Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/60r6oYUj6rWzJay2BsFE0Qk8ZtY.roa
File: 60r6oYUj6rWzJay2BsFE0Qk8ZtY.roa (raw, json)
Hash identifier: 1J0/TuU5tHoLTlu2oeOdcwpI5kdn8SibmX8UnEiO0lc=
Subject key identifier: EB:4A:FA:A1:85:23:EA:B5:B3:25:AC:B6:06:C1:44:D1:09:3C:66:D6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0190D257FAA0DD1A7F3C373F13CEFEB5BF8D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/60r6oYUj6rWzJay2BsFE0Qk8ZtY.roa
Signing time: Sat 20 Jul 2024 22:51:39 +0000
ROA not before: Sat 20 Jul 2024 22:51:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203446
IP address blocks: 2a0e:97c0:3ea::/48 maxlen: 48
2a0e:97c0:470::/48 maxlen: 48
2a0e:97c0:471::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d2:57:fa:a0:dd:1a:7f:3c:37:3f:13:ce:fe:b5:bf:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 20 22:51:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb4afaa18523eab5b325acb606c144d1093c66d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:ed:06:13:19:cc:c0:fd:a8:fa:5a:42:f8:
70:e5:87:ff:db:f5:3d:2d:ea:8a:56:f7:eb:91:11:
19:ac:56:f7:59:ba:27:25:e5:15:2e:3e:5a:46:09:
ed:77:c9:26:39:d0:48:20:2d:35:4a:0b:60:b7:5e:
78:19:3d:65:24:49:4c:74:f2:c6:64:97:dc:12:b8:
cf:16:ab:e8:c6:7b:56:a9:d6:85:d1:a5:b1:24:89:
c8:e1:e9:f0:6d:dc:d5:68:38:39:f7:d2:b8:c6:71:
2a:42:55:5a:be:21:e9:bb:01:a6:f6:a7:4d:df:e2:
63:79:e4:70:3c:7f:fb:7c:4a:a8:43:46:1f:ab:0c:
5b:c9:de:63:27:ad:bb:65:d2:21:b8:23:11:94:46:
7a:3d:d9:a3:35:48:ec:c6:32:3d:36:63:35:73:2c:
e9:af:82:68:06:7e:e6:27:3f:24:21:3a:48:52:80:
34:58:38:f6:69:c8:c5:2a:0b:93:e4:a6:29:69:ea:
42:b1:fa:47:ba:94:55:6b:95:e6:d5:9b:33:b7:3c:
0e:25:eb:08:b0:08:c6:5b:a3:4e:74:0b:a5:05:15:
5e:f9:1a:11:e2:c8:b7:d7:5a:9e:0e:fc:45:7c:d4:
f4:79:31:9a:50:c4:07:3a:78:07:17:e3:42:7e:66:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4A:FA:A1:85:23:EA:B5:B3:25:AC:B6:06:C1:44:D1:09:3C:66:D6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/60r6oYUj6rWzJay2BsFE0Qk8ZtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3ea::/48
2a0e:97c0:470::/47
Signature Algorithm: sha256WithRSAEncryption
89:c9:9a:9d:6f:e9:19:3a:6d:9f:2e:ad:f8:51:f7:8c:f6:7b:
33:17:4b:42:c1:70:08:2d:ac:c5:c1:47:b6:1e:c1:57:4b:17:
f6:e1:fb:69:da:eb:26:14:94:c9:74:f4:b9:76:ca:a9:33:84:
63:f0:1e:0c:6d:aa:a1:6f:0f:a1:0e:d6:84:ab:ba:f2:d9:39:
4e:88:eb:5e:84:3f:19:9e:3a:8b:3d:47:3a:11:42:cf:2b:0f:
a3:ee:7e:49:c8:d8:01:03:c5:9e:d1:35:a0:6b:05:29:79:df:
d9:19:db:9e:3d:6b:4e:f1:2b:b7:73:01:62:5c:63:42:f2:c9:
04:60:5e:17:a6:1b:3d:c5:6d:11:a9:3d:53:5c:f1:ab:4b:0c:
d2:3e:03:5e:8e:2e:8b:a8:ff:3a:82:da:8b:48:6c:24:4d:c0:
42:59:6b:1f:ee:e1:fc:15:7c:6d:ef:d8:99:d9:f0:ab:ad:90:
9e:06:d2:1d:05:ad:f1:cc:93:c4:d9:a4:39:a6:5c:46:93:44:
6d:b8:f5:c6:65:65:a7:2e:3d:03:7b:f1:42:5b:80:08:7f:cc:
80:eb:e3:f8:98:90:dc:77:d5:68:84:a9:30:7e:e5:dd:8e:7c:
f7:6a:e8:04:99:c2:4f:d3:6e:bf:da:ac:c9:2c:3c:d9:17:fd:
08:f8:8f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:29 2024 by rpki-client on console-fra.rpki-client.org