Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/1-Ov1JQtS4OWvRKyMwyCkrmuEfIc.roa
File: 1-Ov1JQtS4OWvRKyMwyCkrmuEfIc.roa (raw, json)
Hash identifier: iIEpdmJ3RlJnQhVb5VvcqeCcVFEgXQ7CMjRWEg0Rcpc=
Subject key identifier: F8:EB:F5:25:0B:52:E0:E5:AF:44:AC:8C:C3:20:A4:AE:6B:84:7C:87
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 0190FE5903D9F7D826B99F9B12FEC69E3F77
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/1-Ov1JQtS4OWvRKyMwyCkrmuEfIc.roa
Signing time: Mon 29 Jul 2024 11:56:04 +0000
ROA not before: Mon 29 Jul 2024 11:56:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21433
IP address blocks: 2a02:ee80:40d4::/47 maxlen: 47
2a02:ee80:40d4::/48 maxlen: 48
2a02:ee80:40d5::/48 maxlen: 48
2a02:ee80:40d6::/47 maxlen: 47
2a02:ee80:40d6::/48 maxlen: 48
2a02:ee80:40d7::/48 maxlen: 48
2a02:ee80:4248::/47 maxlen: 47
2a02:ee80:4248::/48 maxlen: 48
2a02:ee80:4249::/48 maxlen: 48
2a02:ee80:4250::/47 maxlen: 47
2a02:ee80:4250::/48 maxlen: 48
2a02:ee80:4251::/48 maxlen: 48
2a02:ee80:436e::/47 maxlen: 47
2a02:ee80:436e::/48 maxlen: 48
2a02:ee80:436f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fe:59:03:d9:f7:d8:26:b9:9f:9b:12:fe:c6:9e:3f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Jul 29 11:56:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8ebf5250b52e0e5af44ac8cc320a4ae6b847c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5f:b2:21:34:fa:40:f2:3c:c6:7e:72:3b:87:
ed:74:db:cf:65:da:d1:bb:c6:d1:d2:3b:ea:2b:a4:
b8:03:ac:6f:48:ca:54:74:82:54:0a:da:c7:c6:04:
32:1b:82:b0:7c:5f:29:61:50:88:4e:30:2f:52:2f:
fd:8e:30:10:64:d0:6d:16:12:66:c1:c3:a0:27:2b:
7c:10:14:96:c0:89:4a:50:bb:0d:62:88:e3:ba:71:
51:74:a0:f6:58:d8:6d:02:ce:dc:cf:78:19:38:b5:
7d:f8:86:5d:f0:8e:d6:bd:d0:61:e4:86:25:28:93:
70:20:66:62:84:7a:07:20:a9:0d:2f:b6:ea:4e:96:
36:ad:51:28:37:84:6f:48:a4:70:ca:7e:90:ae:c7:
c5:24:2a:fc:14:17:e4:6c:7d:88:a7:d1:4b:b8:db:
74:55:ca:a3:b0:db:5a:7a:45:04:17:c9:72:fe:1d:
6f:e2:e5:67:53:37:a9:cf:2d:be:66:8d:71:f9:ed:
56:d6:0d:40:47:34:a1:51:1b:22:4d:e6:42:b2:19:
f2:68:09:ec:62:3b:8b:04:ac:6d:18:67:53:ae:63:
e0:63:b6:e8:b5:de:84:68:9a:80:48:a9:02:5e:bf:
1a:c9:a6:e9:ed:34:77:2c:2b:f7:f9:f0:f3:fa:f5:
97:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EB:F5:25:0B:52:E0:E5:AF:44:AC:8C:C3:20:A4:AE:6B:84:7C:87
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/1-Ov1JQtS4OWvRKyMwyCkrmuEfIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:ee80:40d4::/46
2a02:ee80:4248::/47
2a02:ee80:4250::/47
2a02:ee80:436e::/47
Signature Algorithm: sha256WithRSAEncryption
3e:d1:a6:6c:ab:09:0f:f0:25:ad:2c:68:5e:b4:37:35:ed:01:
16:11:48:1d:24:cc:f3:6e:c9:8d:b6:23:09:17:3c:94:41:ce:
fb:09:09:ac:3c:eb:55:f5:b0:59:58:1e:53:93:00:92:2c:cc:
81:fb:8e:3d:96:80:0a:85:e5:ed:d4:0c:6e:f9:c3:28:63:2c:
21:83:9a:09:61:77:cf:e0:51:20:6a:0d:96:b3:ad:ad:0d:c8:
0f:fa:d9:c1:d0:36:23:2d:33:23:17:00:c1:86:5b:38:f0:e3:
fa:9f:7f:1e:8d:52:5e:1f:56:66:e0:fc:5e:8b:18:91:6c:78:
bd:70:7a:0c:aa:96:a2:ec:16:21:02:37:fb:07:db:bd:ad:6f:
18:ec:bb:9c:ff:5a:ee:61:ea:bd:c5:1b:53:47:d3:69:b8:13:
df:89:8b:f2:95:d6:b7:de:92:31:3f:fa:03:44:51:c0:fd:d5:
1a:85:07:de:b9:7c:66:8f:02:7a:16:8e:6d:bb:47:c7:bc:6a:
91:55:51:b8:b1:54:a6:3d:d1:cf:ae:7a:b1:28:1c:68:db:2a:
d6:57:b1:d3:83:67:58:fa:3b:30:0e:5c:b8:8f:f4:d1:c5:45:
e4:28:ff:39:92:b5:b1:2c:0c:df:0a:20:0b:ff:b3:cf:44:4f:
d1:11:89:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:41:10 2024 by rpki-client on console-fra.rpki-client.org