Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/eh2BSnNDXx41FEXbDV8ULInuLWI.roa
File: eh2BSnNDXx41FEXbDV8ULInuLWI.roa (raw, json)
Hash identifier: 7l4u6AywmuvOLBschjBB2FyGGckffiZbYTBdv+G3ZDE=
Subject key identifier: 7A:1D:81:4A:73:43:5F:1E:35:14:45:DB:0D:5F:14:2C:89:EE:2D:62
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 018CC49358A2F9C6E555F2D40B33F03AAF94
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/eh2BSnNDXx41FEXbDV8ULInuLWI.roa
Signing time: Mon 01 Jan 2024 10:30:39 +0000
ROA not before: Mon 01 Jan 2024 10:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61050
IP address blocks: 2a00:ece1:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:58:a2:f9:c6:e5:55:f2:d4:0b:33:f0:3a:af:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 1 10:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a1d814a73435f1e351445db0d5f142c89ee2d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:29:6e:9c:5c:5b:27:7b:49:39:12:cb:38:
8c:88:db:b9:a6:28:7f:cc:d1:7e:bd:ff:9c:34:09:
01:6b:a5:89:ef:41:eb:a7:4a:f7:4b:be:ea:e4:ce:
a7:63:e2:4a:c2:2f:39:c3:2c:6c:13:2f:cc:b4:15:
1c:42:d7:b4:f6:c4:c8:58:0c:78:21:46:73:a4:16:
1e:85:72:db:b4:ad:68:7b:95:3a:f0:3a:a6:21:33:
30:cf:52:7b:18:07:16:52:95:72:7b:53:3e:b3:10:
25:14:86:d2:4b:c5:0f:37:74:12:45:5f:8a:5d:ae:
5a:70:a1:2f:42:05:09:fa:74:7f:5e:b2:4d:64:e7:
36:92:0c:22:ac:29:5c:0f:35:dd:d1:86:73:a4:df:
25:2e:4b:ec:bb:65:3f:08:b5:ce:e2:9f:16:f6:e7:
3a:82:10:62:01:7f:04:5c:4f:cd:cf:42:9c:3a:2d:
84:02:a7:f6:d4:1a:7a:c9:9f:26:f8:35:7c:41:2d:
63:1e:db:2b:81:10:87:ed:7d:17:d4:9e:2c:fb:76:
1a:c6:95:8f:3b:f3:e7:31:e6:4a:8c:09:b7:07:a7:
17:52:56:88:0d:7b:ea:00:fa:2c:5b:15:0f:ba:2c:
7f:3d:ac:50:7f:c1:66:04:62:d9:d1:30:f1:4c:c4:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1D:81:4A:73:43:5F:1E:35:14:45:DB:0D:5F:14:2C:89:EE:2D:62
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/eh2BSnNDXx41FEXbDV8ULInuLWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ece1:1::/48
Signature Algorithm: sha256WithRSAEncryption
8c:13:5c:d2:fb:a8:29:f6:fc:08:1a:6b:97:4b:9f:aa:b7:2f:
78:f2:92:2d:a1:c4:36:2a:78:74:34:12:85:17:70:b3:0c:20:
2a:00:ad:14:5e:d8:62:7b:96:3e:41:51:6d:c1:0b:e7:e2:4e:
a3:2d:1f:96:4e:d2:8b:79:45:f4:01:b0:c5:fe:95:a6:18:06:
3d:93:b1:66:d6:4b:31:58:17:53:66:4b:82:52:35:ca:00:20:
78:0b:f6:a4:a9:79:1a:1a:88:77:b6:15:3b:60:30:0e:73:b3:
b0:b6:6a:d7:06:cd:8c:11:73:ec:1d:33:4e:98:be:7f:ab:8e:
a3:e1:ee:ca:27:79:81:71:e1:e1:54:68:44:50:de:99:53:39:
73:40:e8:08:b0:3f:f0:52:8e:f1:a1:2c:46:87:a4:f0:c9:2e:
db:49:83:3e:14:de:18:2c:80:4d:9b:07:98:e5:e8:e2:2c:1a:
1d:04:73:f4:7d:e4:81:ad:96:93:54:42:28:1b:cc:49:0d:d7:
59:2a:ce:69:c5:bf:a8:e7:58:e9:d8:8f:86:5b:d4:d9:60:16:
b3:dd:aa:9f:de:a2:04:8a:6d:10:a3:48:36:ea:a9:ce:94:bc:
d9:17:06:70:22:38:76:ce:74:be:71:e1:bc:d2:2c:ef:ef:ff:
ea:3a:9f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:13:24 2024 by rpki-client on console-fra.rpki-client.org