Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/826dSg2p9WOFNlaJrlPvGDMxi1A.roa
File: 826dSg2p9WOFNlaJrlPvGDMxi1A.roa (raw, json)
Hash identifier: Z1dqJ4+vhVKT75ZkghaSMORtTghqG2edMkE48tt/VD0=
Subject key identifier: F3:6E:9D:4A:0D:A9:F5:63:85:36:56:89:AE:53:EF:18:33:31:8B:50
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01907E9F2C01FBA0E62AC9C31B9D885D9A26
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/826dSg2p9WOFNlaJrlPvGDMxi1A.roa
Signing time: Thu 04 Jul 2024 16:41:18 +0000
ROA not before: Thu 04 Jul 2024 16:41:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216093
IP address blocks: 2a0e:97c0:df0::/48 maxlen: 48
2a0e:97c0:df1::/48 maxlen: 48
2a0e:97c0:df2::/48 maxlen: 48
2a0e:97c0:df3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:9f:2c:01:fb:a0:e6:2a:c9:c3:1b:9d:88:5d:9a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 4 16:41:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f36e9d4a0da9f56385365689ae53ef1833318b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:94:bc:70:76:b7:cd:7b:da:36:7d:48:df:cf:
d8:ff:7f:49:3f:91:e6:3c:db:e0:c2:aa:92:70:fb:
87:b6:77:71:e8:bc:a2:a2:0e:02:3f:c1:6f:df:a7:
9d:88:54:de:b9:8c:3a:9a:15:47:9f:74:e4:16:e1:
51:79:c1:dd:b6:7b:97:58:0a:8a:d9:c4:e2:a5:ea:
bc:eb:fa:19:49:5f:e5:90:9e:44:1c:15:4b:b9:0e:
1d:38:c1:0b:71:b1:65:81:14:6d:b3:19:d5:75:1c:
12:9b:b6:11:36:52:74:36:63:ef:b3:14:12:ba:63:
41:08:9e:61:3f:b4:33:8a:92:2d:bc:be:29:31:b4:
ff:a1:3e:94:cf:10:d5:12:b5:d3:95:96:49:53:2e:
2b:fb:5c:33:1a:96:98:b4:60:d2:ae:39:15:ca:5c:
67:2f:9a:54:62:37:02:21:66:59:01:fe:ae:2b:e4:
82:a7:e4:49:f2:7f:47:4d:c9:a3:5e:65:5c:60:77:
f3:91:2d:fa:2f:42:89:eb:3e:62:09:86:17:d3:7a:
fe:b3:d0:1f:5b:76:42:00:13:62:5c:7a:0c:ba:e6:
51:4a:6d:f7:a3:ee:7b:2f:9d:0b:c6:a4:23:86:e5:
b1:4f:b9:aa:c7:7c:17:9c:ab:f2:7b:6a:0c:07:a7:
6b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6E:9D:4A:0D:A9:F5:63:85:36:56:89:AE:53:EF:18:33:31:8B:50
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/826dSg2p9WOFNlaJrlPvGDMxi1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:df0::/46
Signature Algorithm: sha256WithRSAEncryption
70:38:34:07:d1:f0:47:aa:a9:96:93:83:ac:53:75:53:5a:ac:
59:be:0a:a8:de:98:30:e5:b9:d7:9b:16:df:79:1c:5d:7f:fc:
bc:3a:87:86:45:2d:df:5e:0f:11:0d:0a:bb:ce:e7:aa:82:85:
ef:e2:fe:a0:a8:5b:fc:19:00:73:22:08:4d:6e:03:72:87:27:
96:26:0f:7e:7d:8b:12:51:84:3b:a7:2d:88:ff:c7:f9:4e:cc:
cb:de:bb:05:c5:a9:af:4b:e2:bc:b0:c2:8e:08:8d:c7:35:e7:
0d:90:37:dd:47:fc:79:ad:21:d0:9f:c8:b0:7d:c9:f7:01:c6:
98:b4:27:44:42:b2:5a:15:8a:e2:9e:c0:7e:48:33:78:76:71:
78:80:5f:88:94:20:f0:73:89:16:f0:ef:19:66:be:7f:cd:a8:
65:5f:98:a9:ea:b5:5e:b8:ab:f6:b6:a4:93:a5:6a:c3:4d:71:
58:c6:59:9d:07:22:ae:61:ba:49:59:0c:a2:76:73:c1:34:c8:
eb:f5:8d:87:a6:19:40:59:69:2d:e6:42:27:ce:d2:b4:57:31:
e5:cc:7f:a9:dc:c2:6d:32:40:82:4e:e0:96:fe:04:76:78:5d:
f8:14:5f:80:e8:ba:c1:61:63:46:72:b5:68:c9:b9:7c:1e:fe:
8a:87:45:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:53 2024 by rpki-client on console-ams.rpki-client.org