Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7YyKIjBwD8QDYM9bdZeMGEW4YVY.roa
File: 7YyKIjBwD8QDYM9bdZeMGEW4YVY.roa (raw, json)
Hash identifier: 2cM4Xsv88gW1mLX8HtLQo8nMOZVIJFRCFc1MLCpHfok=
Subject key identifier: ED:8C:8A:22:30:70:0F:C4:03:60:CF:5B:75:97:8C:18:45:B8:61:56
Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial: 018CC94E1ABB6F5EBD7A709353415B5CFF63
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7YyKIjBwD8QDYM9bdZeMGEW4YVY.roa
Signing time: Tue 02 Jan 2024 08:33:08 +0000
ROA not before: Tue 02 Jan 2024 08:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396253
IP address blocks: 2a03:b8c0:1b::/48 maxlen: 48
2a03:b8c0:1e::/48 maxlen: 48
2a03:b8c0:19::/48 maxlen: 48
2a03:b8c0:21::/48 maxlen: 48
2a03:b8c0:29::/48 maxlen: 48
2a03:b8c0:1c::/48 maxlen: 48
2a03:b8c0:24::/48 maxlen: 48
2a03:b8c0:2a::/48 maxlen: 48
2a03:b8c0:1a::/48 maxlen: 48
2a03:b8c0:22::/48 maxlen: 48
2a03:b8c0:15::/48 maxlen: 48
2a03:b8c0:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:1a:bb:6f:5e:bd:7a:70:93:53:41:5b:5c:ff:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
Validity
Not Before: Jan 2 08:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed8c8a2230700fc40360cf5b75978c1845b86156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:68:d2:b7:08:92:3b:4c:d4:e8:b9:03:78:
0a:37:e5:86:f7:b4:37:3e:8e:bc:e0:58:f0:1e:67:
a0:07:35:8c:9e:4c:b0:02:ec:10:af:b6:89:2c:e7:
00:76:10:7c:31:e5:7b:d1:ee:68:c5:02:9f:a3:34:
52:53:71:b5:b7:72:b8:b4:0f:3b:ec:7a:13:cc:6f:
86:ef:35:07:8a:73:75:12:9a:0d:a5:4e:b9:85:83:
e7:b7:67:66:89:cc:33:25:ee:74:88:7e:b5:fe:af:
5c:ef:b8:c5:22:06:33:49:41:27:86:67:4f:4c:f4:
b0:77:9e:b7:fd:ee:ea:81:c2:b0:01:77:a9:a0:47:
ca:a9:45:8e:eb:27:ad:ce:46:32:45:16:d7:30:02:
85:0c:6c:35:ba:a7:8d:5e:88:a2:2a:c4:fe:85:26:
7d:ad:0f:18:25:e7:31:a0:26:1f:7c:77:8f:74:c2:
1f:54:48:4e:d4:17:ba:5a:dd:99:80:64:6c:2b:de:
2b:89:ee:2a:c7:65:bd:f9:9a:b4:1e:dd:d5:d2:20:
b7:41:11:eb:1c:60:e9:a3:f2:5d:93:6c:cc:ce:8e:
5b:fe:ee:3c:75:1c:17:95:d7:d7:c0:43:92:eb:0c:
1c:12:98:21:77:1e:78:aa:71:ec:70:22:b5:7e:2b:
92:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8C:8A:22:30:70:0F:C4:03:60:CF:5B:75:97:8C:18:45:B8:61:56
X509v3 Authority Key Identifier:
keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7YyKIjBwD8QDYM9bdZeMGEW4YVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:b8c0:15::/48
2a03:b8c0:19::-2a03:b8c0:1c:ffff:ffff:ffff:ffff:ffff
2a03:b8c0:1e::/48
2a03:b8c0:20::-2a03:b8c0:22:ffff:ffff:ffff:ffff:ffff
2a03:b8c0:24::/48
2a03:b8c0:29::-2a03:b8c0:2a:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5b:8f:26:5a:6a:4a:27:7d:ea:e2:39:13:2a:b6:24:02:7e:57:
65:d7:06:a3:60:b8:bb:f2:30:e5:74:3b:f4:d3:17:a8:34:68:
7f:ef:fa:a2:de:fa:fe:87:43:56:e5:e5:c1:45:9a:3f:6a:61:
86:12:42:97:c6:f3:41:c3:90:85:af:28:96:91:64:3f:cc:1c:
1d:b3:97:ca:e9:4a:5c:19:d6:16:fc:05:98:35:8b:1a:3b:41:
9f:44:59:c7:80:e5:eb:8f:bc:e1:c7:7c:66:53:4b:78:9e:27:
87:51:0b:1e:45:a5:d7:b8:6c:3d:59:1f:ff:56:f0:d4:81:6e:
12:9f:7a:92:11:ad:b1:84:01:2d:12:ea:71:b5:96:f2:80:d0:
41:9c:9d:5a:50:99:4b:ef:6e:67:1c:fd:c2:f3:2f:fe:ba:a3:
ad:f7:06:aa:6e:c3:d8:4b:f5:ca:e5:5a:e7:d4:6b:77:46:b4:
06:81:a4:4f:fe:61:ed:dc:35:49:5c:a5:d4:40:1d:e8:fd:b5:
e5:d3:d3:27:5b:bf:8b:99:6b:1d:75:7a:93:c5:f9:89:23:26:
0c:d0:6c:8e:d3:1a:28:7b:ac:b0:41:6a:79:65:ae:53:1e:b7:
aa:6f:1b:32:12:a7:79:8f:99:5d:6d:b3:d9:0a:5a:1e:e4:6d:
c5:be:5f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:28:07 2024 by rpki-client on console-fra.rpki-client.org