Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D31nspfh55KhQSJpjVh7u7SzzfI.roa
File: D31nspfh55KhQSJpjVh7u7SzzfI.roa (raw, json)
Hash identifier: mn0piKsOArx/JIAEt7OE7IEB1c8W5nJ2ZYwKNsMfiXM=
Subject key identifier: 0F:7D:67:B2:97:E1:E7:92:A1:41:22:69:8D:58:7B:BB:B4:B3:CD:F2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCE89A839EF16C8D48BD563AB4C32A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D31nspfh55KhQSJpjVh7u7SzzfI.roa
Signing time: Tue 02 Jan 2024 10:34:09 +0000
ROA not before: Tue 02 Jan 2024 10:34:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198025
IP address blocks: 2a06:de00:de0f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e8:9a:83:9e:f1:6c:8d:48:bd:56:3a:b4:c3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f7d67b297e1e792a14122698d587bbbb4b3cdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:7d:3e:25:b4:be:0e:a5:33:4d:9d:58:07:
b8:67:94:cc:32:8e:fe:67:ff:83:07:22:05:df:36:
50:55:f6:02:85:fd:9f:b8:e9:cf:52:c3:4b:1f:8b:
56:04:c5:ad:64:a8:52:30:a2:b4:77:6e:b2:c3:a8:
06:b1:d7:11:7f:32:a6:89:cc:28:d0:be:83:54:cc:
df:7c:34:ee:15:fb:f8:a9:8b:d8:4b:11:26:28:7c:
20:a1:c3:68:64:17:4f:b3:25:12:ef:c5:34:b2:c8:
76:a9:a9:03:82:87:ac:c6:b8:2f:21:11:39:08:d4:
ee:3a:91:1a:58:6e:53:d3:37:00:35:d4:ef:da:5d:
4d:60:86:96:33:9a:e6:29:07:c7:f0:3d:15:ea:60:
a1:71:dd:f6:11:83:57:c5:3b:27:45:de:da:48:6c:
8a:a7:51:02:5c:6b:96:1f:60:b8:d1:4a:24:78:27:
75:32:4f:2f:3b:3f:59:91:45:bb:c0:9b:f5:3c:6a:
81:56:35:b6:42:44:e4:62:6f:f2:fd:6d:27:73:cb:
f5:3f:fc:86:d0:a3:e0:47:85:55:93:34:25:8c:ea:
7e:f0:ce:91:f9:db:51:76:bc:b2:35:f8:c7:3d:e1:
03:8e:55:f9:16:c7:82:17:f2:49:e9:69:d3:11:23:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7D:67:B2:97:E1:E7:92:A1:41:22:69:8D:58:7B:BB:B4:B3:CD:F2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D31nspfh55KhQSJpjVh7u7SzzfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:de0f::/48
Signature Algorithm: sha256WithRSAEncryption
61:2f:e9:31:92:2a:50:4f:25:2d:81:61:99:df:d9:89:8d:54:
a7:e7:13:c6:4d:0f:fd:58:c6:bc:80:ca:d6:eb:a3:a8:f7:60:
22:9d:18:c4:57:fc:2f:2b:63:8e:ba:e4:28:56:ea:b0:90:40:
cb:09:8e:15:30:d3:8b:47:fd:45:0f:86:3c:59:2f:50:22:db:
9b:24:8e:5d:ae:de:47:aa:cf:be:98:3d:3b:5a:4d:81:bd:ff:
18:63:33:95:78:48:83:09:0e:30:8a:2c:9b:47:d2:95:c6:87:
83:69:6b:5a:ef:cf:b4:18:8e:d2:b8:9b:1d:78:dd:15:a5:44:
da:f8:84:11:db:87:94:14:7a:a7:8b:04:b2:4b:44:4e:ab:07:
a4:7d:69:2d:21:0f:f1:ff:ee:67:ff:62:f8:ae:f2:39:95:b1:
f2:74:ba:3a:7f:cb:c2:ab:72:d5:6c:81:05:82:28:14:59:8b:
4a:88:dd:60:55:0c:5c:67:be:be:ac:44:f6:20:06:7b:83:78:
f7:12:d2:16:b1:8b:96:26:3d:a4:27:93:43:23:be:40:79:cf:
dd:70:c5:19:d3:90:f0:26:40:90:d0:79:0a:2d:05:89:52:85:
e1:09:21:8a:31:f7:37:fb:9f:c8:b8:f1:1d:91:6a:9a:01:bc:
5f:0d:d3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:04 2024 by rpki-client on console-fra.rpki-client.org