Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/v4Ee1M9FxJ8XJwJugejH_jIvRTY.roa
File: v4Ee1M9FxJ8XJwJugejH_jIvRTY.roa (raw, json)
Hash identifier: kXf3/Den/IS9oqObNny+9bdmC20lM+bU9sLt1gWe/1s=
Subject key identifier: BF:81:1E:D4:CF:45:C4:9F:17:27:02:6E:81:E8:C7:FE:32:2F:45:36
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018E374494367F62FA8D04517D0A854FEA84
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/v4Ee1M9FxJ8XJwJugejH_jIvRTY.roa
Signing time: Wed 13 Mar 2024 10:03:45 +0000
ROA not before: Wed 13 Mar 2024 10:03:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45027
IP address blocks: 2a04:6e40::/29 maxlen: 29
2a11:91c0::/29 maxlen: 29
2a12:5a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:44:94:36:7f:62:fa:8d:04:51:7d:0a:85:4f:ea:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Mar 13 10:03:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf811ed4cf45c49f1727026e81e8c7fe322f4536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:c8:30:a2:36:66:82:39:fe:d9:e8:9b:09:
71:35:b8:88:6e:80:54:4a:08:68:77:f4:fe:24:5c:
7e:ee:83:70:bb:20:cb:98:d7:87:42:50:e3:70:79:
cd:95:80:f6:1c:db:be:98:5f:a7:10:72:59:3b:d4:
09:ac:33:98:c2:67:fe:cd:04:58:49:0c:bf:4f:fa:
bc:bf:ce:52:f4:08:af:7e:59:41:a4:ea:1f:a1:ad:
ee:64:43:ec:63:32:e6:6e:cc:52:06:0a:1f:14:82:
e4:f1:fd:dd:93:4d:65:f0:61:71:fe:f6:6f:fb:1d:
21:0d:fe:09:53:f2:cc:8d:ef:bc:dd:81:6b:20:66:
7d:e8:ba:be:6e:db:f3:f8:c3:c2:1c:a9:5a:41:fe:
35:9a:1a:4b:4e:1c:2e:c2:12:31:22:10:7d:91:33:
c6:25:d1:55:86:77:b1:86:2f:2d:f5:a8:db:ff:51:
4a:bb:52:e0:2f:3d:0c:f0:0c:a4:16:ee:4f:4e:51:
e4:31:86:1d:0b:31:e6:fd:08:95:61:c0:e0:91:bb:
b1:e9:1b:99:67:b0:a0:fa:39:e0:93:0f:b5:5e:b3:
2a:c5:26:9b:e7:0f:cf:64:09:84:41:af:a1:37:1d:
e5:9f:4f:c1:6a:84:5e:1e:4a:22:53:f5:35:7d:4e:
ca:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:81:1E:D4:CF:45:C4:9F:17:27:02:6E:81:E8:C7:FE:32:2F:45:36
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/v4Ee1M9FxJ8XJwJugejH_jIvRTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6e40::/29
2a11:91c0::/29
2a12:5a00::/29
Signature Algorithm: sha256WithRSAEncryption
27:4b:46:c4:a5:7f:e0:a2:84:75:79:22:74:45:d1:69:3a:69:
56:d1:36:6f:68:8d:2b:c4:54:2a:43:67:18:fe:f3:64:7c:91:
95:53:93:72:1c:c1:7b:e9:01:1a:6d:ed:c2:26:fc:62:2e:a3:
b4:18:8d:76:29:a7:cf:0d:c0:a5:af:4e:45:2f:33:3e:d6:e5:
d3:19:16:dd:73:cc:dc:f6:cb:c5:9a:44:77:82:4e:1a:8a:8b:
c4:1c:e3:6a:ba:07:91:c9:d7:33:a5:16:eb:8f:dd:91:33:df:
7b:45:19:a7:6b:83:72:38:f4:c1:c8:52:77:38:1f:16:4e:53:
9a:6e:51:b9:a1:e9:0b:e1:bc:fb:6b:92:b4:63:06:98:76:36:
b0:5e:08:1a:64:69:64:4d:2e:83:fb:17:65:07:e7:cc:0c:28:
bc:4e:35:54:40:7c:35:7c:0f:58:70:35:f8:1e:18:69:d0:c6:
63:07:aa:77:65:96:30:02:a9:9c:83:f8:24:a8:f8:28:49:d8:
7c:00:b0:04:ac:8c:4f:48:98:8c:25:d6:2a:23:0c:7b:dc:49:
0e:68:cf:3e:3a:7a:81:ff:a1:5e:4e:7b:0a:4a:18:09:15:ee:
ae:28:a6:36:30:62:88:3a:0b:e4:c5:9d:07:25:61:df:3b:e8:
99:d4:eb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:25:16 2024 by rpki-client on console-fra.rpki-client.org