Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A7nDesLB0J2LDHSY9fJU1xTNczA.roa
File: A7nDesLB0J2LDHSY9fJU1xTNczA.roa (raw, json)
Hash identifier: I46VqD/1wg63/Yz9p3UOLGnbKe5ceOCEzdmoP0xJnOY=
Subject key identifier: 03:B9:C3:7A:C2:C1:D0:9D:8B:0C:74:98:F5:F2:54:D7:14:CD:73:30
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD17F3B938651EFCA9A326FBFC2BD1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A7nDesLB0J2LDHSY9fJU1xTNczA.roa
Signing time: Tue 02 Jan 2024 10:34:21 +0000
ROA not before: Tue 02 Jan 2024 10:34:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208529
IP address blocks: 2a0e:b107:2b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:17:f3:b9:38:65:1e:fc:a9:a3:26:fb:fc:2b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03b9c37ac2c1d09d8b0c7498f5f254d714cd7330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:e7:d7:e7:eb:d8:a3:4b:79:ae:9d:c2:aa:
86:5b:13:ea:f4:fe:a9:85:cb:ce:1f:9f:28:a0:e2:
ff:50:39:dd:41:45:a8:cb:16:33:78:1a:bd:13:2f:
fc:7c:fc:38:b4:dc:f8:c9:2c:0a:52:6e:e1:2e:84:
df:11:02:51:7e:2e:ef:fb:bb:53:c6:b9:db:0a:ec:
a7:23:25:dc:66:59:1b:68:84:e3:74:fc:64:9c:c5:
c2:4a:bd:67:a5:53:e8:d4:9d:e9:99:39:e6:4d:af:
c9:2d:d1:75:15:37:a2:7c:61:46:20:f7:4f:f3:56:
79:cf:e8:2b:79:04:7d:6d:7d:f2:46:5f:9c:16:2e:
58:8a:ea:4b:2c:43:3f:99:4f:7a:33:93:de:07:0a:
c5:90:74:0b:31:96:cb:f3:59:a5:ba:7c:9b:b7:70:
39:1c:be:9b:cc:ee:9d:c0:ea:bb:6c:b8:17:22:76:
83:2f:d9:44:4c:9f:bc:d3:24:9d:76:07:16:6d:81:
4c:91:96:0f:08:52:1e:a4:0b:11:b3:f6:5f:b9:79:
4b:7f:a9:2a:7f:33:20:2e:48:76:ab:0b:f5:c8:86:
de:36:ef:87:1d:fd:73:ea:83:63:37:48:a5:8e:18:
21:f3:84:8b:f6:c9:a0:e5:64:cc:9c:42:24:8f:ba:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B9:C3:7A:C2:C1:D0:9D:8B:0C:74:98:F5:F2:54:D7:14:CD:73:30
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A7nDesLB0J2LDHSY9fJU1xTNczA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2b0::/48
Signature Algorithm: sha256WithRSAEncryption
48:7e:1a:cf:ad:bc:c2:60:12:37:79:32:00:65:79:cd:bd:98:
f3:88:36:9c:49:a2:64:2a:ea:6b:ca:b4:f8:0c:78:3b:e1:2d:
21:41:8e:e9:af:3c:c2:1c:33:2f:5b:4e:b6:56:45:3f:6b:c4:
08:67:2d:d3:54:ef:04:c8:4a:0b:d8:81:a6:bb:7c:e0:64:0e:
81:c8:6c:9a:63:2e:47:e2:d6:98:c3:b1:72:41:76:c0:9e:1d:
da:1b:f7:e3:01:ad:9b:c2:ec:53:bc:78:74:e6:7f:b3:65:e8:
13:0a:c0:fc:4f:e2:cd:e5:e5:15:3a:84:db:7a:eb:06:b5:32:
9f:06:ed:4d:44:85:09:7d:2f:8b:30:4a:1e:6f:c1:6f:fd:44:
41:07:dd:5d:5f:e7:0c:ee:b9:88:f5:8d:ee:f5:53:47:59:9f:
e5:08:41:a1:08:22:e5:5a:2e:ec:da:fa:cb:16:ec:d1:e8:28:
58:bb:1a:69:42:88:c4:6e:d4:0e:46:8a:08:e5:d8:af:af:2c:
cd:02:53:0a:ab:0e:ee:dd:e5:1a:48:43:ae:6f:69:27:32:62:
1d:63:78:9c:9f:78:bb:b1:ac:bf:e7:ba:ca:d2:23:41:f7:f6:
f9:34:22:f9:3e:25:4f:b1:02:16:82:52:fd:a0:53:89:1a:ef:
8d:72:08:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:38 2024 by rpki-client on console-fra.rpki-client.org