Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ArJZYQAYo8GWEgJ3An6gZWbLGDw.roa
File: ArJZYQAYo8GWEgJ3An6gZWbLGDw.roa (raw, json)
Hash identifier: QLfq9BkNVtS24ySV8mJyt354jLI9APjeaCTfgomkpFY=
Subject key identifier: 02:B2:59:61:00:18:A3:C1:96:12:02:77:02:7E:A0:65:66:CB:18:3C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0190B8478BDA9DFA140EA17F3C23DA18BAE9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ArJZYQAYo8GWEgJ3An6gZWbLGDw.roa
Signing time: Mon 15 Jul 2024 21:23:34 +0000
ROA not before: Mon 15 Jul 2024 21:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214537
IP address blocks: 2a0e:b107:2798::/46 maxlen: 48
2a0e:b107:279c::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b8:47:8b:da:9d:fa:14:0e:a1:7f:3c:23:da:18:ba:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 15 21:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02b259610018a3c196120277027ea06566cb183c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:ba:ed:6e:1a:c1:01:69:dc:fa:38:d3:68:
a5:ef:22:69:01:ea:64:95:fb:ec:ff:a7:8d:13:e8:
1b:54:7c:49:72:cd:c8:d3:13:dd:7a:fd:0e:d4:4a:
cf:49:a3:65:8d:a6:9e:0c:b0:b8:01:fa:5f:f2:8c:
99:4e:01:15:96:83:d5:8f:3f:13:2a:53:06:7c:ee:
f0:bb:03:fb:10:a9:bc:80:38:b5:f6:93:0e:b6:8d:
ac:c4:a0:4d:71:c0:ff:a6:42:a3:4d:1e:c4:84:40:
20:88:80:3a:4c:86:e7:12:fa:70:27:cc:57:c9:97:
b2:18:33:af:81:cf:54:99:58:ee:a7:41:9c:13:bf:
f2:6f:d5:b7:78:3e:8c:90:eb:a3:b2:5d:75:be:b4:
25:90:fb:4b:f4:9f:7f:04:4a:85:78:01:dc:bd:6c:
05:39:c3:01:be:32:0d:a4:d5:c0:7a:20:de:c5:69:
af:5c:e2:d8:26:c3:e5:5e:c6:7e:43:e7:a1:d1:ed:
bd:5e:74:bb:d4:5a:4c:47:62:9a:9b:57:6e:47:8d:
1d:24:7b:62:3b:45:c4:29:15:ee:36:ee:d5:0e:3f:
7b:47:0e:f1:6a:1e:1a:95:ac:34:8c:51:32:12:e8:
7a:5a:79:1c:3d:83:cd:95:01:5d:86:c5:aa:9a:d9:
d4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B2:59:61:00:18:A3:C1:96:12:02:77:02:7E:A0:65:66:CB:18:3C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ArJZYQAYo8GWEgJ3An6gZWbLGDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2798::/45
Signature Algorithm: sha256WithRSAEncryption
13:9f:f2:3d:10:92:ef:18:be:67:45:15:18:88:91:f8:33:97:
93:a4:2d:c4:bf:5f:7c:0c:2e:70:40:4b:80:8e:b2:ce:62:ff:
d9:0f:25:d5:65:6e:1d:ea:06:8f:21:aa:83:05:96:06:0e:39:
73:57:b1:f8:28:5d:8a:da:bc:b8:ef:bd:55:9b:43:be:1b:fb:
9a:d6:f3:5a:a6:78:7b:7f:6d:53:e2:df:5a:9c:de:58:02:57:
db:f6:b7:a6:d1:7c:41:24:4b:bc:7b:d2:59:71:d5:67:e5:86:
d2:8c:ad:f2:b1:38:a1:b4:29:78:91:38:5c:b7:9c:a9:d9:ca:
80:fa:c6:ce:3b:6f:91:89:f8:0c:42:8a:a6:60:ab:66:54:22:
7d:c3:57:7b:a3:f4:10:da:1a:02:4d:ed:ee:0e:ae:1f:7e:2e:
27:15:91:4b:de:f3:db:ce:68:d1:f4:3b:35:60:d0:83:b7:9e:
00:87:40:19:16:17:ed:62:f6:65:ae:47:82:b7:ac:5e:4e:aa:
44:8d:32:bc:f0:a6:6a:7d:f5:c8:8d:c0:0b:e1:33:86:bc:44:
36:b5:fe:e2:78:b2:c3:bb:e8:7d:2d:4e:8d:39:17:e2:49:68:
02:0c:01:5f:5f:6c:e6:5e:97:31:59:dc:32:80:a8:cc:41:32:
03:c0:01:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:23:35 2024 by rpki-client on console-ams.rpki-client.org