:9b:0f:08:b6:b8:22:33:2d:
11:78:b4:c4:2f:8b:55:05:57:67:40:97:cb:27:77:06:d4:24:
b4:be:ea:4c:21:80:a8:73:ba:fd:a9:a2:7d:53:27:59:bf:ca:
b5:08:c6:ca:6e:09:d4:da:7a:03:66:65:6d:70:de:f7:14:39:
f0:a8:57:2b:40:1f:af:1d:f9:60:d2:a9:52:8b:03:da:58:99:
6c:bf:d5:43:d6:d7:01:c1:1a:3f:9a:51:47:7a:b2:4b:c4:92:
33:31:ab:5c:5d:e1:93:2d:58:49:99:f3:ae:25:66:19:c3:c7:
b8:07:bb:26:3b:f2:f7:25:82:1f:f9:6c:d0:f8:0e:45:e7:ad:
c3:2a:fd:8c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzC2w4D5BckLtE9cuCwNUdXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk
NWFlZjAwHhcNMjQwMTAxMDIyOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWI1ZmViNWU4ODdjN2YwZWZlYmIwMjI3YmI3NGRiYmYyODQ3OTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iGDs3LXky6KqBTRYrbgByowTRII
+1N7hYhoIxpRawCKTz2ljJ2/GRMfiwBPgEY1Lzr9344zqD6vcKUQEoUbxiBhBJe8
Wj6G2JqZzLO7MCrpe9jTvhvtoyDx06LeTusiP7bhcp/hRWXhzc3u/oXsiegvPVwc
2+zKGPvEFDHrqIhgvOQ/eZ/7IfdoBnx6iWkmgKP7C47rS6Q2OGIZnU/9xsPHhEd4
V13Deoqt6xx6ZNOl7QpiLyEaM1q1ZouLuSj4mVc2hGJuMY52CkVN2RMpB3n4yV/v
cPSALxpg6ny8BRF+M1ad/t/I+c2TXguFsZjtApTqihPgwSVsoTtakI+H+QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHm1/rXoh8fw7+uwInu3TbvyhHl3MB8GA1UdIwQY
MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt
Y2MxYzliNWY2NjQwLzEvZWJYLXRlaUh4X0R2NjdBaWU3ZE51X0tFZVhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw
LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9XB8+A
MA0GCSqGSIb3DQEBCwUAA4IBAQAQK5ZH3VVg71bAC3TprEhi3svfLV2SThRI3x4J
q78EsoDuXPpVrFLTNG04DPMY7yMhbPjMFGPKC/hgysti1Z4/xM6t4843iM6m3emU
jX7v6JMpxPOJ+TL8lJUN0kXgzYFPA0jYPTzXpscffseyQXzR3JFAWOGwmw8Itrgi
My0ReLTEL4tVBVdnQJfLJ3cG1CS0vupMIYCoc7r9qaJ9UydZv8q1CMbKbgnU2noD
ZmVtcN73FDnwqFcrQB+vHflg0qlSiwPaWJlsv9VD1tcBwRo/mlFHerJLxJIzMatc
XeGTLVhJmfOuJWYZw8e4B7smO/L3JYIf+WzQ+A5F563DKv2M
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:36:28 2024 by rpki-client on console-fra.rpki-client.org