Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/29mO6_GVnC-yRzUXUnuyCKDnZjw.roa
File: 29mO6_GVnC-yRzUXUnuyCKDnZjw.roa (raw, json)
Hash identifier: oJk1n/7UDQxeSsbYCMHzK0YYVn5H5aqH2ByqNoHacv8=
Subject key identifier: DB:D9:8E:EB:F1:95:9C:2F:B2:47:35:17:52:7B:B2:08:A0:E7:66:3C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CFAD3EA9DA668F3EAF01ECD9DA40935C4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/29mO6_GVnC-yRzUXUnuyCKDnZjw.roa
Signing time: Thu 11 Jan 2024 23:20:41 +0000
ROA not before: Thu 11 Jan 2024 23:20:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210617
IP address blocks: 2a0e:b107:cc0::/48 maxlen: 48
2a0e:97c0:5a0::/48 maxlen: 48
2a0e:97c0:5a1::/48 maxlen: 48
2a0e:97c0:5af::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fa:d3:ea:9d:a6:68:f3:ea:f0:1e:cd:9d:a4:09:35:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 11 23:20:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbd98eebf1959c2fb2473517527bb208a0e7663c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:f5:bc:31:2b:d5:16:19:eb:dd:8a:a3:75:
5d:3c:7e:0c:12:93:29:93:f2:92:b3:d6:a4:e3:83:
6c:52:25:a6:37:d3:ac:bb:0f:e1:1d:60:ea:b0:c3:
ca:27:62:6d:62:55:bf:66:cb:1a:e5:0e:2d:b3:3a:
60:2e:a7:36:80:08:6a:37:6a:cf:5a:b3:1c:0d:94:
3d:d8:b5:9d:85:f1:9c:75:73:2e:e2:87:2a:8c:f9:
68:57:d3:87:27:79:e2:bd:99:6c:27:a4:d4:62:c0:
57:0f:81:e4:c6:1f:13:ed:b0:6f:96:81:f1:04:48:
2b:f1:1f:67:8a:02:65:52:98:78:3a:c9:00:ef:d6:
14:4c:e6:3e:ef:3b:a8:32:6e:0d:c5:87:1e:35:c5:
08:e4:e1:c4:c9:7d:62:66:80:c5:d3:2c:93:f2:83:
b9:10:49:6d:64:a7:cc:77:c8:6f:af:0e:0e:70:1d:
7d:47:1e:69:ab:e3:50:f8:10:27:28:99:0c:30:4f:
b8:74:77:19:fc:14:e7:17:fb:d4:c9:fe:72:85:a6:
71:4a:eb:4f:2e:8c:cf:31:53:64:ce:01:8f:f1:20:
34:6d:d3:d4:8c:2f:c9:69:f4:18:18:d9:96:e0:2a:
5c:02:c6:79:e1:f3:37:28:d9:14:cc:53:87:9b:a1:
fe:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D9:8E:EB:F1:95:9C:2F:B2:47:35:17:52:7B:B2:08:A0:E7:66:3C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/29mO6_GVnC-yRzUXUnuyCKDnZjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5a0::/47
2a0e:97c0:5af::/48
2a0e:b107:cc0::/48
Signature Algorithm: sha256WithRSAEncryption
6e:90:f9:59:28:70:b8:5d:fe:8f:5c:61:be:16:28:c4:f5:64:
16:21:43:8e:72:78:5d:24:15:0f:b7:8d:2b:24:75:cf:b2:a3:
21:05:f1:da:a6:43:9c:3a:38:e7:d4:3d:ca:db:3f:db:7a:a9:
99:46:db:ee:95:3f:62:21:19:51:93:5d:74:0a:59:62:60:c4:
10:77:33:92:ea:52:5f:b4:8f:cc:d3:95:cb:9a:bf:4a:4e:ed:
68:7f:68:23:28:5a:61:65:9e:e5:46:50:3b:1d:d1:5c:fb:95:
31:dd:3e:1f:c4:c3:b9:b6:91:9a:42:16:b2:a2:2e:4f:0a:f6:
31:a1:ee:b0:14:59:19:19:cc:ee:09:77:36:10:3e:96:7d:93:
59:18:99:38:8d:f8:fe:d9:b5:29:63:7e:5a:16:5a:cf:41:18:
69:c0:21:85:50:17:37:95:da:62:06:66:78:bc:b0:1a:b7:64:
1d:85:50:08:8b:5f:2c:d9:1c:de:7f:dd:71:8d:50:07:4b:79:
09:4c:35:ab:7e:4a:21:65:e3:34:62:62:2d:0f:38:8f:17:92:
34:ca:37:4b:de:8e:63:75:c0:84:f7:33:81:7e:12:ac:88:37:
56:68:76:65:e5:c5:69:8c:d7:be:21:9c:36:4e:f5:4f:d8:d2:
12:0c:6c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:37 2024 by rpki-client on console-fra.rpki-client.org