Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/f-Vs7rnuLsrknWKQtfhDSt85NIU.roa
File: f-Vs7rnuLsrknWKQtfhDSt85NIU.roa (raw, json)
Hash identifier: BxbxheNvTru18/ses951NUaWeQcsz3P7ssy3/uyosE0=
Subject key identifier: 7F:E5:6C:EE:B9:EE:2E:CA:E4:9D:62:90:B5:F8:43:4A:DF:39:34:85
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 0191A3747111467B927ED85431E0DC47D997
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/f-Vs7rnuLsrknWKQtfhDSt85NIU.roa
Signing time: Fri 30 Aug 2024 13:23:22 +0000
ROA not before: Fri 30 Aug 2024 13:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205384
IP address blocks: 2.57.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a3:74:71:11:46:7b:92:7e:d8:54:31:e0:dc:47:d9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Aug 30 13:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fe56ceeb9ee2ecae49d6290b5f8434adf393485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:32:f2:29:c7:5e:77:6f:b6:2f:c4:7c:af:
fd:48:0a:12:55:ec:1c:6b:1e:fe:46:7d:ed:8b:a8:
6e:f1:cf:14:e5:e3:03:c0:21:86:ea:d2:f4:49:0f:
df:77:3c:e8:ff:6d:fa:08:31:65:d0:61:6e:07:54:
87:fd:69:11:a1:87:03:b6:91:fb:5c:5f:1c:2f:df:
44:e4:a6:b0:07:67:89:c7:83:f4:d1:7c:19:9a:b0:
c5:92:4b:74:5b:c8:22:6d:9b:ff:7b:b6:d5:d1:a5:
2e:63:1a:bd:c4:28:4c:62:e7:10:09:0a:29:23:9a:
06:2c:70:19:d2:e1:7c:29:2d:99:60:84:ab:e8:e8:
a7:6a:f5:4d:c8:96:20:90:fc:99:09:00:5e:76:a2:
c3:8a:86:30:3d:b9:a8:12:e7:09:2a:c2:d4:fa:14:
92:7f:17:4c:80:8e:54:de:2f:4a:fc:a2:50:05:4e:
1b:10:2d:f2:29:12:12:37:dd:43:ac:31:4d:dd:34:
4b:4f:74:c3:9a:2c:9a:f8:07:a0:c4:9c:ab:a0:ff:
fe:5d:b8:5c:c7:f4:25:52:9b:3e:66:1d:e8:d4:08:
9b:72:e0:b8:20:a3:64:58:40:28:cc:df:71:8a:a6:
f5:6e:cc:67:93:f4:12:cd:94:5e:c1:1c:8b:6d:4c:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E5:6C:EE:B9:EE:2E:CA:E4:9D:62:90:B5:F8:43:4A:DF:39:34:85
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/f-Vs7rnuLsrknWKQtfhDSt85NIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.10.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:c0:e7:8d:8c:79:0c:d2:05:b0:72:de:b2:4f:9e:7c:9f:8b:
4c:b1:74:40:ab:37:84:df:b7:6e:bd:75:e4:43:a5:52:40:b6:
fd:6e:22:21:7d:57:ee:ce:5a:3a:bc:63:84:54:58:5f:dc:b4:
25:1c:44:d8:2f:b3:9e:7e:50:55:0c:e5:da:01:a8:c7:70:fd:
7b:cf:b1:8f:49:0a:20:27:91:93:99:79:9c:06:de:4c:b3:27:
72:34:1c:f5:80:56:68:c3:64:fd:9e:f8:74:28:00:cf:9e:2f:
4c:32:23:01:25:e4:3d:49:2b:49:ca:b9:62:e9:f9:23:fe:5e:
d2:57:7a:0b:79:80:73:96:c7:82:74:ca:74:56:78:a3:05:9b:
69:8e:5e:84:c8:bd:b1:48:2f:26:5a:34:bb:e9:a7:41:0d:e0:
fd:20:41:df:b3:fc:d2:b8:7a:e4:6a:de:b5:b7:ca:70:02:d9:
3d:3e:43:60:0d:86:5f:18:75:49:ad:e1:d5:e7:9c:35:2d:ad:
24:df:ed:9c:00:04:15:7f:58:5e:b8:88:bc:f2:23:e2:b6:0a:
e8:94:aa:1c:d3:17:fb:dd:cf:f5:a0:f3:c6:ac:4c:5c:5a:b3:
c4:30:5e:45:16:57:91:4f:04:78:3c:d9:f8:b3:24:f6:e0:9d:
6b:14:a5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:40:46 2024 by rpki-client on console-fra.rpki-client.org