Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3Zi9gKyDis_qRH1D2Ltdq1QOs40.roa
File: 3Zi9gKyDis_qRH1D2Ltdq1QOs40.roa (raw, json)
Hash identifier: zrlNvnp1NynjYol2/OCTAPF8ZoQMFS2vG8hvtYUbcpM=
Subject key identifier: DD:98:BD:80:AC:83:8A:CF:EA:44:7D:43:D8:BB:5D:AB:54:0E:B3:8D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD57974D5EF5555A71C0751215E49B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3Zi9gKyDis_qRH1D2Ltdq1QOs40.roa
Signing time: Tue 02 Jan 2024 10:34:38 +0000
ROA not before: Tue 02 Jan 2024 10:34:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216357
IP address blocks: 2a0e:97c0:500::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:57:97:4d:5e:f5:55:5a:71:c0:75:12:15:e4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd98bd80ac838acfea447d43d8bb5dab540eb38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d3:eb:c7:37:45:59:9e:f3:cf:2d:45:08:df:
a4:fa:2a:bb:2f:da:f9:07:57:64:8b:37:a1:59:61:
b1:80:9d:68:ee:13:ed:be:60:29:cb:cc:80:af:04:
6e:55:6a:9d:b3:e2:1b:75:eb:bb:32:a5:0b:67:68:
af:21:0c:c5:9e:4e:88:ee:4d:87:b0:fc:22:12:af:
87:e0:21:2b:43:8b:2a:da:22:56:31:db:54:9b:6b:
ca:87:ce:d5:d6:a0:c4:0f:9f:40:ac:b0:3b:36:bb:
2b:40:18:d8:e2:fc:d7:16:47:3d:38:3c:8a:3d:8d:
d3:75:37:18:a4:fd:fd:0a:d9:a7:98:5e:c2:92:bb:
78:e8:a5:c2:77:eb:f2:dd:69:6c:a1:1e:35:70:ed:
1d:ab:c3:51:1f:67:1a:7c:8c:c0:3f:40:bd:10:b8:
8a:88:1f:b0:92:74:38:cf:89:56:55:c7:dd:12:95:
5a:e0:a7:5f:cb:65:bc:f8:fc:cf:8e:02:ef:1e:84:
f7:73:0d:41:ac:b1:8c:13:60:bd:38:8d:d4:b0:bc:
9d:27:8b:16:76:2e:5f:01:eb:d4:08:9f:8b:a2:74:
fb:ef:c8:1a:3d:46:94:23:3e:77:a0:93:06:44:bb:
36:5b:79:e7:0b:c3:8c:1f:97:10:2e:0c:91:68:0e:
9a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:98:BD:80:AC:83:8A:CF:EA:44:7D:43:D8:BB:5D:AB:54:0E:B3:8D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3Zi9gKyDis_qRH1D2Ltdq1QOs40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:500::/44
Signature Algorithm: sha256WithRSAEncryption
01:1c:82:c6:31:04:17:aa:81:d1:a7:fa:de:fa:07:1c:d0:d2:
54:88:02:44:fc:ee:89:79:ce:55:41:d1:c3:6a:8f:f2:ec:56:
1a:a5:45:c8:91:35:0a:69:55:07:7b:9e:52:d1:c8:0a:c2:f3:
10:04:ec:bc:29:5b:18:2a:04:27:66:32:1a:48:05:9c:4f:0e:
4f:cb:21:1b:cf:e0:36:bd:df:05:cc:20:12:3e:cc:61:ff:30:
15:cd:ac:b6:7b:ff:b4:e6:e6:94:39:7f:38:52:10:30:e3:02:
b8:b6:d3:c3:34:2b:5a:fe:d6:5e:02:ea:ad:a2:9e:84:93:42:
aa:8c:6c:67:62:82:ee:4e:d7:ae:bd:49:59:89:2d:0b:68:e5:
cb:f2:12:b3:2b:4f:5e:07:f2:0b:90:01:6d:32:30:b9:fb:58:
b0:e5:80:06:f0:fd:85:7e:54:9b:2e:e8:2e:2b:47:36:2b:da:
29:d4:92:60:c5:1d:07:79:5b:9d:2c:ee:13:e4:ea:70:19:d4:
52:d4:92:28:1d:14:c9:00:03:56:a1:37:a1:a1:70:5a:63:fe:
3a:6f:ea:57:43:0e:38:c7:85:9d:7b:8e:6f:e7:85:55:e2:ea:
b1:c0:28:ba:bd:ef:25:df:c1:1e:f1:bc:8b:8e:c9:1a:e4:34:
75:ba:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:37 2024 by rpki-client on console-fra.rpki-client.org