Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0PTeV9dXjD_ceQuoVEBx4K78r8g.roa
File: 0PTeV9dXjD_ceQuoVEBx4K78r8g.roa (raw, json)
Hash identifier: 4DwgyGrnmdYb2h0fc7Oj44YBoD/E7a6m+uIxcQ4XBeE=
Subject key identifier: D0:F4:DE:57:D7:57:8C:3F:DC:79:0B:A8:54:40:71:E0:AE:FC:AF:C8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CF4E50E4689B293F4BCA6151EE1059599
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0PTeV9dXjD_ceQuoVEBx4K78r8g.roa
Signing time: Wed 10 Jan 2024 19:41:41 +0000
ROA not before: Wed 10 Jan 2024 19:41:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212948
IP address blocks: 2a0e:b107:27a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f4:e5:0e:46:89:b2:93:f4:bc:a6:15:1e:e1:05:95:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 10 19:41:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0f4de57d7578c3fdc790ba8544071e0aefcafc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:3c:43:a6:1f:c1:6a:4e:68:8b:18:09:da:
94:a2:b9:75:09:cd:e3:e5:e8:de:e9:ca:62:03:c1:
f4:b6:62:cb:39:c9:77:ad:ba:b8:cd:43:52:71:a7:
6f:ab:30:5d:9e:cb:48:fd:8b:05:d9:50:f0:25:3c:
f3:7d:1e:0c:dd:a5:9c:b8:ab:cc:ad:66:e9:73:b9:
db:32:9d:ce:10:e4:bb:66:cc:5c:3e:af:f2:0f:0b:
c4:59:6d:3a:7c:60:b1:6b:34:1b:b0:e8:96:4d:3c:
65:c8:dc:72:90:dc:11:98:ce:bb:15:38:95:f9:2d:
cc:eb:5d:ca:8c:1e:a7:3c:4d:0c:04:02:76:0a:45:
f8:b7:d3:d0:c0:43:d1:08:d2:43:75:f2:ac:9a:b3:
da:87:1f:2c:17:fd:35:e8:aa:1d:cf:36:38:ab:c3:
fc:5a:2f:55:69:bc:21:de:55:af:5e:6d:0a:a1:2a:
35:83:f2:be:16:46:af:a2:df:1c:36:36:83:c3:0b:
bd:ae:d8:6a:d9:25:8c:1a:54:5a:1b:19:95:ef:a7:
4e:6a:13:14:5b:81:db:27:73:a0:fe:37:5c:54:b3:
db:7f:54:2c:1b:7f:da:da:e4:1e:3c:0d:21:a3:d5:
7b:20:c9:f6:77:65:a8:36:af:1b:ba:c1:3d:f1:8f:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F4:DE:57:D7:57:8C:3F:DC:79:0B:A8:54:40:71:E0:AE:FC:AF:C8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0PTeV9dXjD_ceQuoVEBx4K78r8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27a0::/48
Signature Algorithm: sha256WithRSAEncryption
60:9e:f2:e7:3f:27:1e:15:61:40:3d:c2:a1:15:28:a8:f4:c4:
9a:d4:2f:2b:77:ad:df:c4:bb:11:ac:e3:5b:ac:31:6c:69:bc:
5e:33:86:9f:00:a3:fb:92:b5:41:95:54:06:2b:bc:1e:e9:59:
94:cd:69:6d:f4:49:69:e1:91:15:4b:a2:f7:00:05:77:81:ca:
02:9b:eb:4b:4a:e7:ac:fd:30:42:11:8a:1e:9a:a1:29:6b:55:
70:43:ee:69:8d:e4:c1:1e:4b:dc:91:5d:ed:fb:00:a7:ee:10:
f9:a7:27:0c:87:ca:c2:f7:ef:60:69:61:c1:35:47:73:fd:cc:
2d:ae:f3:66:d0:fb:46:16:3c:c9:13:64:14:9a:c1:ae:b3:f3:
a1:70:2d:99:82:a0:f5:06:55:03:da:20:6c:fb:cc:0f:95:b9:
4f:e3:03:f1:46:6d:df:a0:6f:68:26:45:1d:3a:7c:0d:7b:63:
84:77:48:6f:27:e9:f8:5d:10:fb:11:f7:33:1d:cc:58:7b:7e:
01:bd:3d:75:26:d5:d7:2a:d9:a2:53:cf:08:d7:f7:d5:8f:71:
87:cc:af:80:11:70:7b:eb:38:d4:93:17:97:52:de:9e:ec:ea:
ee:a4:f7:27:e9:38:11:91:03:64:43:fe:69:4c:4d:08:6c:9c:
88:2e:4b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:39:02 2024 by rpki-client on console-fra.rpki-client.org