Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0Zdolj6htxf0Hp5Uk10cgLMj--0.roa
File: 0Zdolj6htxf0Hp5Uk10cgLMj--0.roa (raw, json)
Hash identifier: fy2BvyYaHSuDVozIQvAn8H36Gr1KJQgCX7snmUO1X7A=
Subject key identifier: D1:97:68:96:3E:A1:B7:17:F4:1E:9E:54:93:5D:1C:80:B3:23:FB:ED
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD30D08C3FFD940DD76DBD73B0945F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0Zdolj6htxf0Hp5Uk10cgLMj--0.roa
Signing time: Tue 02 Jan 2024 10:34:28 +0000
ROA not before: Tue 02 Jan 2024 10:34:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211139
IP address blocks: 2a0e:b107:1910::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:30:d0:8c:3f:fd:94:0d:d7:6d:bd:73:b0:94:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d19768963ea1b717f41e9e54935d1c80b323fbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:72:82:a6:48:39:68:fa:4d:16:ef:e7:b4:61:
05:bc:28:78:a7:16:43:4f:b5:d3:76:20:45:77:9d:
0b:9e:e2:34:51:ff:6a:f0:0c:22:fa:e2:88:a4:ee:
e4:94:53:ba:a0:78:33:ce:63:6f:a0:0c:8c:0a:36:
ad:74:af:76:c8:8d:c7:73:7d:fb:2f:86:09:04:54:
96:d7:e1:5d:c9:47:0b:f0:79:2e:86:66:4a:24:9c:
f8:eb:f4:b1:f9:56:a5:f1:bf:0e:d8:34:8c:e2:cc:
54:de:21:c2:d0:0e:d9:89:b1:38:1a:36:ac:ed:7e:
7c:e1:65:11:81:1b:90:4f:69:c7:af:d6:b6:1f:34:
6e:1a:d9:56:43:d1:36:22:fa:4f:c6:ed:cb:b6:d0:
cc:e0:6f:e3:6d:a6:10:f8:88:bc:7d:aa:37:e1:02:
7d:4d:5d:cb:c2:02:16:0c:7c:53:71:6b:a2:ff:99:
41:ef:ce:dd:93:d6:92:b6:ed:42:20:54:40:62:78:
62:53:92:7e:63:33:8d:74:54:1d:ee:85:a9:f0:ce:
76:7d:29:30:e8:1b:a2:80:83:4f:46:32:c5:87:cd:
e1:f1:f3:51:76:4c:75:f8:23:42:f2:7d:7c:47:40:
c2:51:f4:45:87:81:2e:fc:92:24:e7:96:4d:c8:4e:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:97:68:96:3E:A1:B7:17:F4:1E:9E:54:93:5D:1C:80:B3:23:FB:ED
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0Zdolj6htxf0Hp5Uk10cgLMj--0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1910::/44
Signature Algorithm: sha256WithRSAEncryption
27:3a:83:f8:74:c0:e6:f0:c3:23:da:eb:ae:e2:6a:2a:3a:69:
8b:a4:86:65:a4:f6:be:9e:9b:21:4d:26:db:c7:6f:2d:66:54:
d1:33:52:27:9c:64:a9:f0:4d:cc:b5:39:64:b8:16:95:07:44:
ca:6c:87:a7:b0:1a:d1:b9:9d:78:10:fe:8a:37:6d:70:bd:f4:
a0:1c:26:98:d2:1f:66:a4:06:a5:45:de:68:ff:b3:3b:d1:a7:
15:f4:b8:ad:6f:a1:3a:d3:f6:b7:ea:66:3d:31:b2:12:4d:fe:
a5:e3:5b:71:6c:fc:03:f1:ae:04:fd:e7:98:c1:3d:88:9d:fe:
e2:f2:d0:bb:d2:ce:7c:d6:9f:a2:65:93:33:31:70:b4:27:dd:
82:e5:12:95:91:12:79:f8:cd:8d:80:84:1d:8d:8a:0a:6c:8a:
34:ed:a3:52:48:b4:7c:70:90:3d:b6:5d:de:72:07:22:1b:df:
31:e1:d4:e5:cb:72:49:aa:5d:c1:a8:5d:6f:25:32:1b:01:f9:
dd:c0:d6:4d:97:df:18:42:03:50:12:c7:52:34:a9:34:b5:fe:
90:0e:b0:62:c8:00:01:8f:51:d2:8e:8f:a1:77:b5:65:ea:e5:
4c:1b:58:71:90:51:b3:a5:65:46:82:9f:cf:c9:c9:ce:df:69:
cd:13:78:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:37 2024 by rpki-client on console-fra.rpki-client.org