Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9pstzwIM-j_QyEPrrbqqEMxLKKg.roa
File: 9pstzwIM-j_QyEPrrbqqEMxLKKg.roa (raw, json)
Hash identifier: Uu3GmNf+Z8cTbUBpJSKnX0W3epvOwUr/Lb6/K0rLjyw=
Subject key identifier: F6:9B:2D:CF:02:0C:FA:3F:D0:C8:43:EB:AD:BA:AA:10:CC:4B:28:A8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD4D8DADF265504803F325A5B78005
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9pstzwIM-j_QyEPrrbqqEMxLKKg.roa
Signing time: Tue 02 Jan 2024 10:34:35 +0000
ROA not before: Tue 02 Jan 2024 10:34:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213250
IP address blocks: 2a0e:97c0:3e3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:4d:8d:ad:f2:65:50:48:03:f3:25:a5:b7:80:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f69b2dcf020cfa3fd0c843ebadbaaa10cc4b28a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:4c:f6:52:3d:53:11:fe:b1:cb:57:d7:83:
8b:64:10:00:64:aa:ff:47:e0:03:27:0c:58:60:1c:
7d:3f:7d:e2:42:ea:17:06:09:b1:97:e2:0e:ff:48:
9d:9d:80:60:45:a5:36:a1:37:55:7a:d6:b1:d3:ae:
68:50:91:03:0f:b7:11:80:31:f3:b8:fa:75:f6:e1:
26:4f:4c:d8:56:f8:ce:d8:40:59:04:79:b0:c5:dd:
1c:39:07:de:90:8e:33:88:4f:b2:b4:8e:e3:12:35:
a0:ed:77:1a:ce:d1:3f:33:ec:bf:97:03:63:6b:f9:
be:49:8d:54:73:f0:55:a4:a8:4c:35:5a:d9:17:1a:
db:bf:db:50:80:c6:df:3f:1e:d8:31:3a:f5:aa:98:
43:9a:3a:c5:d4:82:a1:ab:ff:e9:f9:6a:8b:2d:21:
14:50:ac:1b:27:21:3f:3a:48:03:61:71:2a:40:a1:
98:5b:ab:ed:7c:18:64:84:2e:e6:e5:4e:d1:a2:ce:
52:5e:90:f2:c0:60:6d:a7:2d:9b:df:59:92:2b:95:
b7:70:45:c7:dd:a0:bf:64:0d:c6:e7:31:87:3d:c6:
2c:bd:94:b4:97:c0:ce:6a:2f:5b:0b:d1:75:e5:3d:
74:f1:7a:0b:a3:7c:9e:fc:7e:fe:65:0a:73:65:1f:
16:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9B:2D:CF:02:0C:FA:3F:D0:C8:43:EB:AD:BA:AA:10:CC:4B:28:A8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9pstzwIM-j_QyEPrrbqqEMxLKKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3e3::/48
Signature Algorithm: sha256WithRSAEncryption
b8:a9:40:37:a3:35:1d:40:03:7d:26:e2:a3:a6:40:be:45:3a:
9e:15:5c:8d:52:27:53:eb:a3:8c:4f:87:19:f5:61:0b:e9:68:
7c:0c:1b:f6:e9:8f:21:b7:03:22:d5:49:f1:a2:d8:ea:c7:b9:
a5:c9:80:ce:05:fe:fa:43:dc:19:31:1b:ee:02:bb:1e:0d:75:
45:d1:c3:3d:30:8c:28:94:06:5a:48:5e:85:0c:ba:ac:1d:51:
68:e9:04:cb:7d:bd:36:b7:05:1d:a9:f1:32:cc:da:2d:c3:e0:
4b:2d:e0:6d:f0:b2:12:49:2f:09:62:cf:32:14:5b:00:80:98:
15:f4:b6:35:17:10:26:bc:06:30:0b:65:38:ab:b7:6d:58:7b:
d4:37:50:72:a9:d5:4a:99:63:35:0a:3f:86:ba:a3:64:54:af:
70:11:89:78:b6:b0:bd:22:07:97:9c:a7:20:8f:dd:c1:91:73:
7e:2e:42:1e:56:26:2e:59:42:fd:55:b4:58:86:42:fb:75:8a:
1b:c2:c2:d2:2e:66:85:37:97:cf:40:2c:6b:85:d0:b6:c3:64:
ae:a7:cf:fe:68:e8:29:39:72:ec:2b:b4:79:78:9c:c8:24:39:
33:a8:15:c1:ab:63:fa:83:6a:29:8e:4e:53:19:7c:0c:a0:b0:
92:8e:b5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:17:50 2024 by rpki-client on console-ams.rpki-client.org