Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-tIDRyOW-iWsmLBJHN6PNUhNjn8.roa
File: 1-tIDRyOW-iWsmLBJHN6PNUhNjn8.roa (raw, json)
Hash identifier: UYSmzdPbojUlJvt6A7yl6tkZnAi1knJ2yaBmRsAcUaU=
Subject key identifier: FA:D2:03:47:23:96:FA:25:AC:98:B0:49:1C:DE:8F:35:48:4D:8E:7F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D50E23C584B7AE2AC6E02F0DA0338D1DA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-tIDRyOW-iWsmLBJHN6PNUhNjn8.roa
Signing time: Sun 28 Jan 2024 16:23:40 +0000
ROA not before: Sun 28 Jan 2024 16:23:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212793
IP address blocks: 2a0e:b107:1fd1::/48 maxlen: 48
2a0f:e401:130::/44 maxlen: 48
2a10:2f00:147::/48 maxlen: 48
2a10:2f01:2d0::/44 maxlen: 48
2a10:2f01:2d1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:50:e2:3c:58:4b:7a:e2:ac:6e:02:f0:da:03:38:d1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 28 16:23:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fad203472396fa25ac98b0491cde8f35484d8e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:62:ff:b9:f1:98:52:47:62:2e:54:ec:a7:
64:9e:09:92:45:18:74:b9:0d:92:bb:33:26:93:aa:
11:13:b5:12:5b:f2:3e:ec:12:f9:af:01:0c:27:e1:
8b:02:98:12:d9:bd:18:e8:50:1f:44:33:42:ff:18:
9e:9f:e3:11:e4:ef:86:a2:c7:2d:7a:25:c7:96:5e:
65:db:ec:c3:8d:28:fa:38:88:cc:6f:fe:12:44:17:
a4:89:29:45:05:ee:51:be:21:20:7c:c8:29:52:24:
70:f8:26:be:c7:68:f6:2f:4f:37:64:2b:03:fb:f0:
18:9f:15:f7:76:0f:1b:ad:6c:69:12:26:a2:56:0a:
c3:50:39:d4:08:c7:20:bb:f9:16:a3:69:7d:13:c5:
3e:4d:b5:07:86:ad:98:44:7e:9d:73:a0:b8:fe:7b:
a8:54:6a:c3:bb:70:54:e8:be:4c:9d:90:9c:f2:9c:
c1:ba:9e:17:e5:c7:c1:75:7a:78:6b:60:3a:7a:ca:
d1:c1:50:60:35:e3:bc:c5:60:f6:70:76:88:e6:cf:
e5:9c:8b:50:30:8a:20:76:db:af:f3:99:cd:af:a5:
13:8d:fd:5f:c6:95:a0:24:a4:ad:68:ef:13:d7:b5:
88:b6:67:52:bc:22:71:c3:93:e5:ee:ee:e7:a4:36:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D2:03:47:23:96:FA:25:AC:98:B0:49:1C:DE:8F:35:48:4D:8E:7F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-tIDRyOW-iWsmLBJHN6PNUhNjn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1fd1::/48
2a0f:e401:130::/44
2a10:2f00:147::/48
2a10:2f01:2d0::/44
Signature Algorithm: sha256WithRSAEncryption
9f:3d:ea:3c:bf:7c:d7:80:74:c2:48:26:aa:5c:1d:b0:8a:e1:
0d:a0:8e:8a:3e:d8:b1:b4:07:84:27:98:c5:46:e7:32:b8:2f:
55:e4:b3:79:6a:44:2a:d3:73:d3:58:12:24:e0:d6:98:30:96:
11:0f:08:95:53:43:e7:e7:4b:da:8f:db:8a:7a:21:e2:08:e9:
86:f2:3e:f0:36:16:23:f9:33:4a:7b:ad:2f:97:4b:e8:c4:34:
a1:81:6b:27:89:81:14:68:e4:bb:17:c2:24:49:7f:09:b2:d5:
26:91:76:17:0a:75:18:12:a2:b4:00:a2:42:59:36:57:b7:27:
74:59:c5:98:c3:ec:66:aa:e2:56:8a:45:e4:18:ba:73:97:2e:
ae:b2:db:ce:30:e1:9e:56:e8:2f:7d:04:85:4a:50:38:4e:38:
d7:44:31:8d:5a:f9:7a:81:d7:0b:3a:c5:8d:b6:a8:d7:3e:ca:
ad:b3:84:81:c3:09:83:8e:f4:43:c7:42:23:1a:76:19:fd:e2:
da:6f:94:64:23:68:2e:0e:d0:65:0a:4f:bf:4d:42:65:25:0a:
c6:e8:51:85:b9:c6:af:91:58:6d:6f:aa:82:be:c9:26:89:40:
41:88:e8:22:b5:f5:06:e5:f3:bd:9a:4a:cd:5b:64:19:78:7a:
f2:b0:72:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:37 2024 by rpki-client on console-fra.rpki-client.org