Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DfSRBDJV8gbBMX1OqE455I0DH_4.roa
File: DfSRBDJV8gbBMX1OqE455I0DH_4.roa (raw, json)
Hash identifier: M5w50POxrb+6Wyy5tYVVl7J8nDm3Gj8Jn1CnbNjPDVA=
Subject key identifier: 0D:F4:91:04:32:55:F2:06:C1:31:7D:4E:A8:4E:39:E4:8D:03:1F:FE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0193741FA2DA3CF2B7558AA2F3555344E12F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DfSRBDJV8gbBMX1OqE455I0DH_4.roa
Signing time: Thu 28 Nov 2024 18:54:10 +0000
ROA not before: Thu 28 Nov 2024 18:54:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13852
IP address blocks: 2a06:de03:3690::/44 maxlen: 48
2a06:de03:3690::/48 maxlen: 48
2a06:de03:3692::/48 maxlen: 48
2a06:de03:3693::/48 maxlen: 48
2a06:de03:3694::/48 maxlen: 48
2a06:de03:3695::/48 maxlen: 48
2a06:de03:3696::/48 maxlen: 48
2a06:de03:3697::/48 maxlen: 48
2a06:de03:3698::/48 maxlen: 48
2a06:de03:3699::/48 maxlen: 48
2a06:de03:369a::/48 maxlen: 48
2a06:de03:369b::/48 maxlen: 48
2a06:de03:369c::/48 maxlen: 48
2a06:de03:369d::/48 maxlen: 48
2a06:de03:369e::/48 maxlen: 48
2a06:de03:369f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:74:1f:a2:da:3c:f2:b7:55:8a:a2:f3:55:53:44:e1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 28 18:54:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0df491043255f206c1317d4ea84e39e48d031ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:14:cb:3e:9f:ee:1d:bc:ca:7b:29:7f:b6:82:
15:fc:3c:ae:30:9a:d3:20:bc:ea:d3:5b:4b:40:fd:
e9:4d:df:ce:4f:7d:9c:b3:c3:19:ca:c7:ae:8a:e3:
3e:e4:2a:4b:85:c5:b8:20:d0:b4:85:ca:72:8f:bd:
51:c2:a0:f7:dc:42:95:af:17:ea:61:05:78:01:ea:
f8:ed:16:02:3c:be:ee:16:06:cd:11:ae:85:dc:07:
47:0c:4e:18:af:bd:0f:3e:9c:f3:9d:f3:0c:99:ca:
48:46:53:66:51:ab:7a:1d:ec:fe:69:21:c0:f1:3b:
a6:5d:a4:21:d6:bd:85:38:26:c7:cb:6f:4b:44:75:
2d:de:a6:1a:14:af:d3:19:13:f4:20:c5:93:dc:01:
84:11:27:02:65:c4:ab:7b:0b:70:16:c2:af:73:eb:
9a:1c:9e:b3:aa:30:9b:60:94:1d:e5:da:11:6e:42:
a2:3a:a4:dd:29:3e:e7:c9:fb:fb:a7:b8:8c:f0:28:
c1:a3:1f:b0:b7:19:44:b7:e0:57:d8:21:43:50:c2:
e4:14:87:4a:e8:b2:ef:b5:8f:af:11:4c:40:d1:f6:
91:bf:ef:a3:ca:0d:4f:21:7e:34:46:db:fa:5d:84:
db:b9:be:98:cb:d3:d0:89:e6:ca:f8:19:bc:68:5b:
f5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F4:91:04:32:55:F2:06:C1:31:7D:4E:A8:4E:39:E4:8D:03:1F:FE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DfSRBDJV8gbBMX1OqE455I0DH_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de03:3690::/44
Signature Algorithm: sha256WithRSAEncryption
4c:7f:1f:24:44:29:9e:99:5a:47:55:c7:92:1e:4d:05:f6:b2:
70:d8:4d:c2:84:c7:35:ab:ae:10:2a:93:7e:4b:15:95:12:bc:
fc:53:1d:71:93:28:20:4d:cb:9f:01:f6:11:85:1d:2c:11:df:
1a:16:92:1f:17:d5:ad:3f:23:28:9b:6b:00:1c:bc:b8:ba:a7:
07:eb:89:10:d7:48:c0:62:0f:18:79:9b:48:51:20:0b:9e:b1:
9c:34:82:54:7f:8f:a4:a0:22:db:16:f2:54:c1:67:9f:13:96:
e3:1d:8e:9b:7f:b7:f3:10:ce:12:e1:44:5b:84:23:47:4c:81:
b4:b8:12:34:79:ee:f9:20:c0:04:18:90:a6:58:94:ec:c4:8f:
db:88:6d:75:d8:54:ac:0d:90:7f:f7:0b:71:5d:90:71:53:70:
f9:93:5a:78:d1:f9:b9:eb:f6:b0:fe:a4:53:e8:87:3c:e8:bb:
6b:aa:0e:e0:c2:c8:b9:9a:fe:6c:c4:4c:10:db:66:a1:b0:6e:
84:2a:e9:e3:97:9f:d3:33:fc:d4:28:78:be:95:64:ea:be:ab:
b6:32:b4:2f:53:b6:b5:4e:d3:76:a8:40:bc:2e:5d:a4:93:ac:
3d:e5:32:88:0a:09:47:64:f0:b9:f0:b3:09:e9:76:47:d6:b2:
49:54:e9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 21:47:06 2024 by rpki-client on console-ams.rpki-client.org