Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7GnxcN5oZfzVkcBvfppvoLjoOf0.roa
File: 7GnxcN5oZfzVkcBvfppvoLjoOf0.roa (raw, json)
Hash identifier: EwVhtEJU7NP1XDOvjC2Y7vPIgD2UdewQKzKY8oJckYo=
Subject key identifier: EC:69:F1:70:DE:68:65:FC:D5:91:C0:6F:7E:9A:6F:A0:B8:E8:39:FD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018EA20B7C83F47BE38B7779D304753BF16E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7GnxcN5oZfzVkcBvfppvoLjoOf0.roa
Signing time: Wed 03 Apr 2024 03:40:45 +0000
ROA not before: Wed 03 Apr 2024 03:40:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150863
IP address blocks: 2a0e:97c1:8a24::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a2:0b:7c:83:f4:7b:e3:8b:77:79:d3:04:75:3b:f1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 3 03:40:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec69f170de6865fcd591c06f7e9a6fa0b8e839fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c0:0c:54:d6:d1:7e:5d:c7:81:96:db:fa:ed:
16:81:6c:6e:d7:d1:95:61:9c:62:08:91:ba:95:33:
07:30:ef:eb:22:6e:f1:8c:38:00:9c:05:79:56:23:
a7:29:60:c7:1f:c9:82:da:78:ed:d1:fc:79:33:a0:
4c:4c:89:2f:0c:cd:13:32:f4:aa:c4:c3:2f:21:8d:
f9:3a:d6:11:4c:c8:e4:5f:14:83:7e:68:a3:98:5d:
3b:8c:bd:b4:6c:ca:f0:9f:62:dd:38:a6:0b:92:76:
d3:6c:32:32:09:de:88:e0:a9:63:65:a8:d4:e7:cb:
96:fe:aa:73:72:5a:f4:d1:ec:6a:07:26:f0:b2:61:
1f:e9:f9:df:98:43:74:15:2c:89:08:80:ce:16:a4:
68:b2:55:cf:a5:15:95:a2:42:1d:35:27:95:ad:1c:
1b:ce:23:dd:50:68:e6:33:5b:f7:87:f7:ab:98:21:
e0:e7:69:d4:ba:3f:e6:31:be:5a:12:d5:9e:23:9c:
08:96:63:71:1a:ef:0b:62:72:1d:c5:cb:d9:73:3f:
5f:de:19:3f:6c:15:16:cd:d5:2b:ae:ee:d9:d2:48:
4c:42:90:1b:dd:d6:71:1e:b1:d4:64:d0:23:a2:6c:
f1:16:6e:b0:43:e3:15:89:62:5d:f9:1b:bf:6a:a7:
55:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:69:F1:70:DE:68:65:FC:D5:91:C0:6F:7E:9A:6F:A0:B8:E8:39:FD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7GnxcN5oZfzVkcBvfppvoLjoOf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c1:8a24::/48
Signature Algorithm: sha256WithRSAEncryption
0e:71:39:6e:67:2e:8a:8b:da:d1:eb:1c:e0:94:69:02:b4:73:
d6:87:94:8d:6a:46:44:db:3e:0a:eb:64:19:0b:17:c5:0b:0a:
16:b5:c1:ad:9f:93:23:88:9f:36:a7:da:ea:59:75:a1:e3:20:
ca:d6:ce:10:e3:c8:70:51:0f:f0:fc:2c:4c:30:08:2d:6e:74:
d2:0c:05:5c:67:24:2f:0f:52:c2:69:f9:cc:4c:86:14:36:45:
04:67:e0:0e:5a:e6:e4:0a:ed:4d:8b:c9:a2:37:df:41:c4:31:
1e:ab:5e:a5:cd:4e:a7:4d:af:c9:f3:06:b1:08:66:da:dc:1e:
e1:11:20:6b:6b:ab:df:79:e5:23:c9:c1:ef:e6:96:62:c3:e4:
cb:12:08:6a:c1:9f:16:a3:d2:3e:07:13:93:ed:9a:f4:76:9b:
0a:1e:f0:92:70:80:e2:72:33:29:d9:a2:d4:26:9e:62:2e:72:
3f:eb:35:75:8a:d5:66:0c:b8:d5:23:66:2a:3f:a0:a6:0c:e1:
a6:89:66:cc:ac:f8:07:c2:18:c9:16:b0:fb:bd:4f:0b:74:3a:
da:70:6a:4f:71:c1:1a:15:9b:d4:92:85:07:41:5a:70:34:f4:
68:5d:2d:54:c5:d9:90:3b:29:34:17:da:02:a0:d4:ef:9a:48:
4e:50:8d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:39:02 2024 by rpki-client on console-fra.rpki-client.org