Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2DymMO06jBl4WXHLyCoHfh6j50w.roa
File: 2DymMO06jBl4WXHLyCoHfh6j50w.roa (raw, json)
Hash identifier: 2nFmk1poyyMKRLIrweLv2jHLjY2pkq3v7wFj+ibCDOw=
Subject key identifier: D8:3C:A6:30:ED:3A:8C:19:78:59:71:CB:C8:2A:07:7E:1E:A3:E7:4C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0192CD5CB3CDCA7ABB78F98304791F5CA61E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2DymMO06jBl4WXHLyCoHfh6j50w.roa
Signing time: Sun 27 Oct 2024 09:44:17 +0000
ROA not before: Sun 27 Oct 2024 09:44:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213971
IP address blocks: 2a0e:97c0:230::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cd:5c:b3:cd:ca:7a:bb:78:f9:83:04:79:1f:5c:a6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 27 09:44:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d83ca630ed3a8c19785971cbc82a077e1ea3e74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:c8:e2:7d:0e:c7:58:e1:21:99:ee:c2:a7:
e6:50:6f:ca:07:2b:0f:42:60:6d:ab:65:7a:d9:a0:
65:b3:40:3a:6a:b7:14:0a:12:6a:0a:4c:f7:e3:24:
9b:62:0a:32:59:1f:4f:98:c9:8a:77:07:8a:d7:cc:
91:0d:24:70:a5:d2:b7:6a:9c:03:11:ff:9e:13:32:
74:90:1a:f5:09:e3:55:14:b7:ea:6a:5f:56:2a:50:
99:f5:07:63:24:5d:bb:f5:c0:00:a2:f9:1d:a4:25:
3e:c9:6d:75:4e:8a:09:62:1d:3c:2f:a9:f0:f5:35:
8b:65:b9:78:ec:c3:24:90:c0:2c:dd:6f:01:5d:19:
e5:88:0f:04:74:5d:8f:43:e1:93:4b:e8:41:2f:9c:
19:96:4c:63:52:2e:7b:34:98:c2:1f:3b:0d:bf:1f:
60:03:a2:96:a4:8f:57:2c:c8:68:1b:f1:6b:57:fe:
d2:05:22:ce:45:c6:4c:14:74:89:4d:17:e8:a0:ad:
19:a5:51:6f:bc:e2:f6:4b:df:c2:1d:d6:13:4b:88:
73:30:12:de:6f:eb:25:b8:4f:b4:84:6c:df:44:69:
c2:d0:54:a2:59:bf:07:e0:69:32:76:6c:59:1f:72:
ee:13:60:a6:f4:89:a2:13:7e:bd:78:8f:a3:e4:35:
f2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3C:A6:30:ED:3A:8C:19:78:59:71:CB:C8:2A:07:7E:1E:A3:E7:4C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2DymMO06jBl4WXHLyCoHfh6j50w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:230::/44
Signature Algorithm: sha256WithRSAEncryption
10:6b:fe:97:41:f5:ef:d9:aa:72:fe:5c:75:c6:3b:ca:6f:28:
24:99:6a:e1:19:1e:95:65:7d:2e:7a:47:1a:d9:0e:4c:b6:97:
c1:d6:d7:4a:d7:be:1a:5d:fc:12:b8:e7:02:83:04:b6:63:47:
41:7a:b0:fe:40:39:ab:49:e4:ca:4d:88:82:33:42:cf:e0:59:
a2:a3:3d:d5:4e:8b:fa:5d:c0:9c:97:85:1c:0a:18:ca:e3:27:
23:36:3b:ea:b9:1a:e6:08:4f:28:29:70:d6:05:6c:3d:83:ef:
be:16:75:10:32:0c:5f:8d:86:3f:7c:5f:ec:66:9d:8a:a6:b8:
5c:2d:8a:d8:05:1a:c6:a3:2a:6a:25:6c:a0:de:38:ba:91:06:
fc:5a:d7:00:9a:18:25:7e:bc:99:1a:75:42:0e:3f:d6:bf:d2:
74:c1:db:17:4f:36:4b:4b:7a:93:13:9e:b8:6d:f2:2f:fa:31:
8d:e6:22:c4:43:90:a0:30:49:90:08:3f:58:5d:f7:8a:d6:fb:
45:53:aa:7f:42:2a:8e:aa:08:66:96:c6:0b:ee:c0:7d:4b:98:
f0:0c:5c:33:c4:76:bb:93:bf:e9:cb:2b:f4:96:8c:93:44:d2:
6c:c7:85:ac:c0:11:44:e3:3c:4c:ec:d4:01:e9:71:9a:4e:00:
6b:4b:b8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:23:37 2024 by rpki-client on console-fra.rpki-client.org