Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/69vpNJWYWZ1E-TGjBokCUMepuxs.roa
File: 69vpNJWYWZ1E-TGjBokCUMepuxs.roa (raw, json)
Hash identifier: jEgynBv61wT6MoL6E6NPlbRS8F5yr9efsIpeA/oKyoI=
Subject key identifier: EB:DB:E9:34:95:98:59:9D:44:F9:31:A3:06:89:02:50:C7:A9:BB:1B
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 018CC8015F785816CDF2F11414461CBA6E2D
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/69vpNJWYWZ1E-TGjBokCUMepuxs.roa
Signing time: Tue 02 Jan 2024 02:29:42 +0000
ROA not before: Tue 02 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29447
IP address blocks: 83.158.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:5f:78:58:16:cd:f2:f1:14:14:46:1c:ba:6e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: Jan 2 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebdbe9349598599d44f931a306890250c7a9bb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:4e:db:f7:12:bd:97:63:24:b6:ae:b4:f0:
c2:0a:e2:b4:72:5e:7a:f9:fb:b7:5e:89:ef:a1:e7:
18:8d:77:1c:8f:89:bd:ec:6e:44:95:63:b4:35:23:
a1:4f:15:f2:72:8a:6f:5d:c5:8d:7a:b5:ee:8e:11:
9b:34:c6:ea:58:26:68:5b:66:e9:78:5f:a7:f2:09:
39:44:c6:e2:2f:34:4b:39:57:30:d5:76:cb:9f:d6:
85:d1:89:de:74:f8:8b:c7:49:46:19:61:48:33:4b:
04:22:c1:c9:6b:6e:7b:3e:b7:c2:b7:c7:b7:d0:30:
9a:cd:b3:0a:ce:96:45:fc:4b:99:7f:ad:1b:2b:27:
42:a7:f4:2f:ea:d7:20:12:5a:71:57:9e:07:5f:b6:
ab:74:3c:e9:36:e2:2b:d4:92:00:92:2d:6a:3f:31:
6d:c8:c7:c9:8b:d0:a4:88:32:7e:aa:e2:84:01:20:
dd:a5:b3:ce:cd:8b:64:88:32:af:9f:50:84:fb:39:
96:90:0e:aa:f4:d3:14:21:c8:68:5b:c4:d9:54:73:
75:1d:f1:7c:0e:76:3f:ac:99:d1:3a:71:4b:8f:4d:
cc:ad:70:63:7d:4a:0b:43:d5:ec:4c:3c:3b:8f:1d:
bb:6f:30:d2:61:84:44:b2:16:46:09:c0:25:9d:17:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DB:E9:34:95:98:59:9D:44:F9:31:A3:06:89:02:50:C7:A9:BB:1B
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/69vpNJWYWZ1E-TGjBokCUMepuxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.158.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:88:18:a7:c5:8e:3e:9a:b6:c5:ea:6f:fe:3b:c0:30:51:d1:
2d:78:31:9e:4b:2d:d3:e3:03:f4:72:be:4e:0e:f1:52:ce:4d:
df:7a:97:19:3d:52:20:3b:f6:7b:80:0a:b8:a3:2a:62:96:7e:
0b:f3:55:80:3f:7a:91:d4:a3:50:f4:b5:17:66:39:f7:e4:94:
20:40:7e:06:bb:08:b5:48:7d:25:8d:2c:84:32:8e:75:19:10:
38:09:50:c9:1c:ca:7c:78:49:30:a4:49:28:26:d9:f0:65:f6:
42:e2:36:67:3e:9f:fd:5a:59:cf:c2:23:36:d2:17:b9:6b:00:
66:29:5e:2b:94:ee:94:eb:d9:b9:f2:17:05:01:2b:d8:0e:ca:
2e:3e:65:ab:d3:9f:a9:73:50:f9:ec:6b:bd:ca:f2:5a:ed:f4:
8b:f6:60:8e:79:87:33:99:2a:94:a8:50:11:15:75:c8:44:1a:
c3:53:86:93:3d:e9:cf:00:f0:eb:9c:82:76:8a:a9:83:37:83:
e5:90:e1:61:b5:fd:80:73:51:75:99:67:a9:9c:a5:61:27:8a:
92:3f:11:e7:36:f5:ef:9b:1f:89:ea:b9:17:5c:4b:54:d9:c5:
3c:07:72:77:3b:ba:e0:42:27:f5:c9:5c:66:09:e7:3c:5d:5a:
ea:9f:dc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:32:16 2024 by rpki-client on console-fra.rpki-client.org