Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9XSgJ2yUc_v-z3r4G3qQzW0C9dE.roa
File: 9XSgJ2yUc_v-z3r4G3qQzW0C9dE.roa (raw, json)
Hash identifier: 1JuTJ3Dwc8b9wJRIqoeBK9anG2+v52CZq3SkxAoWGSY=
Subject key identifier: F5:74:A0:27:6C:94:73:FB:FE:CF:7A:F8:1B:7A:90:CD:6D:02:F5:D1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD060638172256DF6FE568904A54E2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9XSgJ2yUc_v-z3r4G3qQzW0C9dE.roa
Signing time: Tue 02 Jan 2024 10:34:17 +0000
ROA not before: Tue 02 Jan 2024 10:34:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203790
IP address blocks: 2a0e:97c0:460::/44 maxlen: 48
2a0e:b107:12a0::/44 maxlen: 48
2a0e:b101::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:06:06:38:17:22:56:df:6f:e5:68:90:4a:54:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f574a0276c9473fbfecf7af81b7a90cd6d02f5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:f4:28:53:19:35:a3:e9:47:50:31:a5:43:
cc:e5:89:84:7f:38:3d:77:d1:93:7d:f2:15:99:44:
bb:ca:3e:71:d7:73:b4:97:5a:b8:b5:f6:75:e1:89:
5a:b9:12:c6:6e:c3:51:d2:8d:c4:92:ab:c7:c7:77:
eb:14:d8:cb:b2:28:a3:98:23:d2:fa:2f:e7:5a:cc:
94:e6:5b:88:4b:b3:42:85:1c:91:cc:6a:b4:7e:fa:
c4:7e:0c:51:99:eb:82:e5:b3:4b:06:1f:3d:46:a7:
80:a7:bd:97:97:cd:8e:ff:19:7a:47:d4:b6:c7:05:
30:f1:aa:e6:44:0d:cc:66:49:53:e5:10:b5:0c:95:
07:b4:7b:ec:e9:33:ed:44:37:1f:74:30:35:bb:f5:
f7:28:c7:23:21:24:97:60:67:59:74:c1:38:81:cf:
fc:95:75:75:0c:bd:a5:b5:86:f0:0f:6f:16:21:f0:
83:9a:2f:d1:c4:67:e6:62:47:0c:0e:d4:c3:a6:df:
9c:0c:32:64:34:37:82:8a:45:a3:e7:c1:41:55:d4:
a2:31:08:c0:6f:0b:f3:11:27:62:80:06:05:aa:43:
74:5b:ed:af:7f:89:ea:36:fa:43:79:77:ed:89:a5:
94:ea:f4:4c:a9:4c:a5:23:65:08:c3:09:b4:38:a2:
b9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:74:A0:27:6C:94:73:FB:FE:CF:7A:F8:1B:7A:90:CD:6D:02:F5:D1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9XSgJ2yUc_v-z3r4G3qQzW0C9dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:460::/44
2a0e:b101::/32
2a0e:b107:12a0::/44
Signature Algorithm: sha256WithRSAEncryption
49:a6:8f:82:42:9d:82:2b:9b:58:35:64:66:f6:2e:cd:8f:62:
e4:7a:37:6e:69:72:fb:62:56:7f:e5:69:46:53:95:b2:43:46:
ab:bb:b1:c3:12:63:db:8b:3a:be:8f:e9:d6:d7:08:90:df:b6:
ef:dc:28:e9:b2:d4:48:96:8d:d3:4f:bd:bc:3d:a3:e6:f6:40:
f0:f1:58:13:0a:22:38:d5:6b:ce:8d:4d:42:96:85:0b:ba:23:
a8:5f:ae:5b:ad:24:ea:aa:3e:b4:40:87:45:18:f1:5b:a3:ae:
9d:0d:01:1f:e1:10:65:70:fc:86:7c:16:8a:54:27:f6:e6:f7:
01:55:8b:1e:32:2e:84:38:97:f0:91:9d:09:bb:3a:4c:dd:3a:
ef:79:77:3d:43:3c:0e:b2:29:96:f7:50:4d:5e:bb:99:bd:7d:
6a:cd:3c:80:67:fe:23:65:4e:55:be:63:f0:10:08:45:4a:9a:
28:5d:61:99:45:3f:5e:d4:b8:a7:18:22:ac:be:bd:24:87:36:
df:33:7f:43:5e:e9:63:2e:97:87:93:1b:73:4e:54:71:0f:7e:
1e:1a:93:06:a5:18:d4:d1:9f:fd:b6:ef:03:df:c5:af:2e:19:
d1:32:59:a8:4e:38:17:bf:7d:8c:ca:25:e2:bb:88:42:c9:53:
f9:cf:7d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:34:59 2024 by rpki-client on console-ams.rpki-client.org