Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9xzaKpR-m8UUXM-PcpIT0M3hCXM.roa
File: 9xzaKpR-m8UUXM-PcpIT0M3hCXM.roa (raw, json)
Hash identifier: PuNnrsOG0TMjDA5MwP+QCEz/0DXKH1fqXx+5s+4EhGE=
Subject key identifier: F7:1C:DA:2A:94:7E:9B:C5:14:5C:CF:8F:72:92:13:D0:CD:E1:09:73
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD4511C887AF2DC5B518E1F9B63AEF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9xzaKpR-m8UUXM-PcpIT0M3hCXM.roa
Signing time: Tue 02 Jan 2024 10:34:33 +0000
ROA not before: Tue 02 Jan 2024 10:34:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212483
IP address blocks: 2a0e:b107:1be0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:45:11:c8:87:af:2d:c5:b5:18:e1:f9:b6:3a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f71cda2a947e9bc5145ccf8f729213d0cde10973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:24:f9:f8:2b:de:88:f2:24:98:6a:f3:2e:
ac:1f:e8:f5:24:d5:42:82:33:82:83:3c:ce:59:71:
4f:2f:c5:d6:4f:d8:24:9f:97:33:4c:6b:fe:54:e2:
36:2a:89:38:9f:08:71:2f:07:ce:c2:b8:13:bc:1e:
02:91:5c:f7:c4:e9:bb:3c:bb:01:29:e9:cf:4f:cb:
a1:37:59:e8:31:5d:eb:92:f6:d6:30:27:bc:36:56:
6a:3c:cd:a4:77:90:c4:1f:37:63:57:f0:63:95:04:
76:73:c1:1d:c0:2d:42:22:00:92:cd:f1:2b:69:ab:
ac:e2:ea:41:11:c3:18:9e:53:a3:75:4b:be:a3:7a:
e8:cf:86:87:d5:1a:a4:8c:9f:4f:0a:7f:b2:8c:51:
2f:dd:f2:46:0e:02:51:25:c1:1a:c0:84:69:5c:6f:
58:98:91:8a:bf:d1:09:c0:d7:84:f0:a1:f6:df:30:
fb:7f:7d:1a:9e:90:f5:03:c7:db:89:11:b5:d1:4b:
3e:b8:88:44:47:96:a9:62:b5:28:89:d4:ba:55:53:
e0:dc:a3:b5:7b:12:99:8a:1a:6c:59:87:5a:d1:7c:
ec:a3:36:30:e2:70:30:37:99:c9:d8:3f:7f:f9:bb:
29:d5:a1:53:7f:5f:a6:8f:d9:3e:b2:de:1c:2c:17:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1C:DA:2A:94:7E:9B:C5:14:5C:CF:8F:72:92:13:D0:CD:E1:09:73
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9xzaKpR-m8UUXM-PcpIT0M3hCXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1be0::/44
Signature Algorithm: sha256WithRSAEncryption
c0:d2:59:84:ec:08:47:b0:11:c3:f4:f1:07:ec:7e:12:17:cb:
46:5a:f4:a9:62:b0:04:57:16:49:f4:a9:26:e0:6d:a0:05:1f:
45:7f:16:43:22:37:61:10:60:a6:ea:06:39:4d:e4:92:72:7c:
a7:82:a3:ed:fe:a5:87:68:9e:f5:c4:bd:ad:c5:1a:74:cd:da:
95:d6:f5:41:69:0b:d7:41:fe:a8:2f:f6:55:c0:da:c4:48:26:
fe:ee:5e:74:13:f1:5c:66:75:68:22:17:46:b8:5b:6b:83:a8:
f0:9c:e5:bb:b7:3f:9e:17:60:fd:f7:ba:65:2f:57:86:dd:03:
9a:36:33:17:e7:fa:7c:16:9a:c0:a9:75:ec:d0:49:4e:6c:69:
1b:35:ba:9c:47:0e:db:52:d5:7b:6f:f4:1e:f9:6d:b4:77:72:
a6:1d:b1:ac:6a:56:91:35:12:93:79:0d:74:ef:46:1f:32:a2:
d8:56:da:ef:1f:07:60:c6:25:2c:6c:fb:e1:3b:1b:77:46:9a:
03:fb:c3:bc:d2:50:40:1a:2b:34:a2:70:4c:32:35:dd:44:6a:
20:5e:ff:88:4c:f4:87:05:d7:be:46:a2:77:a6:da:75:62:b8:
ff:cc:13:41:2d:60:e4:35:76:a0:92:70:33:03:bd:19:54:f0:
54:c3:b2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:39:03 2024 by rpki-client on console-fra.rpki-client.org