Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5UnldIoqBgtpx7MRxvbV8zTDdXM.roa
File: 5UnldIoqBgtpx7MRxvbV8zTDdXM.roa (raw, json)
Hash identifier: CCg/mKYwLFu3BmOqAr7KoK7pz/4sEpOKbwafXqDzLFA=
Subject key identifier: E5:49:E5:74:8A:2A:06:0B:69:C7:B3:11:C6:F6:D5:F3:34:C3:75:73
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCEFD1E54CAF4DDD29ECBC732B84EC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5UnldIoqBgtpx7MRxvbV8zTDdXM.roa
Signing time: Tue 02 Jan 2024 10:34:11 +0000
ROA not before: Tue 02 Jan 2024 10:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199829
IP address blocks: 2a0e:b107:1ef0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ef:d1:e5:4c:af:4d:dd:29:ec:bc:73:2b:84:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e549e5748a2a060b69c7b311c6f6d5f334c37573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:e8:27:b7:b2:0d:c4:41:53:d2:ab:d4:bb:
c8:42:f3:a4:d0:07:6f:01:1a:12:b4:94:3d:a0:c0:
fc:bb:d1:33:9b:15:37:9c:83:ae:16:71:53:65:6e:
fa:1f:1c:7f:40:d5:fa:f5:1d:c6:d5:42:b6:76:0f:
71:a1:dc:9f:65:fc:2e:15:1f:fc:07:66:a0:41:a4:
03:02:96:ea:7c:13:41:58:ba:7d:8f:24:a5:7c:36:
f4:e3:14:8d:67:b3:01:de:db:79:b4:a6:8f:38:e0:
d9:a5:49:a0:01:f5:80:01:14:5b:e8:b3:7e:11:95:
ae:93:9a:6b:2d:ed:a4:4f:43:0c:15:38:c6:b6:97:
52:11:9f:55:92:8b:e8:31:27:06:16:a6:ed:e8:99:
ef:52:43:b8:4b:d7:c5:66:44:f3:8b:26:cb:da:20:
4c:20:00:1a:0d:26:0c:b2:e0:1c:c2:b3:a5:37:a0:
11:39:ce:1b:65:1f:87:59:fd:fc:e1:54:4b:bb:c7:
14:64:57:1f:06:33:94:ae:fc:49:0c:92:1d:5b:37:
7a:d0:da:a2:0b:62:05:81:82:58:0d:75:db:aa:05:
47:23:70:33:6f:59:40:c5:98:42:e7:3f:78:b8:c0:
60:a2:76:a6:70:cf:b9:76:56:21:05:1e:f3:90:be:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:49:E5:74:8A:2A:06:0B:69:C7:B3:11:C6:F6:D5:F3:34:C3:75:73
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5UnldIoqBgtpx7MRxvbV8zTDdXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1ef0::/44
Signature Algorithm: sha256WithRSAEncryption
5f:3a:7a:b7:52:1c:39:05:f8:50:3e:95:50:5f:de:63:6c:23:
d7:8f:26:ed:ca:4f:42:3b:20:c2:17:64:51:f7:cc:5e:c0:72:
80:d8:d6:59:9f:03:20:2d:68:f3:55:66:00:2b:5a:76:57:2b:
66:4b:ab:84:24:77:98:a0:05:84:0d:1a:65:5c:81:98:b5:db:
97:0a:2d:44:c9:ee:a2:ca:cf:2b:88:73:0c:e9:6c:39:cf:09:
a5:ff:ae:dc:e7:37:7f:ec:f3:7d:4e:79:71:90:64:85:51:9e:
f8:97:60:e0:dc:01:47:ea:c1:05:78:0d:5b:2f:12:d2:44:f7:
a2:be:58:ba:5c:a8:b0:1e:98:16:f4:df:62:29:d2:7a:88:73:
0c:97:26:ee:c0:1b:ec:6a:ca:e0:0d:51:93:23:54:b5:c0:a5:
da:bf:35:42:55:ff:9c:92:5b:11:8a:5a:b2:61:23:4c:ec:f2:
18:33:66:ae:91:5b:0c:2f:04:ef:1f:36:3b:aa:ed:bf:a8:06:
2c:00:53:1f:a3:6e:be:95:5e:38:c8:ee:d9:37:7a:06:da:78:
33:e1:7e:3a:df:e3:28:1c:86:26:98:83:f0:b0:d1:48:c0:ff:
ce:e1:91:aa:2b:38:fc:de:76:1f:06:f8:2a:45:9c:83:ff:77:
4c:6e:7c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:33:15 2024 by rpki-client on console-ams.rpki-client.org