Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-Dvw2yzS9hAgunf4xyfu7QGVxyw.roa
File: 1-Dvw2yzS9hAgunf4xyfu7QGVxyw.roa (raw, json)
Hash identifier: Q8XpaYa2d8PWN68NoqxHOl0rh68p11l9FxC/fQYk38k=
Subject key identifier: F8:3B:F0:DB:2C:D2:F6:10:20:BA:77:F8:C7:27:EE:ED:01:95:C7:2C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD427A2301403016337E2A900EC813
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-Dvw2yzS9hAgunf4xyfu7QGVxyw.roa
Signing time: Tue 02 Jan 2024 10:34:32 +0000
ROA not before: Tue 02 Jan 2024 10:34:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212267
IP address blocks: 2a0e:b107:50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:42:7a:23:01:40:30:16:33:7e:2a:90:0e:c8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f83bf0db2cd2f61020ba77f8c727eeed0195c72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6b:1d:c8:83:6b:8e:3c:35:dc:7e:74:db:83:
0c:99:fe:6e:80:cd:49:4b:a1:aa:51:5d:67:c7:94:
34:35:b0:23:8f:af:b0:fd:e7:4d:a6:11:e7:3d:c6:
e4:16:13:ca:30:e9:d4:e2:57:1d:a8:99:99:88:3e:
54:76:80:50:05:f3:1a:39:00:f4:26:2f:38:7f:c1:
80:ba:82:ae:3b:12:47:b2:e4:1a:93:e7:d6:ff:57:
93:49:1d:16:5a:24:5a:a8:77:21:06:a6:8d:ca:5b:
25:bd:35:3e:bb:5d:f6:53:96:ab:65:03:09:81:02:
11:a7:5b:06:a0:e8:05:8f:99:9d:0b:55:4a:29:f2:
6c:a5:e3:d3:e8:b2:c3:f3:e0:16:ed:75:79:95:03:
3d:4a:56:e7:b1:53:64:34:1a:3c:ad:ea:f2:5d:2f:
cb:55:d3:a0:1d:22:a8:79:d3:4e:68:5c:48:5a:31:
95:fe:14:44:bd:91:21:87:0e:65:89:3a:5e:08:cf:
b6:25:0d:29:72:6e:e6:ff:8b:3b:0f:c1:d5:28:2c:
42:2a:38:9c:0b:fa:5a:8f:e9:2e:9a:c5:83:47:0a:
11:68:63:4b:a2:ce:9c:e2:3a:27:0f:ab:34:46:de:
e8:92:48:ed:74:78:9a:b4:8e:35:39:61:22:46:15:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3B:F0:DB:2C:D2:F6:10:20:BA:77:F8:C7:27:EE:ED:01:95:C7:2C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-Dvw2yzS9hAgunf4xyfu7QGVxyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:50::/44
Signature Algorithm: sha256WithRSAEncryption
26:ad:de:c4:5d:3c:94:8f:99:4d:ae:2d:a4:06:95:99:c5:b3:
fd:bd:a1:4c:33:a8:db:c3:43:c3:4a:cf:18:92:0f:3e:1c:de:
d7:f7:a5:80:c5:6f:49:18:36:e6:51:79:62:88:3f:3a:4e:08:
56:96:cb:0f:ce:83:4d:f1:17:bf:26:6b:90:7a:87:7f:ed:50:
f7:1d:51:c7:2a:af:0b:ee:0a:1b:aa:d8:ee:fb:7b:85:20:f6:
3d:23:fc:88:2c:0e:5d:0d:61:60:da:29:a6:80:85:b4:89:79:
31:ce:1c:39:f1:81:7d:8e:b9:6a:44:54:b3:43:02:75:f1:63:
36:d0:78:63:d3:a7:8f:49:44:53:f3:e7:b6:4c:0b:a8:a3:de:
f7:c2:c4:9a:72:78:aa:91:05:75:27:be:a8:f6:d7:f2:9d:54:
e5:ca:03:d9:e8:b5:dd:14:11:5c:29:70:dd:29:1f:3f:c9:07:
7e:ba:e1:51:58:1e:bb:18:63:9c:68:e2:67:d5:c8:fb:77:b5:
54:95:58:7e:6f:aa:b6:48:84:c3:65:b0:a7:5f:83:8e:66:49:
bf:64:d8:9a:8c:b0:87:c1:8d:68:0f:e7:78:67:44:07:74:f2:
86:98:06:e0:67:ad:59:23:0a:24:1a:aa:a8:5e:19:3d:1a:88:
24:18:7d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:41:01 2024 by rpki-client on console-ams.rpki-client.org