Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0cj7OobADR3ZxzYmjyYC-hv9jMU.roa
File: 0cj7OobADR3ZxzYmjyYC-hv9jMU.roa (raw, json)
Hash identifier: 5904gaZKffkPpsTYUQa9aGKp4qYNKHgUEN6ZzklPrfQ=
Subject key identifier: D1:C8:FB:3A:86:C0:0D:1D:D9:C7:36:26:8F:26:02:FA:1B:FD:8C:C5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD1681E59677C084B2A7F65414A698
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0cj7OobADR3ZxzYmjyYC-hv9jMU.roa
Signing time: Tue 02 Jan 2024 10:34:21 +0000
ROA not before: Tue 02 Jan 2024 10:34:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208059
IP address blocks: 2a0e:b107:2b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:16:81:e5:96:77:c0:84:b2:a7:f6:54:14:a6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1c8fb3a86c00d1dd9c736268f2602fa1bfd8cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:85:0a:1c:b6:4e:21:04:00:3d:f8:5f:55:ad:
5d:a6:52:50:09:ca:77:a7:43:ce:40:76:58:79:66:
80:aa:9b:d6:c3:f8:27:86:2d:d2:ef:77:bb:33:c6:
69:76:5f:1f:0b:f4:56:7c:54:2c:dd:7e:83:95:6e:
d0:58:f6:4f:0d:12:ec:ed:d0:bf:51:62:3b:87:8d:
ef:c8:be:2f:74:33:62:26:17:05:11:05:e8:ad:2d:
39:2c:7f:8d:ec:06:de:3b:6b:a3:db:a8:31:16:5a:
b5:a3:00:5d:cd:60:0b:b8:95:18:07:d6:8f:13:1e:
6a:01:9e:44:e3:8b:1f:86:07:af:bd:ab:95:ec:ae:
d6:27:1f:f4:95:65:32:c0:2a:9c:50:ba:cd:d7:f4:
b4:6d:39:de:43:56:05:4a:25:a0:e1:72:a2:ef:7a:
68:58:0e:7d:e5:58:57:dd:2b:89:b9:6f:88:5d:25:
85:24:7b:16:ee:94:6e:71:84:32:05:74:50:75:b4:
7b:3e:6d:df:af:77:bb:aa:e5:d0:86:d7:60:e3:d8:
b8:06:74:8a:5c:8d:87:93:4d:6b:26:7e:46:50:67:
a1:e7:23:08:00:9c:cd:48:ef:8f:9f:ba:87:ce:a1:
61:de:85:c0:c1:b0:dd:86:07:14:8f:46:d8:3b:4d:
17:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C8:FB:3A:86:C0:0D:1D:D9:C7:36:26:8F:26:02:FA:1B:FD:8C:C5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0cj7OobADR3ZxzYmjyYC-hv9jMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2b::/48
Signature Algorithm: sha256WithRSAEncryption
a6:44:71:e2:4a:69:88:6c:ae:78:69:a0:f7:e2:84:bd:d5:68:
e3:11:f4:6b:02:80:4a:da:52:c4:c8:c9:20:84:52:9b:94:27:
e1:83:9d:71:b5:c5:70:81:f4:51:57:5e:6d:1a:75:ef:cc:59:
61:b9:ac:b0:26:5c:bc:3e:e4:62:1c:e5:ff:79:69:cc:58:79:
bc:86:8d:0b:7f:40:32:8d:53:d2:bd:4e:f4:5d:96:2b:7a:bd:
26:be:a5:94:5b:9e:40:09:36:ac:69:97:07:bc:67:fa:4d:8c:
a2:99:31:37:f7:5b:ef:82:9b:cb:c0:05:8f:b8:3f:2f:d0:f4:
fc:6e:b1:99:72:01:f5:3f:76:f8:0d:96:1c:87:07:15:53:65:
10:8a:df:12:5e:85:1f:4d:a9:9e:8f:6c:10:f8:07:1c:98:d6:
a2:41:b1:92:08:cc:11:f1:c9:fa:a9:e0:d1:7d:f6:0e:dd:f2:
d3:0f:14:fa:52:68:89:25:5e:70:b0:01:ab:b9:60:85:78:d4:
b4:f6:f6:ef:98:19:01:38:52:dd:29:75:3f:03:e7:89:27:c2:
c5:ae:f2:36:5f:fd:b1:6c:fa:14:1f:f0:fd:43:3d:e2:98:a5:
38:3e:86:2e:a7:97:51:ca:cb:28:c1:04:3c:16:8b:10:fc:9c:
8f:0f:7e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:31 2024 by rpki-client on console-fra.rpki-client.org