Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Au4MM_GC0Zqp2NvWKB1tG1YUKGQ.roa
File: Au4MM_GC0Zqp2NvWKB1tG1YUKGQ.roa (raw, json)
Hash identifier: l2qM59LDt4+beZu/WXF/3m57H6dkreOlxpjrRYpww40=
Subject key identifier: 02:EE:0C:33:F1:82:D1:9A:A9:D8:DB:D6:28:1D:6D:1B:56:14:28:64
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCE9651F6389BD53BC2304A2027D86
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Au4MM_GC0Zqp2NvWKB1tG1YUKGQ.roa
Signing time: Tue 02 Jan 2024 10:34:10 +0000
ROA not before: Tue 02 Jan 2024 10:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198219
IP address blocks: 2a0e:97c0:ab0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e9:65:1f:63:89:bd:53:bc:23:04:a2:02:7d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02ee0c33f182d19aa9d8dbd6281d6d1b56142864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8d:3b:91:c5:80:13:a1:0f:9d:4c:48:92:5b:
cc:66:0e:e2:0a:03:fe:98:43:85:a9:8b:52:81:15:
29:d9:10:04:38:aa:3d:30:36:d7:50:1c:2e:1d:6b:
d1:47:c8:10:2c:41:9a:53:dd:66:34:5d:f5:a0:5e:
0f:c9:f8:fd:62:1e:c5:4a:3f:20:2a:99:e6:0f:64:
c5:92:15:ea:e4:37:25:4c:3c:e6:ab:33:74:cd:2d:
ca:b8:7e:f0:f8:63:7c:c0:7c:c2:04:a1:b9:99:2a:
dd:80:30:45:99:47:b4:64:d4:2f:7b:35:ee:55:94:
d4:cb:45:77:b7:64:78:c0:c5:64:57:8f:bf:d3:54:
f0:6d:a0:1e:62:ff:39:a4:9f:93:0d:c6:ec:39:b0:
31:e7:c8:70:45:ea:7d:d2:3b:c1:55:05:7c:c6:e7:
88:e7:24:d5:be:70:2e:74:67:5f:8a:43:d1:69:72:
dd:36:0e:b1:f7:43:1f:74:cf:7f:7b:5d:eb:e8:44:
a7:46:3a:e0:43:87:73:7b:37:1a:57:9f:75:9c:90:
2d:28:1a:8a:10:8a:de:0a:7e:94:17:d9:61:05:30:
a2:55:9b:24:52:75:07:0e:7a:12:16:13:c4:1a:f1:
4a:a1:b0:7d:74:cc:13:e7:89:57:f2:af:2c:d7:16:
0e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EE:0C:33:F1:82:D1:9A:A9:D8:DB:D6:28:1D:6D:1B:56:14:28:64
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Au4MM_GC0Zqp2NvWKB1tG1YUKGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:ab0::/44
Signature Algorithm: sha256WithRSAEncryption
bb:94:86:8c:00:5f:9c:5b:07:30:95:0b:ab:e7:98:18:0a:08:
31:af:81:23:6c:14:8b:be:62:4d:e1:04:b5:cf:aa:c3:66:16:
aa:e2:8f:b1:e0:6b:5a:12:f1:86:f3:43:3a:08:4a:f8:18:f5:
11:e1:bd:1d:ae:f0:ad:31:e0:8d:a0:0b:4e:84:2b:c4:3e:85:
6b:fc:7e:d0:d5:59:88:dd:99:cf:bf:db:d9:3d:df:3b:67:7f:
42:b4:5c:c6:69:62:7d:42:00:52:5a:7c:74:e6:d8:ba:f3:72:
97:ca:27:39:fa:a4:8a:d2:0b:96:06:31:45:97:be:44:4a:9d:
25:d6:bc:ea:9a:54:c6:b9:2e:b8:ec:84:41:66:81:e0:2e:18:
a4:d9:1f:91:9d:d4:f3:24:ae:df:d4:03:92:74:9b:02:b5:eb:
f3:cc:01:14:34:16:65:ad:3c:9e:a3:4d:53:c6:38:24:9d:24:
df:ad:f2:1e:3f:45:3b:25:d4:b0:cd:fb:99:b5:cc:6b:b6:37:
d6:44:a1:5d:b7:c3:3c:c0:e6:0e:9c:76:6c:6a:22:a1:dc:f2:
4e:9a:66:2e:11:8b:a6:3c:02:c7:71:52:33:fb:aa:3a:80:90:
3f:79:2e:e1:72:41:42:ba:91:02:4d:df:2f:d0:cc:ba:ff:f8:
de:2c:be:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:32 2024 by rpki-client on console-fra.rpki-client.org