Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4XTuiil0kwGtWmI7E2AVEDbuhfI.roa
File: 4XTuiil0kwGtWmI7E2AVEDbuhfI.roa (raw, json)
Hash identifier: QE8Iy47zzlsvxYQ3X4y1SLcguP9KF02f9ye7KasD010=
Subject key identifier: E1:74:EE:8A:29:74:93:01:AD:5A:62:3B:13:60:15:10:36:EE:85:F2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD1DFACB787A240DF991E46D23AB4A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4XTuiil0kwGtWmI7E2AVEDbuhfI.roa
Signing time: Tue 02 Jan 2024 10:34:23 +0000
ROA not before: Tue 02 Jan 2024 10:34:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209533
IP address blocks: 2a0e:b107:2228::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:1d:fa:cb:78:7a:24:0d:f9:91:e4:6d:23:ab:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e174ee8a29749301ad5a623b1360151036ee85f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5d:0d:2f:21:4f:61:03:fe:de:90:6f:9c:34:
44:89:f0:9f:12:3f:64:8f:bb:1c:65:64:94:bf:73:
1d:c1:10:db:c4:4d:d6:59:8e:17:33:a2:28:70:00:
91:98:d7:6d:6f:0d:2b:30:80:af:f3:54:2b:e8:9a:
52:ef:bc:d3:da:8b:7d:23:55:dd:ed:72:41:09:ef:
e2:ce:42:16:5e:86:6b:99:28:08:60:ac:b6:ac:06:
98:b2:b5:d7:e6:11:47:65:84:94:d1:48:b1:3c:83:
47:78:cf:e8:7a:97:e0:2f:b9:ed:6f:23:d3:df:a2:
ac:4f:87:56:96:78:96:62:bd:e9:cb:2a:3a:b7:d8:
f9:97:bd:90:c7:99:92:dd:c9:b8:e5:28:6d:34:f3:
2b:a0:f8:a9:a3:26:2e:bb:55:5a:68:9a:cb:e4:85:
83:82:9b:e2:af:be:7f:4f:0b:1f:ee:30:75:aa:b1:
2d:a8:45:89:00:a6:c3:6f:ac:20:60:f6:cc:cf:98:
89:71:f4:20:b5:83:09:06:da:f9:0f:9f:52:4e:09:
9b:d0:14:a4:36:c5:74:d2:27:e4:e2:e6:e9:75:d9:
bc:a8:d2:8b:6e:d3:fe:18:1d:4a:a0:bc:94:4f:18:
a5:ce:14:99:e5:78:24:04:29:ad:8b:04:30:6a:f3:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:74:EE:8A:29:74:93:01:AD:5A:62:3B:13:60:15:10:36:EE:85:F2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4XTuiil0kwGtWmI7E2AVEDbuhfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2220::/44
Signature Algorithm: sha256WithRSAEncryption
a4:7d:2e:ac:a5:9a:11:cd:39:61:90:57:69:4e:c0:b3:dc:0b:
b4:ea:d2:e8:90:a7:39:a0:a1:2c:55:f2:8d:2a:d0:6f:6a:ed:
83:4f:bb:e3:ac:65:06:c9:4a:78:22:86:ea:ea:89:2f:16:9b:
b6:43:87:74:a4:94:69:f9:c5:c2:37:9f:0f:e9:84:8c:27:8f:
4d:1c:8b:1b:b4:9c:10:0b:ea:4f:f8:c6:34:9a:31:9e:56:b4:
0b:2b:91:6a:cb:a4:36:e8:98:c7:35:c5:d8:dd:a5:4b:75:66:
26:09:57:ad:f1:d7:42:63:c6:eb:81:6b:2e:a0:d6:12:1d:22:
0f:02:a5:98:9e:2b:de:9f:7c:7d:ef:a9:2d:8f:e2:4f:1f:ee:
c7:fa:06:8a:53:fb:58:f4:51:dd:b9:32:4f:7c:96:85:b5:89:
3d:45:28:62:fd:b2:3c:2e:af:59:1a:63:f2:78:c3:ed:46:b8:
ce:1c:39:df:ea:ac:43:a7:ff:90:5c:36:1e:fc:b2:1a:8a:9f:
60:f7:2a:86:12:c2:ca:6e:50:5a:00:18:bc:8c:9e:f9:88:dc:
4f:04:4f:b3:35:50:ef:72:3b:5b:38:5a:60:23:75:8e:ef:b8:
e1:32:d1:e9:fb:e1:a7:a3:2a:a4:d1:7d:29:2d:52:f7:07:1a:
95:36:cf:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:39:02 2024 by rpki-client on console-fra.rpki-client.org