Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CpyA4wFhfkJqKM1Ec-dPLQPbgrM.roa
File: CpyA4wFhfkJqKM1Ec-dPLQPbgrM.roa (raw, json)
Hash identifier: s12pbKghiqwTc/ntk2kLM0M0gNUZcCYomwRHh3GJjsk=
Subject key identifier: 0A:9C:80:E3:01:61:7E:42:6A:28:CD:44:73:E7:4F:2D:03:DB:82:B3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD3B562EB62B5F04449E21230C8E7D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CpyA4wFhfkJqKM1Ec-dPLQPbgrM.roa
Signing time: Tue 02 Jan 2024 10:34:31 +0000
ROA not before: Tue 02 Jan 2024 10:34:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211722
IP address blocks: 2a0e:b107:12f0::/48 maxlen: 48
2a0e:b107:12f5::/48 maxlen: 48
2a0e:b107:12fa::/48 maxlen: 48
2a0e:b107:12f4::/48 maxlen: 48
2a0e:b107:12fe::/48 maxlen: 48
2a0e:b107:12f3::/48 maxlen: 48
2a0e:b107:12f8::/48 maxlen: 48
2a0e:b107:12fd::/48 maxlen: 48
2a0e:b107:12f2::/48 maxlen: 48
2a0e:b107:12f7::/48 maxlen: 48
2a0e:b107:12fc::/48 maxlen: 48
2a0e:b107:12f1::/48 maxlen: 48
2a0e:b107:12f6::/48 maxlen: 48
2a0e:b107:12fb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:3b:56:2e:b6:2b:5f:04:44:9e:21:23:0c:8e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a9c80e301617e426a28cd4473e74f2d03db82b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ec:ac:3f:98:33:84:a4:a0:41:13:9b:0f:66:
6c:29:9f:93:58:6c:df:45:03:42:b1:13:b4:cc:47:
8f:4f:76:e6:e8:f4:89:31:35:ed:3a:00:26:f2:56:
42:ca:2c:8c:01:7b:7d:d7:9a:ae:e1:b6:ff:b6:7b:
31:8e:10:54:25:ac:ae:41:e7:6f:d7:42:dc:9c:ee:
60:ed:f9:b4:c9:c8:7a:b8:b2:b3:7d:fa:1e:a3:32:
91:28:cc:33:27:19:51:8f:0a:7b:72:ba:20:a1:9e:
04:45:cf:f4:6e:19:2f:bc:69:9e:de:1f:63:3d:5e:
da:d7:fa:6a:ad:a3:0c:82:0b:d6:db:23:78:54:c6:
b8:5f:87:6c:65:03:7d:47:28:a7:ca:78:bc:bc:e7:
46:2a:b7:42:74:98:cb:44:7a:1a:2f:00:46:1e:9e:
0b:5a:f0:0a:b6:5e:17:52:ac:47:da:b0:d9:69:2b:
8d:9a:1e:ad:01:2d:f9:1c:a4:04:86:67:26:87:0f:
78:50:29:73:b8:88:ee:ac:03:68:7c:52:17:dc:a9:
77:4d:85:d5:ec:1b:8f:f7:ac:79:14:cd:80:a1:58:
3e:0e:54:75:d4:09:40:44:ea:fb:c1:22:e8:3d:ae:
b5:4e:57:0c:57:f8:13:37:99:34:b8:be:79:c7:da:
57:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9C:80:E3:01:61:7E:42:6A:28:CD:44:73:E7:4F:2D:03:DB:82:B3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CpyA4wFhfkJqKM1Ec-dPLQPbgrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:12f0::-2a0e:b107:12f8:ffff:ffff:ffff:ffff:ffff
2a0e:b107:12fa::-2a0e:b107:12fe:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2c:e2:54:68:d6:d3:0b:73:5b:a8:a0:86:ed:6d:87:b1:c7:9a:
f6:fe:29:a8:58:a2:2e:57:cf:b2:63:6f:ea:f6:3f:68:b5:20:
78:f1:c8:05:8c:49:7f:da:30:3d:56:2f:6c:75:5a:bb:ed:e6:
a8:03:0a:a9:fc:3e:47:d4:4b:88:b3:8c:b9:a5:2b:55:66:28:
08:0b:dd:14:c8:4e:c6:18:75:2c:33:e2:6a:cf:b1:84:be:93:
a0:e9:82:34:6e:91:5d:ca:2f:b3:29:73:d0:97:4d:c7:d5:dd:
a2:d9:1c:0c:c4:1b:cc:3d:83:a2:9e:c6:cc:49:af:04:6a:39:
73:21:ad:ec:5e:d5:07:55:23:50:61:2f:29:a7:42:26:f7:52:
fc:3a:ad:82:17:ba:e0:70:c7:6a:fa:7c:85:51:0b:bc:e3:e4:
87:4b:f5:6f:dc:3c:93:72:b9:e9:30:94:d7:7b:7d:1d:fb:e9:
2e:5a:61:64:80:e3:0a:c6:cf:ec:82:46:a2:8a:03:1e:3d:c2:
ff:35:f7:bd:59:48:18:ce:22:9a:60:11:f6:b3:ab:fb:07:85:
e1:56:32:11:f4:ea:47:c1:f5:a8:9c:23:dd:68:96:a5:97:82:
6e:ad:1a:95:ad:c2:fc:0a:46:39:e9:ce:26:33:6a:75:e7:31:
f3:c8:6f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:04 2024 by rpki-client on console-fra.rpki-client.org