Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/7Vfxpn9iDVfG-mwX3qw_dwC835A.roa
File: 7Vfxpn9iDVfG-mwX3qw_dwC835A.roa (raw, json)
Hash identifier: qqGR59e1qckyJOuES2qTJd7EimXTXVArgFpocONBdIQ=
Subject key identifier: ED:57:F1:A6:7F:62:0D:57:C6:FA:6C:17:DE:AC:3F:77:00:BC:DF:90
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018CC3B6781800FC7730A346110D9F3C5E6C
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/7Vfxpn9iDVfG-mwX3qw_dwC835A.roa
Signing time: Mon 01 Jan 2024 06:29:24 +0000
ROA not before: Mon 01 Jan 2024 06:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31400
IP address blocks: 2a09:7900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 04:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:78:18:00:fc:77:30:a3:46:11:0d:9f:3c:5e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed57f1a67f620d57c6fa6c17deac3f7700bcdf90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:0b:09:7a:79:43:f8:96:f5:5f:92:85:93:
75:bd:b9:10:02:f0:9a:82:a8:e6:64:79:41:15:d5:
bc:ba:7f:c0:cb:a5:21:c6:95:c7:9c:df:e7:67:e4:
85:06:bf:9f:30:ca:e6:6b:7c:df:74:54:61:99:ad:
f6:92:73:b3:7e:76:75:20:0e:74:7e:e4:0a:df:f7:
cd:37:52:25:72:23:6c:d9:51:36:59:3e:ca:f4:8d:
31:2d:89:58:9d:b0:e2:79:b1:dd:30:7a:7c:ba:16:
be:6e:ae:da:bf:47:11:79:4f:b9:39:bc:2a:a5:11:
c4:66:eb:ed:35:c1:c3:f8:16:f3:fd:a1:e9:12:63:
64:34:44:d9:23:79:9d:e4:60:ce:8e:da:29:fb:96:
f3:5e:fe:69:1d:5d:21:fe:b9:c5:96:0e:69:06:87:
51:36:62:a7:15:73:9b:a4:8b:d4:00:2c:9b:cc:31:
45:a6:0e:ec:eb:df:8b:f5:c3:20:59:e4:e9:d5:00:
bd:a2:14:ba:74:fe:db:41:6f:7e:b1:7c:3b:54:31:
88:12:1e:7a:d2:c2:f4:21:bc:9c:46:4f:8e:63:a0:
35:3b:88:5b:6d:b1:22:f3:4f:d0:84:e1:e0:b0:fd:
52:05:fa:4e:3a:23:d1:f9:d8:5a:47:02:00:d6:07:
2f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:57:F1:A6:7F:62:0D:57:C6:FA:6C:17:DE:AC:3F:77:00:BC:DF:90
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/7Vfxpn9iDVfG-mwX3qw_dwC835A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7900::/29
Signature Algorithm: sha256WithRSAEncryption
a4:31:a8:90:1b:2e:23:68:f6:1c:48:82:79:78:f8:75:90:5c:
bd:e0:8f:30:ef:e8:46:39:63:2c:e4:b0:b4:69:bb:b7:7d:72:
8a:70:e3:ba:50:3b:39:f3:0b:52:90:ce:bf:d4:e6:7a:eb:55:
06:4c:21:07:19:5c:39:40:5e:9f:81:aa:42:9b:8c:ec:10:29:
82:31:15:83:d8:79:2d:68:36:28:b4:fe:3b:08:a8:17:ee:0d:
e5:82:e1:17:46:4b:b1:bb:b3:55:d3:a1:18:c9:44:99:21:9b:
53:ed:db:8c:b9:66:54:eb:fc:d3:04:a9:65:94:cb:bc:34:d0:
22:bf:28:a1:04:c0:80:2c:62:e9:db:33:eb:45:e4:b7:6a:9e:
82:ca:e2:f0:00:41:55:6c:84:cd:17:2d:34:9c:78:61:01:6e:
7e:3b:86:db:3e:a0:05:4a:49:e1:e2:23:4c:89:2e:9d:c6:e6:
d7:c4:1a:c9:23:2f:4d:72:0e:51:17:3a:58:2c:07:c2:25:81:
10:8e:69:b4:50:b0:dd:a0:e8:73:06:46:19:ca:77:e9:2c:37:
ab:05:20:18:36:6d:b2:ac:75:a1:b1:15:e8:5f:79:fc:87:fa:
47:70:cd:90:30:af:0f:d4:5e:5a:14:34:83:0e:cc:38:4d:0d:
b0:4f:1a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:56:56 2024 by rpki-client on console-ams.rpki-client.org