Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MRieYLwyFm0W4ROrQmxH39oiY_E.roa
File: MRieYLwyFm0W4ROrQmxH39oiY_E.roa (raw, json)
Hash identifier: +QWrxBip/ipXAHbsGIQHb0oL8Igc3mcZ5xdv2LgnwHw=
Subject key identifier: 31:18:9E:60:BC:32:16:6D:16:E1:13:AB:42:6C:47:DF:DA:22:63:F1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCDE20AE6498CEFDF46834ED3A7B25
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MRieYLwyFm0W4ROrQmxH39oiY_E.roa
Signing time: Tue 02 Jan 2024 10:34:07 +0000
ROA not before: Tue 02 Jan 2024 10:34:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140938
IP address blocks: 2a0e:b107:bf0::/48 maxlen: 48
2a0e:b107:c90::/48 maxlen: 48
2a0e:b107:c92::/48 maxlen: 48
2a0e:b107:c9f::/48 maxlen: 48
2a0e:b107:bf4::/48 maxlen: 48
2a0e:b107:c94::/48 maxlen: 48
2a0e:b107:bf1::/48 maxlen: 48
2a0e:b107:c91::/48 maxlen: 48
2a0e:b107:bf6::/48 maxlen: 48
2a0e:b107:c96::/48 maxlen: 48
2a0e:b107:c93::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:de:20:ae:64:98:ce:fd:f4:68:34:ed:3a:7b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31189e60bc32166d16e113ab426c47dfda2263f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:8c:13:55:75:f1:4f:c7:c3:57:1e:b9:d2:
65:81:69:59:3d:87:18:e4:03:c1:df:1b:13:d5:94:
ea:e1:07:95:fc:93:36:ba:37:aa:50:df:f6:b3:d0:
eb:2b:41:8c:cb:db:e2:73:e6:66:4c:d9:ef:18:35:
3b:83:8a:d3:0f:5c:53:b7:42:be:e6:74:bd:c1:c2:
f0:13:d8:30:e3:4f:93:c3:1b:69:80:8f:41:c2:75:
5d:6f:63:8b:08:a5:5e:38:ac:8f:e3:91:51:04:72:
9a:4f:00:26:bf:9f:53:4d:04:d7:dd:1b:f5:8f:4e:
a9:70:1c:80:5a:55:e2:3f:20:79:33:a5:3b:11:ae:
ef:c7:6f:43:a4:39:24:5c:f9:f5:26:6e:18:94:80:
ee:37:42:9f:6c:ec:32:fb:fd:2e:77:0c:3e:3e:66:
66:25:d0:62:57:62:ba:44:fe:19:9d:b7:dd:ea:8f:
ed:fd:10:82:98:de:b5:2c:9c:45:e8:d0:71:7b:c7:
42:76:ad:1c:a8:31:00:3a:37:6e:2e:1e:2f:c4:9c:
2c:83:58:ab:be:84:35:3e:6a:8b:84:6b:a0:0b:32:
08:ec:c4:59:23:48:93:ac:0f:af:60:f0:fc:a3:e6:
e7:be:74:e7:6d:9a:2f:b8:e5:26:df:cf:4b:6b:d4:
7f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:18:9E:60:BC:32:16:6D:16:E1:13:AB:42:6C:47:DF:DA:22:63:F1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MRieYLwyFm0W4ROrQmxH39oiY_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:bf0::/47
2a0e:b107:bf4::/48
2a0e:b107:bf6::/48
2a0e:b107:c90::-2a0e:b107:c94:ffff:ffff:ffff:ffff:ffff
2a0e:b107:c96::/48
2a0e:b107:c9f::/48
Signature Algorithm: sha256WithRSAEncryption
05:d4:78:68:14:91:1b:a8:6f:f0:19:bd:8b:a5:11:05:d7:46:
65:d4:71:cc:4b:24:ac:96:f8:a7:5a:a4:d1:86:59:58:df:17:
bd:f8:04:c1:a8:c2:be:e2:e3:c8:f6:5f:9e:14:6a:a1:24:93:
85:2d:f6:1d:d5:71:d4:1e:7f:9b:56:1f:19:1b:b0:87:c5:90:
5f:53:4f:28:05:71:15:07:1f:72:a7:47:f4:27:a8:d7:db:73:
77:ee:ab:03:e0:9c:a0:a4:d8:d7:55:19:64:40:38:fe:89:b7:
de:5d:97:51:81:fc:8e:b3:9d:75:d1:5c:b8:69:43:94:9b:27:
88:eb:cf:b8:f1:c3:45:b4:b2:0f:fb:5f:f8:3b:d2:38:b8:dc:
41:f5:3f:1b:b5:40:c5:3e:58:38:b5:66:ee:1f:20:c6:40:4f:
e3:6d:f5:12:01:6b:8a:f1:01:f4:7c:32:c1:18:5a:ff:38:0c:
2b:8e:db:86:3b:57:50:cb:fa:c0:8e:4a:ba:1c:96:d9:35:5f:
71:1d:73:e7:b6:f5:4e:b7:ab:fe:82:86:e2:a3:97:02:87:13:
51:74:7c:96:84:69:01:9e:c9:18:25:aa:28:a9:a9:ad:79:1b:
4c:dd:59:ef:e1:6e:4d:37:58:48:16:72:8b:8b:10:4f:d3:62:
e3:87:d7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:09:47 2024 by rpki-client on console-ams.rpki-client.org