Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/EIT0NqcX8FRcBj3mr-UzgRxA0_s.roa
File: EIT0NqcX8FRcBj3mr-UzgRxA0_s.roa (raw, json)
Hash identifier: HsJgV3FQKZukCQvKN0wqOVh2X206BcJb70qvFf/+Z6A=
Subject key identifier: 10:84:F4:36:A7:17:F0:54:5C:06:3D:E6:AF:E5:33:81:1C:40:D3:FB
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 018CC34898F577C9A3C302016B3F15CD1B6C
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/EIT0NqcX8FRcBj3mr-UzgRxA0_s.roa
Signing time: Mon 01 Jan 2024 04:29:24 +0000
ROA not before: Mon 01 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12635
IP address blocks: 2001:4b6c::/30 maxlen: 30
2001:4b69::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:98:f5:77:c9:a3:c3:02:01:6b:3f:15:cd:1b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1084f436a717f0545c063de6afe533811c40d3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:73:97:83:84:d0:de:f2:f8:f9:39:b8:32:3c:
fb:bc:83:6e:20:16:eb:60:ec:26:4b:f4:06:81:77:
a0:64:a8:26:4f:32:4f:9f:c4:11:b1:b8:eb:4a:f8:
87:cc:7a:0a:91:52:59:cb:7e:f3:5e:99:0d:ae:ec:
29:09:3b:79:8d:31:79:3b:e6:0c:fe:c2:3f:2e:bf:
40:a3:20:65:97:95:e3:d1:44:af:1d:47:a8:7e:36:
ee:5f:ce:b2:4e:40:56:2d:6f:26:5e:e7:34:d2:52:
00:23:4a:47:28:38:a6:ee:ec:d5:4d:7b:e9:60:51:
19:cb:82:d9:0b:91:d7:29:a5:25:52:a1:d0:b6:85:
0e:3a:37:cb:5e:76:35:73:5b:7a:5a:77:d0:7c:e0:
2b:38:7e:8f:63:96:f9:b0:68:86:6c:6d:d0:48:e6:
f2:15:02:f1:1a:c7:c3:56:bf:54:d5:85:f4:cc:8f:
7d:a1:90:2e:e9:ff:de:47:28:18:5e:4e:4f:23:8f:
f7:5f:4a:55:dd:96:ca:9d:6b:b7:50:ba:00:11:c4:
cf:68:57:4a:62:d2:2f:3d:59:ba:fe:6c:fd:74:c0:
b2:41:0c:36:e7:45:54:91:ce:7b:41:b6:96:4a:4e:
98:62:e5:39:78:3b:20:c8:fd:ea:91:94:25:52:ab:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:84:F4:36:A7:17:F0:54:5C:06:3D:E6:AF:E5:33:81:1C:40:D3:FB
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/EIT0NqcX8FRcBj3mr-UzgRxA0_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4b69::/32
2001:4b6c::/30
Signature Algorithm: sha256WithRSAEncryption
6f:48:9f:8f:37:8f:b0:db:c1:f8:ee:d6:72:2a:2c:79:ff:b7:
92:67:58:cd:56:68:46:ef:06:5e:d0:71:4f:7f:6e:93:a2:93:
93:73:b4:08:90:3a:92:97:9a:24:4e:af:b3:79:54:40:93:c1:
3e:ba:30:20:16:89:7c:2e:21:dc:e5:b9:0a:51:b4:36:9c:40:
42:80:df:26:60:81:86:a7:99:84:f3:8c:42:39:ba:11:07:e0:
29:6a:4a:62:99:6a:d0:0c:f1:b0:07:66:71:62:82:39:e3:8b:
a8:73:9e:1b:1a:99:e3:0d:31:60:95:bc:be:43:d9:6e:ca:05:
42:a0:a0:61:aa:95:46:0f:56:e5:75:ec:28:e4:6b:30:65:07:
e4:70:df:3f:c1:34:50:df:be:26:5a:fd:86:38:21:f8:76:bc:
0c:d8:10:d7:14:5e:b4:63:63:22:02:f7:ed:7b:b3:65:87:3e:
cc:3b:f1:15:7b:2b:46:11:57:84:8f:e8:f5:ec:be:62:fe:3a:
02:bd:24:2f:57:11:c1:7c:19:ca:89:fc:a7:5f:38:47:bc:5c:
dd:80:52:8f:84:66:96:59:15:d7:b1:0e:04:88:86:03:64:91:
e2:a5:ca:9f:80:59:2b:a0:2d:c6:a4:84:f8:6b:06:3e:ab:19:
9c:8f:9e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:12:01 2024 by rpki-client on console-ams.rpki-client.org