Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-18KbfVnItjj_bI0g4QkfDwPmbM.roa
File: 1-18KbfVnItjj_bI0g4QkfDwPmbM.roa (raw, json)
Hash identifier: W4M7+rqElWjDY44G76wbTcEf0Zy4uAcd1/KgS5OnXsE=
Subject key identifier: FB:5F:0A:6D:F5:67:22:D8:E3:FD:B2:34:83:84:24:7C:3C:0F:99:B3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D098890FA11A4F661B8FE8F9019A203C3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-18KbfVnItjj_bI0g4QkfDwPmbM.roa
Signing time: Sun 14 Jan 2024 19:52:41 +0000
ROA not before: Sun 14 Jan 2024 19:52:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215747
IP address blocks: 2a06:de00:710::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:09:88:90:fa:11:a4:f6:61:b8:fe:8f:90:19:a2:03:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 14 19:52:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb5f0a6df56722d8e3fdb2348384247c3c0f99b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:6d:88:b4:93:0c:05:e3:0f:b0:ae:d6:87:
27:b8:49:8e:bb:73:bd:19:52:f9:6d:a6:74:11:5b:
2c:75:03:65:25:b4:d3:20:0b:04:4d:b9:ee:e2:08:
12:77:38:1c:0d:d4:28:ca:fe:e7:b2:6f:e3:fa:94:
aa:80:c7:2a:af:7c:bf:30:cf:fe:67:a3:e4:83:c6:
08:49:50:17:35:ed:f4:20:ff:c1:5e:be:6c:9f:db:
46:83:f5:04:53:89:8d:f2:a2:27:7c:03:2c:73:31:
b3:ef:19:91:c9:92:ee:3a:51:cc:41:ba:42:f8:6d:
42:78:b5:10:64:f1:fa:74:c2:8b:24:32:b8:de:a2:
f9:f9:2a:3c:cd:39:5c:a5:d2:cd:cb:2a:31:40:2b:
fa:a6:43:76:4c:c9:c0:0a:76:0e:ab:9a:23:9c:83:
e2:4e:b3:49:62:0f:b7:ec:b9:6a:68:e7:be:ee:7d:
60:d9:7d:74:9e:7d:8f:c6:f6:36:d5:44:c3:da:95:
c8:05:4a:1b:de:3d:af:62:81:a8:f5:f8:3f:68:1d:
82:3a:de:1d:e7:59:9f:a6:83:93:15:51:ba:74:3e:
7a:fb:7b:8f:16:50:be:0e:d9:92:72:8b:ca:d0:29:
97:ce:4e:87:cc:a8:2e:d6:78:21:7e:ea:06:28:7d:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5F:0A:6D:F5:67:22:D8:E3:FD:B2:34:83:84:24:7C:3C:0F:99:B3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-18KbfVnItjj_bI0g4QkfDwPmbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:710::/44
Signature Algorithm: sha256WithRSAEncryption
ae:89:76:09:fd:1f:c1:7f:68:68:d5:8e:98:f8:77:a8:07:be:
2f:5f:fc:d5:10:9c:fc:7f:b5:38:c5:2a:80:d7:30:ef:39:8d:
10:0c:4e:23:93:94:61:78:f7:6c:30:b1:7b:ad:ab:de:ff:aa:
d8:2e:55:e1:53:76:fb:4f:36:9d:9d:31:a5:ee:51:32:e2:0a:
6a:a9:33:ca:4b:af:e7:45:9a:3b:79:9d:cb:51:fe:fd:a8:1d:
df:dd:18:f3:ed:cd:4c:c5:9d:7a:22:21:1e:76:0b:fe:7f:ba:
cb:79:aa:a3:1f:6e:18:e6:db:a3:de:54:76:24:62:7e:11:f1:
c6:7b:b6:e0:10:f4:db:e6:59:d3:b9:c7:88:1c:0a:2e:a2:e1:
1e:3f:6b:a9:6a:82:fb:51:bc:e7:bf:50:74:0a:92:89:2f:9a:
6c:78:22:ec:e0:b1:f4:db:52:40:87:f3:03:3c:6b:30:15:a1:
de:56:65:9a:31:2b:a6:16:a9:f5:7f:80:47:97:f7:dc:46:c8:
ad:6c:8c:d3:cd:84:c5:87:f9:1f:ec:0a:2f:13:6f:cd:1f:42:
ef:b0:fe:a7:bf:0f:52:8a:18:c7:87:78:56:12:84:be:2b:e5:
8d:7d:de:25:a5:4a:0b:b9:7b:b3:18:39:07:26:b5:6b:96:90:
41:a4:33:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:37 2024 by rpki-client on console-fra.rpki-client.org