Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4397e3riWm5KgXLyzTTDkwU4Njg.roa
File: 4397e3riWm5KgXLyzTTDkwU4Njg.roa (raw, json)
Hash identifier: 6EI2dIsJwW6g1QlkqKxMl+w5BNR3xXdjOZjhOoFwSd4=
Subject key identifier: E3:7F:7B:7B:7A:E2:5A:6E:4A:81:72:F2:CD:34:C3:93:05:38:36:38
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD2401B82183C0415BF903002FD885
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4397e3riWm5KgXLyzTTDkwU4Njg.roa
Signing time: Tue 02 Jan 2024 10:34:25 +0000
ROA not before: Tue 02 Jan 2024 10:34:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210426
IP address blocks: 2a0e:97c0:5e0::/44 maxlen: 48
2a0e:97c0:5ee::/48 maxlen: 48
2a0e:b107:17e4::/48 maxlen: 48
2a0e:b107:17e9::/48 maxlen: 48
2a0e:97c0:5ec::/48 maxlen: 48
2a0e:b107:17ee::/48 maxlen: 48
2a0e:97c0:5e7::/48 maxlen: 48
2a0e:97c0:5e2::/48 maxlen: 48
2a0e:b107:17e0::/44 maxlen: 48
2a0e:b107:17e2::/48 maxlen: 48
2a0e:97c0:5eb::/48 maxlen: 48
2a0e:b107:17e7::/48 maxlen: 48
2a0e:97c0:5e6::/48 maxlen: 48
2a0e:b107:17ec::/48 maxlen: 48
2a0e:97c0:5e9::/48 maxlen: 48
2a0e:97c0:5e4::/48 maxlen: 48
2a0e:b107:17e0::/48 maxlen: 48
2a0e:97c0:5ed::/48 maxlen: 48
2a0e:b107:17e5::/48 maxlen: 48
2a0e:97c0:5e8::/48 maxlen: 48
2a0e:b107:17ea::/48 maxlen: 48
2a0e:97c0:5e3::/48 maxlen: 48
2a0e:b107:17ef::/48 maxlen: 48
2a0e:97c0:5e1::/48 maxlen: 48
2a0e:b107:17e3::/48 maxlen: 48
2a0e:b107:17e8::/48 maxlen: 48
2a0e:97c0:5e5::/48 maxlen: 48
2a0e:b107:17ed::/48 maxlen: 48
2a0e:97c0:5e0::/48 maxlen: 48
2a0e:b107:17e1::/48 maxlen: 48
2a0e:b107:17e6::/48 maxlen: 48
2a0e:97c0:5ef::/48 maxlen: 48
2a0e:b107:17eb::/48 maxlen: 48
2a0e:97c0:5ea::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:24:01:b8:21:83:c0:41:5b:f9:03:00:2f:d8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e37f7b7b7ae25a6e4a8172f2cd34c39305383638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5e:cb:14:aa:d2:9e:12:67:49:5f:96:d6:23:
a7:77:eb:af:f7:6b:7a:16:86:42:a9:07:db:b3:09:
ea:a0:2f:9d:7e:b2:42:8e:e0:09:33:e0:22:4b:ff:
b7:20:f0:4e:0f:51:88:62:28:7b:ae:60:4a:ad:e1:
2e:f8:dd:a1:94:75:5a:7b:2d:0f:6d:89:17:8a:f8:
46:13:61:4c:d8:61:78:92:21:08:62:a8:c8:cd:99:
d3:7c:df:14:bb:0f:c0:35:32:3b:1d:5a:7c:de:de:
14:24:6b:13:4b:b0:6b:cb:e2:c7:f4:ef:52:78:38:
96:75:0f:1a:ce:27:9a:86:bf:f5:3f:e8:88:63:2d:
37:2b:32:62:5d:e4:64:da:ef:25:21:28:87:02:1b:
42:9c:d1:78:54:4b:3d:6a:1e:5f:51:37:54:fc:0a:
c5:3a:94:7c:f9:3f:80:22:7c:c0:46:85:38:55:fc:
8a:44:49:31:e9:0d:d8:a1:48:4c:54:b4:29:10:da:
77:83:ad:55:45:3e:7c:30:7b:92:11:48:72:2b:a0:
11:8d:7f:d2:bf:53:6c:5f:d8:b5:c8:f7:6e:c3:35:
e9:e9:b6:c9:26:78:f4:f9:2e:b4:f2:d5:99:24:b6:
a8:c0:f7:78:2f:15:12:c4:5b:1d:8c:66:39:89:07:
22:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7F:7B:7B:7A:E2:5A:6E:4A:81:72:F2:CD:34:C3:93:05:38:36:38
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4397e3riWm5KgXLyzTTDkwU4Njg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5e0::/44
2a0e:b107:17e0::/44
Signature Algorithm: sha256WithRSAEncryption
a1:05:70:c0:10:06:33:e0:af:e0:3d:ab:ee:f4:9c:5b:44:f5:
4b:8a:4e:4e:70:1a:a8:b4:41:26:d3:f8:11:2e:45:67:19:d1:
27:5d:3c:59:95:d8:a2:14:f1:20:18:31:4b:3a:36:21:d1:1c:
db:76:28:d1:63:60:b4:2f:96:fa:dd:b8:a6:1a:4e:60:39:0e:
69:ff:44:18:75:c6:9c:8a:6e:64:d4:bb:d5:39:b1:6a:42:dc:
0d:fb:45:23:8a:85:c4:29:84:d7:e4:56:12:e3:87:18:f5:76:
df:e6:0e:26:4c:7f:3e:59:45:12:a7:12:e8:1f:3e:09:4e:a4:
91:7f:d8:38:0a:db:c8:40:a1:6b:47:2c:7e:b1:df:67:c3:09:
49:ff:db:0e:76:12:2f:fc:1a:57:6d:9e:04:5d:85:6f:f2:3c:
23:da:2b:3a:bf:6c:d1:c4:6b:67:38:22:76:b3:31:24:06:a8:
a5:16:ae:1b:95:f9:55:a0:98:2d:98:f5:85:68:f6:b0:67:ae:
2a:05:7e:3c:b6:e5:c7:54:b9:d3:63:ff:19:22:e4:1c:8d:37:
56:69:4d:9d:c8:f3:41:1f:24:b8:ad:59:e9:63:c2:8f:a6:07:
77:ae:36:c0:13:b7:e1:21:d8:3b:30:75:33:5a:40:25:29:40:
44:89:88:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:34:58 2024 by rpki-client on console-ams.rpki-client.org