Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/5FQeyKBc0EcEE-0sfjuydRrpZF0.roa
File: 5FQeyKBc0EcEE-0sfjuydRrpZF0.roa (raw, json)
Hash identifier: y+9vJB9LLFfom+LH/BZfZYNETCbMtSYKPTBVIpo54ok=
Subject key identifier: E4:54:1E:C8:A0:5C:D0:47:04:13:ED:2C:7E:3B:B2:75:1A:E9:64:5D
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018E5F40050F25EB2EA90A094254BBFF2247
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/5FQeyKBc0EcEE-0sfjuydRrpZF0.roa
Signing time: Thu 21 Mar 2024 04:23:34 +0000
ROA not before: Thu 21 Mar 2024 04:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 2a11:5780::/30 maxlen: 30
2a11:5784::/30 maxlen: 30
2a12:5a00::/30 maxlen: 30
2a12:5a04::/30 maxlen: 30
2a12:8100::/30 maxlen: 30
2a12:8104::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5f:40:05:0f:25:eb:2e:a9:0a:09:42:54:bb:ff:22:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Mar 21 04:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4541ec8a05cd0470413ed2c7e3bb2751ae9645d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:24:16:79:11:b0:61:e4:b1:ff:7d:ef:d7:7d:
d4:8d:94:6f:23:4a:ba:79:39:b5:33:41:68:a9:6d:
04:17:d6:61:94:be:b6:e0:42:67:58:47:10:df:ff:
35:8b:f5:07:d9:b5:30:e7:56:18:c2:98:38:d0:b3:
c7:23:62:a0:df:9d:9f:d7:9c:36:e7:ef:98:43:fc:
d4:e4:e2:6d:a3:9e:87:f6:69:9a:8f:93:c4:bc:5b:
06:28:f6:9f:11:39:b6:27:8b:f9:f7:b7:41:1f:e4:
9a:bb:f6:f6:c9:97:32:a2:c3:c1:9c:ef:0b:47:ab:
63:5b:4c:03:17:f5:e4:aa:cf:70:6d:85:c2:91:39:
fd:fe:69:81:13:48:63:f6:48:88:53:9d:25:9f:f0:
01:61:3f:d6:67:a5:40:d2:0e:e1:a6:98:00:af:27:
8a:30:d1:7b:c4:9a:03:72:24:dd:f0:0e:9a:bf:99:
69:fa:78:f5:b6:e3:0c:1a:19:a4:5e:64:99:4a:50:
db:ca:3b:00:8e:2a:6d:7a:7d:93:1f:07:ea:6a:46:
de:3a:be:68:c2:3e:49:18:97:5e:c9:da:14:14:7e:
75:d8:19:65:98:40:e2:4b:0e:96:0a:75:aa:ec:20:
27:6d:eb:5a:74:f7:75:f4:8d:5a:c9:59:f0:6c:b9:
11:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:54:1E:C8:A0:5C:D0:47:04:13:ED:2C:7E:3B:B2:75:1A:E9:64:5D
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/5FQeyKBc0EcEE-0sfjuydRrpZF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5780::/29
2a12:5a00::/29
2a12:8100::/29
Signature Algorithm: sha256WithRSAEncryption
81:fe:1a:26:48:30:39:c2:6f:00:73:ee:48:24:08:07:6c:f2:
74:59:57:02:00:27:11:ba:bb:22:3a:d3:80:0d:52:c4:8a:0e:
d8:16:26:85:07:eb:07:00:8b:b1:85:f7:87:2f:cc:3e:d9:e2:
f7:f7:78:d9:27:5f:98:de:a8:9e:55:c1:d3:2e:eb:e8:05:a0:
c0:24:9d:80:19:ed:a1:e7:c2:9a:78:4f:c4:8a:9d:2b:8a:2f:
d4:b9:bf:93:fb:20:70:37:e8:15:e5:d1:83:cb:43:d6:6a:27:
76:6b:10:03:f4:8d:f9:57:28:33:34:99:b9:27:c1:54:e6:cf:
25:cf:f6:26:32:1d:b8:5d:41:bc:2a:ca:68:21:98:43:f7:2d:
78:3c:12:b2:d8:af:7c:1e:ca:83:1d:2f:ef:d4:14:94:a5:89:
d6:ed:b8:3c:04:da:20:e0:83:51:2e:78:15:e7:cc:cb:e4:c0:
3c:7d:97:79:2e:b2:83:5f:38:1e:fe:da:0f:a1:50:3a:e9:db:
24:67:c4:b0:fb:1a:2c:07:4b:b4:59:bb:ff:ac:37:34:2b:22:
52:4f:ed:73:71:c4:fe:6a:52:44:0a:22:81:f1:5b:4e:94:66:
d7:b7:c4:9d:91:7b:bb:23:aa:a4:48:01:9d:8d:62:8b:d3:bb:
69:0d:94:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:01:52 2024 by rpki-client on console-fra.rpki-client.org