Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ly8LSbkd5iz4WD-8Z9dM1NvvOFg.roa
File: ly8LSbkd5iz4WD-8Z9dM1NvvOFg.roa (raw, json)
Hash identifier: tu37/yYCINV/PmW2sE0/sCcYfzPMWtaeF1XDx84PgUo=
Subject key identifier: 97:2F:0B:49:B9:1D:E6:2C:F8:58:3F:BC:67:D7:4C:D4:DB:EF:38:58
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCC7616546D95485E91B8EF78C9797
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ly8LSbkd5iz4WD-8Z9dM1NvvOFg.roa
Signing time: Tue 02 Jan 2024 10:34:01 +0000
ROA not before: Tue 02 Jan 2024 10:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38173
IP address blocks: 2a0e:b107:1520::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c7:61:65:46:d9:54:85:e9:1b:8e:f7:8c:97:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=972f0b49b91de62cf8583fbc67d74cd4dbef3858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:23:7a:19:dd:c1:2e:e3:d9:92:78:1b:6d:b4:
4b:56:fe:bd:90:a2:c1:b8:ce:99:3a:05:a2:2e:6f:
c7:97:40:c7:45:da:c9:b7:96:2a:41:37:c3:a4:72:
e8:bd:a3:71:8f:8d:b7:cd:a7:fd:77:70:79:73:c4:
9a:ce:60:45:1c:5f:3d:5c:f0:97:47:44:bf:cd:5f:
5b:74:c7:49:bc:04:eb:a0:df:c0:48:1d:b6:06:62:
a2:63:60:51:1c:b5:9c:1b:2b:af:b4:51:91:db:52:
e0:62:88:17:55:ae:64:5f:03:a5:34:b4:eb:c0:d7:
dc:c6:91:3a:14:cc:76:64:ba:39:5e:00:54:1a:af:
73:28:5c:15:ef:07:e5:b5:b7:75:69:8f:4c:59:90:
f5:c5:53:28:f3:37:0f:e8:d0:b6:1f:2a:3d:a8:07:
bf:52:21:47:e1:0b:4b:be:41:32:78:a3:ba:79:b3:
89:73:5a:70:de:6d:9e:9d:32:f8:39:02:0e:a4:5e:
dd:be:bb:96:b3:7f:93:cc:70:5e:86:7d:8e:a7:73:
a9:d4:b1:86:83:ba:30:92:d7:f8:76:59:b8:75:8c:
e2:66:60:e2:b3:6e:b1:f1:db:64:3c:d4:fc:63:1c:
19:9d:27:ed:3c:9f:8d:6a:8d:44:2a:96:98:66:2b:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2F:0B:49:B9:1D:E6:2C:F8:58:3F:BC:67:D7:4C:D4:DB:EF:38:58
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ly8LSbkd5iz4WD-8Z9dM1NvvOFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1520::/48
Signature Algorithm: sha256WithRSAEncryption
44:02:6c:3d:f0:bc:89:28:94:be:c6:a1:3b:0d:28:43:80:03:
95:d1:88:5e:00:fe:26:ad:56:81:0b:12:7e:b8:ed:dd:b3:e1:
cf:38:64:00:00:72:cf:7d:e0:a0:b2:ff:e9:37:da:e5:9a:57:
ba:c2:ae:53:1b:82:82:81:bd:b5:65:5d:1e:7d:ae:6c:a8:77:
55:2e:41:a2:2f:7f:ef:cb:72:45:c1:7e:87:c5:b8:97:59:1f:
bb:57:06:31:a5:67:df:7b:01:aa:73:d9:f7:63:7d:68:b5:57:
b0:17:09:3f:41:6b:c8:a6:b5:a8:44:1a:96:aa:15:26:7c:0d:
1b:72:bb:ba:c2:77:18:68:ec:e7:38:1b:fa:d6:50:3d:45:27:
57:34:7d:c9:29:1e:7e:c7:0b:91:e6:df:a3:5b:4d:2a:b3:bf:
99:e6:7e:78:99:36:d0:f9:c2:fe:cc:72:45:66:f4:4d:b8:29:
77:67:e7:49:73:c8:9c:7b:66:6f:ee:a2:99:04:2b:6a:6c:c3:
d6:ca:6a:df:fd:de:a1:fd:db:38:ac:9a:6f:12:89:35:d9:78:
5e:93:2f:63:cf:c6:52:f3:08:25:7f:f2:39:40:2c:ca:39:f3:
08:76:f2:74:72:3b:9e:47:0e:73:12:ad:c1:06:32:07:18:51:
33:17:9a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:33:18 2024 by rpki-client on console-ams.rpki-client.org