Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N0oH7W-RyxWCG8TbPIPgD7AiahQ.roa
File: N0oH7W-RyxWCG8TbPIPgD7AiahQ.roa (raw, json)
Hash identifier: VRBglDKcxIf9crcncZrbM7CHETm6hclX3it8i8u14eE=
Subject key identifier: 37:4A:07:ED:6F:91:CB:15:82:1B:C4:DB:3C:83:E0:0F:B0:22:6A:14
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018F4BD6287E50AAA4538FE5AA2AB6123229
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N0oH7W-RyxWCG8TbPIPgD7AiahQ.roa
Signing time: Mon 06 May 2024 02:57:57 +0000
ROA not before: Mon 06 May 2024 02:57:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208680
IP address blocks: 2a0e:b107:790::/48 maxlen: 48
2a0e:b107:791::/48 maxlen: 48
2a0e:b107:792::/48 maxlen: 48
2a0e:b107:793::/48 maxlen: 48
2a0e:b107:794::/48 maxlen: 48
2a0e:b107:795::/48 maxlen: 48
2a0e:b107:796::/48 maxlen: 48
2a0e:b107:797::/48 maxlen: 48
2a0e:b107:798::/48 maxlen: 48
2a0e:b107:799::/48 maxlen: 48
2a0e:b107:79a::/48 maxlen: 48
2a0e:b107:79b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4b:d6:28:7e:50:aa:a4:53:8f:e5:aa:2a:b6:12:32:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 6 02:57:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=374a07ed6f91cb15821bc4db3c83e00fb0226a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:1f:69:e2:8e:93:6b:67:2a:ea:76:6b:cc:
a5:75:1b:26:0c:f9:cf:cc:de:a7:22:0b:27:75:31:
76:3c:13:a5:fc:21:c1:a6:db:21:cd:3c:5f:9d:0b:
26:16:3f:13:07:d7:4d:c1:c8:c7:29:07:73:8a:63:
4d:a0:1c:05:87:ed:11:46:71:40:3b:05:25:07:49:
f8:80:e0:c7:dd:a9:c9:0c:86:db:ce:3e:10:89:a6:
07:da:7d:d5:2e:b9:fc:1c:28:93:a5:b9:f6:fd:a2:
03:e8:96:97:32:d6:05:0c:e9:ba:40:3d:30:f0:4e:
3e:d3:8b:22:89:eb:99:85:ce:ee:e0:ef:cf:60:f1:
10:a7:ae:33:e9:93:c4:a4:78:9f:2a:02:b9:77:b3:
15:d0:46:aa:2b:86:56:ac:0c:59:b2:4b:15:23:22:
19:92:c4:6b:03:68:26:75:bb:a4:d7:d1:1d:ce:03:
18:9c:b8:3e:32:2c:ce:29:f3:fa:fc:4f:37:0b:0e:
b6:21:1c:4c:1f:94:02:47:fc:dd:59:98:1c:99:ae:
3f:3f:fa:27:94:ac:c8:fd:a6:d5:26:01:17:83:0f:
eb:c8:3c:9a:54:58:c1:99:ae:72:be:7f:e1:ac:1c:
3a:e1:75:50:81:98:cf:14:47:db:dd:01:4d:50:14:
24:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4A:07:ED:6F:91:CB:15:82:1B:C4:DB:3C:83:E0:0F:B0:22:6A:14
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N0oH7W-RyxWCG8TbPIPgD7AiahQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:790::-2a0e:b107:79b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
44:bb:f7:b8:17:b5:03:8b:14:75:b3:8b:b5:3d:70:e1:95:29:
2a:50:65:d0:86:fd:33:68:7f:b6:ab:ed:64:9d:94:8a:a2:f0:
7c:29:50:04:8e:47:8d:92:37:2d:a3:d5:db:b8:8c:89:0b:39:
76:31:ba:13:73:b2:95:b8:c4:3b:87:a3:e6:35:06:8c:fd:e0:
66:14:4b:d4:18:33:6d:51:b1:7d:a0:01:39:67:38:5c:0a:38:
6b:cb:5b:15:40:5e:55:64:0a:04:03:7e:b4:5e:2a:ef:ef:c1:
c1:c2:d3:fa:44:97:c8:35:ae:60:78:46:c3:a0:84:d4:0a:d6:
9e:bc:84:93:62:03:07:e1:23:81:71:1d:af:77:ef:f2:88:3a:
f5:c4:4a:ca:9a:ad:9b:79:77:de:47:da:3a:2b:c0:63:60:e6:
f0:37:92:1e:b6:41:ef:0c:07:9f:e8:66:cf:17:21:50:70:07:
f7:df:ef:0d:a4:1b:2c:f3:ad:48:66:b7:b0:b5:e8:b2:71:a7:
71:17:1b:75:58:e9:e4:02:a7:7f:6f:88:72:16:d7:88:4e:cc:
bd:35:31:b8:f9:28:5d:8c:2a:a9:ef:35:12:53:50:96:5b:17:
b7:13:a5:19:ff:26:70:6b:3e:fd:56:bb:ac:35:f5:2d:9f:05:
60:86:6f:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 20 04:46:11 2024 by rpki-client on console-fra.rpki-client.org