Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/De-fGKJdCV5pDfFgqXdDPLnrpHM.roa
File: De-fGKJdCV5pDfFgqXdDPLnrpHM.roa (raw, json)
Hash identifier: o1522iVc+j+b0TXBv23GUtJ9KBHfdHRUUUucDMoL/TM=
Subject key identifier: 0D:EF:9F:18:A2:5D:09:5E:69:0D:F1:60:A9:77:43:3C:B9:EB:A4:73
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD3698B4F143B432E558D41EA731FB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/De-fGKJdCV5pDfFgqXdDPLnrpHM.roa
Signing time: Tue 02 Jan 2024 10:34:29 +0000
ROA not before: Tue 02 Jan 2024 10:34:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211495
IP address blocks: 2a10:2f00:16c::/48 maxlen: 48
2a0e:b107:10c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:36:98:b4:f1:43:b4:32:e5:58:d4:1e:a7:31:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0def9f18a25d095e690df160a977433cb9eba473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:e8:bc:ef:f7:01:13:f3:94:59:d6:20:0b:
ac:1d:4c:37:75:28:f7:7e:d1:5d:0c:e9:2f:6d:78:
ec:7b:8c:3f:3c:e7:fc:60:c5:3d:d4:b6:e8:3d:66:
c1:d3:b8:c3:c3:40:dd:4f:87:72:2c:e5:9b:0e:36:
09:22:8a:42:22:68:9f:bc:8d:f3:7c:0e:35:53:8f:
d7:60:68:79:89:16:ff:00:44:d9:ac:d3:dc:36:2d:
b0:ad:95:c1:90:aa:d4:b0:3d:f1:c9:0e:3f:4c:20:
7d:ef:6b:4c:da:60:a7:18:44:33:c9:71:47:e2:f5:
30:cd:b0:93:70:16:13:99:dd:95:76:7a:b6:81:a4:
54:c1:a1:9d:12:97:87:96:73:68:c7:a1:48:b6:a0:
fb:61:0c:6f:89:36:9b:b5:b2:46:1f:f8:bc:ff:b9:
f1:8b:1a:0b:d8:1a:79:04:67:66:d4:d2:39:a9:fe:
a4:4a:bc:43:a6:ea:b1:2f:10:87:56:67:b1:22:af:
35:34:06:77:68:9c:18:64:eb:c3:b7:fa:ab:7c:68:
94:7c:6b:cb:8a:66:e6:d1:27:ba:02:2c:c5:b8:6b:
59:17:95:70:81:11:b6:2b:67:f0:0a:49:ab:5e:fa:
e0:e5:75:fc:9c:d6:21:5a:93:66:22:1f:4c:c3:cf:
de:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EF:9F:18:A2:5D:09:5E:69:0D:F1:60:A9:77:43:3C:B9:EB:A4:73
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/De-fGKJdCV5pDfFgqXdDPLnrpHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:10c0::/44
2a10:2f00:16c::/48
Signature Algorithm: sha256WithRSAEncryption
6c:91:de:1b:80:40:89:4d:eb:9b:82:08:4e:5b:53:a8:a1:25:
48:85:da:d9:31:33:d7:8a:0f:72:ba:42:56:6c:e2:db:44:61:
88:83:25:b0:c0:97:5e:9a:be:ba:23:0f:a2:85:83:37:8b:7f:
eb:79:0c:ac:d9:3b:ee:dd:e3:a5:0c:76:74:8d:2c:1a:b0:6b:
aa:81:a8:6e:6f:04:d3:70:f6:8b:f4:a2:1d:8c:54:45:b5:a1:
49:7c:cd:e6:01:07:40:70:32:9a:24:29:c8:cf:66:ca:30:8c:
e0:e1:a7:7a:40:14:5c:b9:7c:0e:85:e9:ee:4a:f2:91:f7:f9:
2f:00:e6:14:ac:80:84:b3:b6:b3:40:72:14:40:77:4c:bd:3a:
75:bb:c4:d9:40:3b:12:37:f1:00:c8:93:5f:94:ce:0d:ba:42:
bc:5e:e4:0e:61:80:4f:19:5d:ab:3d:b9:d3:77:5a:14:3c:cd:
7b:8c:37:71:39:d4:79:07:38:19:3d:c4:4a:d0:98:73:ad:e3:
88:f1:fa:33:77:ef:15:b0:8b:f6:21:b2:e1:3a:c3:03:e9:dc:
3d:b8:9f:a3:4c:54:12:91:3d:3e:a3:54:d5:bf:0f:29:65:9b:
eb:5a:82:da:6e:db:89:bb:13:43:a1:4f:e1:0b:ac:f0:d0:ce:
3f:c5:83:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:54 2024 by rpki-client on console-ams.rpki-client.org