Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Fjb1a86j_rJmA5haNUEVN-Nbbr8.roa
File: Fjb1a86j_rJmA5haNUEVN-Nbbr8.roa (raw, json)
Hash identifier: hvfr9RytkuYNW5resE5/6+NUqabu8m5S2XdPPcTkPVE=
Subject key identifier: 16:36:F5:6B:CE:A3:FE:B2:66:03:98:5A:35:41:15:37:E3:5B:6E:BF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018E9E7F48764507A3AEE39E15B311C9AC6B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Fjb1a86j_rJmA5haNUEVN-Nbbr8.roa
Signing time: Tue 02 Apr 2024 11:08:45 +0000
ROA not before: Tue 02 Apr 2024 11:08:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212503
IP address blocks: 2a0e:b107:1d08::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:7f:48:76:45:07:a3:ae:e3:9e:15:b3:11:c9:ac:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 2 11:08:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1636f56bcea3feb26603985a35411537e35b6ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:35:5f:62:a5:ed:8a:d0:0a:b6:26:1e:4b:
9b:f5:02:f2:8d:72:69:0a:dc:ae:d6:dc:9b:28:29:
23:0d:9c:b6:78:24:64:6f:25:f0:0c:2c:57:29:f4:
02:4e:50:40:d6:d4:1e:ac:04:cd:96:6b:12:39:de:
ee:8d:ed:67:f9:af:68:20:03:ec:89:fc:bd:1a:43:
32:fe:06:c6:fa:30:d5:ab:53:5f:df:10:2e:6b:dc:
62:46:c8:f1:1b:53:05:77:57:3e:d6:3a:00:c2:66:
16:f0:12:47:26:3d:29:c1:33:75:22:a8:6c:00:56:
bb:49:b8:84:36:b4:01:2d:f8:8c:79:47:18:5d:b6:
a8:d8:50:74:1a:7b:a3:58:28:f5:95:cf:18:bc:d0:
dd:3d:30:74:39:80:68:99:58:f6:fd:f1:89:f2:4e:
46:af:1b:82:5c:96:0f:e5:6c:e0:39:13:a3:38:95:
bf:3e:c1:c6:5f:fb:2f:07:d1:71:ed:b1:8f:f6:0c:
61:d5:ec:67:03:e8:57:f3:6e:7d:d5:f5:4e:b6:93:
e3:ed:e0:81:df:4f:91:92:26:12:ff:58:34:60:e0:
85:a3:ad:5f:5e:de:96:99:2c:5f:d3:eb:2d:d7:27:
fc:dc:01:37:96:28:27:13:2e:6b:4f:cc:28:ac:3f:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:36:F5:6B:CE:A3:FE:B2:66:03:98:5A:35:41:15:37:E3:5B:6E:BF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Fjb1a86j_rJmA5haNUEVN-Nbbr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1d08::/45
Signature Algorithm: sha256WithRSAEncryption
b2:91:77:2d:9a:15:8e:f6:59:b3:90:97:3b:f0:b2:de:70:5a:
31:5c:bc:91:e0:1d:48:75:4c:4c:f2:64:8c:02:fa:50:4c:33:
6f:f3:e8:90:db:1d:68:72:aa:84:16:63:82:e7:b5:96:12:1c:
f3:da:0d:9c:1c:6d:d4:85:e2:02:6b:bb:49:15:5e:03:61:25:
7d:72:e0:ae:fd:72:16:f2:94:36:88:e9:34:8d:d1:a6:91:25:
a8:7d:9d:ba:f4:3a:a5:02:90:93:dc:22:2c:96:84:34:84:32:
52:b7:2c:cc:ff:06:38:f6:58:9c:f0:7a:e6:2f:74:28:9c:85:
94:f0:f6:fc:9d:5a:11:8d:94:c3:99:1c:3a:53:03:ba:b8:ef:
be:00:63:06:4a:ea:1d:d3:9e:e0:f1:b1:b1:46:db:a0:66:9b:
ef:00:37:44:b0:89:67:81:6e:70:e8:73:23:7c:55:f4:72:96:
07:2d:18:9e:24:d3:7e:6c:77:5f:dd:af:ff:db:24:db:09:1f:
11:ae:51:ab:bf:53:f8:08:42:17:55:e2:9e:2b:18:13:7f:bc:
8e:0f:e2:19:3f:89:f3:05:43:be:6a:9d:c4:61:ae:a3:92:52:
2c:44:0b:2a:1d:71:60:ff:5d:c0:fc:74:d4:a4:b7:57:b5:25:
26:be:5e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:04 2024 by rpki-client on console-fra.rpki-client.org