Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/97J54HYPmCziRNzEmHAIVQwOED8.roa
File: 97J54HYPmCziRNzEmHAIVQwOED8.roa (raw, json)
Hash identifier: GosF/B+fpZ2VY8bgVP7nManTU+lCQQLsuMMSuhscIJg=
Subject key identifier: F7:B2:79:E0:76:0F:98:2C:E2:44:DC:C4:98:70:08:55:0C:0E:10:3F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CE929EEFD52228CBC954B908DA07E1F0F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/97J54HYPmCziRNzEmHAIVQwOED8.roa
Signing time: Mon 08 Jan 2024 13:01:28 +0000
ROA not before: Mon 08 Jan 2024 13:01:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215760
IP address blocks: 2a0e:97c0:e80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:29:ee:fd:52:22:8c:bc:95:4b:90:8d:a0:7e:1f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 8 13:01:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7b279e0760f982ce244dcc4987008550c0e103f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:be:55:67:3c:8f:7c:3e:c0:92:40:5f:87:
a9:91:df:5c:e9:2a:a8:64:8f:c3:38:b0:65:ec:8f:
87:38:94:eb:4b:27:42:7d:46:af:f8:59:48:35:a0:
89:3a:7d:c9:e8:6e:a6:aa:d3:f6:83:08:cb:9e:6f:
37:c0:ef:37:9a:d1:7f:1e:56:98:6b:e7:8b:fd:0e:
35:ef:66:84:b6:44:ce:dc:32:0f:82:09:c5:c9:73:
7c:f1:7a:19:07:1f:a1:fd:7e:71:0b:18:c5:bb:cd:
62:36:8f:4b:3c:b9:cf:c2:1c:e3:4c:e9:7a:d5:71:
3f:d0:64:b4:f3:11:70:54:a7:f0:0d:2d:ba:8d:47:
a1:22:d8:d1:cc:ce:5f:b3:6a:d1:74:f5:b4:6f:40:
2d:66:7a:40:85:c9:97:38:bc:ed:fc:b7:31:3b:2a:
9e:8c:2d:9f:4d:1d:4d:8b:a8:23:e9:b0:a7:66:10:
62:5c:da:06:2a:a4:d2:85:28:b0:a2:35:07:f9:b5:
a5:bf:d0:87:e3:05:36:ce:36:c8:4f:0f:2f:58:3f:
eb:d2:0d:25:6a:be:3c:94:6e:fb:7b:79:fc:65:b5:
78:25:a3:86:a1:33:bd:61:1c:2e:fb:83:c5:9f:1b:
81:b1:41:ee:17:c6:62:a8:5b:48:23:ec:71:57:60:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B2:79:E0:76:0F:98:2C:E2:44:DC:C4:98:70:08:55:0C:0E:10:3F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/97J54HYPmCziRNzEmHAIVQwOED8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:e80::/44
Signature Algorithm: sha256WithRSAEncryption
98:5d:fd:34:a8:c1:45:33:53:0d:72:db:e8:88:61:11:b7:53:
10:b5:20:6a:a0:c2:66:08:b3:6f:90:14:f6:dd:61:55:0d:82:
28:2f:24:10:ec:1a:57:83:1f:a5:8c:74:05:3b:e4:ce:9e:e3:
2c:53:9b:87:b7:bc:02:03:da:88:a1:35:02:78:47:f8:09:5f:
31:e8:52:d4:aa:fa:42:88:13:8c:15:9c:b3:ea:44:02:96:d1:
63:ec:26:c7:97:72:5a:4e:6b:69:a4:2d:f1:9b:a1:6e:16:ac:
59:43:40:41:64:2a:42:86:a7:da:f8:d5:ea:c3:7f:5c:58:61:
e2:df:13:f1:73:eb:da:31:76:76:2c:fe:26:de:3f:17:ac:d0:
96:68:ad:72:02:a3:02:6b:f1:b3:c7:84:2d:f6:7d:62:e3:4f:
9d:b7:03:51:90:d0:9f:5f:0e:68:8f:c9:81:bf:c5:4c:82:de:
ff:1e:69:c8:e0:fa:e4:49:2f:ce:2a:8a:97:86:36:b5:9c:29:
87:e4:21:c9:dc:a2:22:9c:40:6c:6b:02:f9:99:3d:37:6f:fa:
37:d5:4f:39:f3:1d:31:b1:e1:04:30:3b:ca:76:73:6c:76:3e:
09:cb:f0:a6:84:16:2e:b2:4d:98:0e:14:8d:e8:1b:c7:06:51:
90:01:3e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:38 2024 by rpki-client on console-fra.rpki-client.org