Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CBi-bTH54HJwlCf4ak1djgaMSyM.roa
File: CBi-bTH54HJwlCf4ak1djgaMSyM.roa (raw, json)
Hash identifier: IWF+uxumLgNrM9MDmVEk58RPPXAXAm7zdzKgpcWCyhU=
Subject key identifier: 08:18:BE:6D:31:F9:E0:72:70:94:27:F8:6A:4D:5D:8E:06:8C:4B:23
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D5B6D34FCB46CBB99259AC7EE702CDA9D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CBi-bTH54HJwlCf4ak1djgaMSyM.roa
Signing time: Tue 30 Jan 2024 17:31:40 +0000
ROA not before: Tue 30 Jan 2024 17:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63538
IP address blocks: 2a0e:97c0:688::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5b:6d:34:fc:b4:6c:bb:99:25:9a:c7:ee:70:2c:da:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 30 17:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0818be6d31f9e072709427f86a4d5d8e068c4b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:9b:14:20:e5:d2:68:3a:85:fa:98:3e:c3:
7b:34:58:13:0e:79:62:81:5f:81:d5:0a:50:1c:46:
20:3a:72:05:c8:7b:d1:a1:20:8a:de:2d:71:57:cd:
81:0e:a6:3c:ec:75:e4:5a:33:e9:50:ff:04:64:4d:
19:9a:db:d9:d7:2c:49:e8:db:3c:97:df:4b:b9:f6:
d8:7f:d6:26:6d:80:10:7c:a3:bb:21:b9:ba:48:9c:
82:51:67:fc:a1:ce:16:91:54:0e:a1:e9:45:ac:67:
38:e3:88:26:0d:63:7a:8e:4e:7e:66:6a:03:c7:26:
4d:80:8e:99:fb:9c:36:c5:7a:82:25:e0:9d:4a:82:
46:39:b9:08:f5:ac:c1:7b:d0:2f:4c:b7:3f:d8:cc:
27:9d:03:4e:0c:d1:76:52:d0:8f:55:9c:d6:6f:12:
8e:f0:0f:3b:b8:83:17:c3:87:68:08:5d:92:50:36:
d1:4e:6d:06:a2:06:d0:be:66:2e:d6:75:b0:f7:a3:
e3:8c:63:f9:22:d6:db:1b:b4:9c:40:ad:25:8e:ed:
af:ed:6b:36:f3:4b:f6:9c:34:46:d9:37:d2:5b:8b:
e3:16:bf:54:7d:a0:da:55:c1:c7:10:98:7f:bc:0e:
a9:f8:96:44:be:7d:ab:47:0f:c3:ce:0d:ed:46:f6:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:18:BE:6D:31:F9:E0:72:70:94:27:F8:6A:4D:5D:8E:06:8C:4B:23
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CBi-bTH54HJwlCf4ak1djgaMSyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:688::/45
Signature Algorithm: sha256WithRSAEncryption
10:cb:83:32:a7:e7:4f:8c:a6:a5:a7:81:f7:ba:30:9e:ee:9a:
47:eb:a0:cd:fc:e1:fc:28:d0:95:ee:d2:97:81:9b:c3:63:91:
b6:05:12:dc:64:3d:3c:bd:13:0a:d6:4c:fb:22:63:11:16:94:
e6:45:2d:cc:3c:ec:40:e2:2a:96:aa:37:51:2f:a8:ee:74:ba:
50:d7:60:42:a8:45:50:b2:e8:3d:63:3c:d6:58:18:04:b8:5c:
c5:a5:61:e7:31:2e:a1:a3:8a:85:43:f5:cb:b1:28:e4:e9:c8:
72:0c:76:b5:ad:59:5d:5c:07:8a:48:29:99:bf:f9:6a:03:97:
1f:c0:77:34:e7:8d:e9:ec:a5:77:70:0d:e1:76:57:6e:84:0e:
d1:74:54:2c:e4:0e:c4:30:c2:05:03:f6:52:22:dc:9c:76:18:
41:b3:91:25:87:7e:52:e1:38:bb:c4:ac:67:d0:9b:c8:ae:e4:
59:59:0c:bf:23:96:f7:b2:e2:04:a8:0f:eb:4f:02:be:5e:92:
72:53:8d:b9:e0:74:6e:06:db:7d:85:66:a1:7f:d2:7c:ba:3b:
10:f1:53:68:22:a2:d6:c7:05:20:87:7f:39:66:90:21:9a:3d:
c2:16:eb:04:13:dd:db:a8:ec:8b:43:cd:36:06:ae:ff:9b:62:
37:47:76:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:39:03 2024 by rpki-client on console-fra.rpki-client.org