Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EOzZ6Hg0FvNM0tAQDWyo73oBI3U.roa
File: EOzZ6Hg0FvNM0tAQDWyo73oBI3U.roa (raw, json)
Hash identifier: tlhudto2OCqbs3ffaq+e09rp221SCZ6ZKpyg06Jdwg0=
Subject key identifier: 10:EC:D9:E8:78:34:16:F3:4C:D2:D0:10:0D:6C:A8:EF:7A:01:23:75
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01931A538795C42B157145B8B427577FAACE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EOzZ6Hg0FvNM0tAQDWyo73oBI3U.roa
Signing time: Mon 11 Nov 2024 08:25:02 +0000
ROA not before: Mon 11 Nov 2024 08:25:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:de00:f0::/44 maxlen: 48
2a06:de01:140::/44 maxlen: 48
2a06:de01:141::/48 maxlen: 48
2a06:de01:142::/48 maxlen: 48
2a06:de01:143::/48 maxlen: 48
2a06:de01:144::/48 maxlen: 48
2a06:de01:145::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a0e:b107:1870::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:53:87:95:c4:2b:15:71:45:b8:b4:27:57:7f:aa:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 11 08:25:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10ecd9e8783416f34cd2d0100d6ca8ef7a012375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:8b:dc:d5:c1:66:d8:cf:16:d8:fe:f6:96:
aa:3c:18:fb:e1:03:1b:82:b4:64:c7:f6:83:04:80:
bf:df:f6:e0:25:ad:6e:c2:4b:aa:35:4f:86:68:19:
e5:e1:58:85:63:21:d2:95:d5:a0:62:ca:a5:dd:35:
d6:0e:45:a2:db:e4:db:01:a5:17:83:c6:73:34:c3:
3a:6d:53:19:86:a6:3e:d1:89:d8:32:01:61:9b:c9:
00:54:2a:59:cc:f1:71:e0:3e:52:e9:5f:20:a7:cd:
51:a9:31:54:6b:44:c0:2c:b0:38:0c:ee:4b:dd:13:
f1:9d:52:59:18:81:d5:d6:cb:22:a3:b3:bd:95:32:
84:54:fd:fc:4d:08:c1:4c:2e:5c:2d:3c:76:d0:31:
9c:57:c0:23:60:a2:4c:ba:9e:5d:23:b7:d5:8b:b6:
b2:61:4e:35:ac:4a:05:b5:54:df:da:43:bb:9c:89:
ae:91:b4:42:ba:94:75:53:c7:b4:d0:16:45:1f:5e:
05:c4:19:f3:be:19:62:c5:50:84:51:ae:e8:39:66:
d1:2d:3d:f4:11:dd:6b:a3:8a:e2:b5:29:66:e2:11:
fe:bd:9a:ab:34:92:f5:17:28:ab:4f:42:cb:1e:58:
5e:58:00:db:f2:4d:89:9b:3b:8c:8e:00:f2:61:cb:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EC:D9:E8:78:34:16:F3:4C:D2:D0:10:0D:6C:A8:EF:7A:01:23:75
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EOzZ6Hg0FvNM0tAQDWyo73oBI3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:f0::/44
2a06:de01:140::/44
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
8a:9a:23:66:1a:70:f6:55:b3:91:db:ed:a7:70:12:e7:59:8c:
b3:b0:56:80:51:f3:62:b6:04:1c:23:d6:1a:4f:ed:6e:33:1c:
25:2f:ba:6d:92:9e:e4:d4:d1:75:99:03:22:6c:67:43:26:b2:
d0:be:10:0a:05:61:9c:97:ab:e6:95:50:81:ef:e1:10:82:0a:
84:1d:db:50:0e:47:b4:9a:94:3d:c3:c4:dd:66:d0:b3:f8:48:
77:52:e4:78:3a:50:f0:f0:66:f8:dc:09:c5:3b:31:fe:d4:c4:
5c:be:1b:7e:a7:ec:f6:74:95:aa:7a:2b:83:43:d4:a2:da:0b:
ba:84:d1:3b:65:63:fe:70:9e:42:ff:a3:50:33:a5:02:f8:a9:
8e:63:f4:e6:97:c2:d9:31:9f:00:a6:6d:83:ab:25:51:e4:e6:
bb:28:e5:d0:a1:8b:fa:25:36:54:72:82:a1:a6:b6:a4:7f:ad:
56:f5:ac:ea:22:51:50:a0:e0:be:e5:a9:42:48:47:27:8f:14:
d1:0e:fc:74:1f:3e:c6:fc:a3:0f:6f:ea:2a:f1:ad:14:f2:83:
2d:a8:44:99:b0:f8:93:46:be:25:b4:eb:cd:32:be:fa:ae:c7:
f8:bd:c3:42:4d:51:83:69:53:4b:f5:b1:18:56:29:e0:c0:20:
1e:6f:9f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:29 2024 by rpki-client on console-fra.rpki-client.org