Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GEZnxG12ZHyKOSbZn_P1qGkRXGY.roa
File: GEZnxG12ZHyKOSbZn_P1qGkRXGY.roa (raw, json)
Hash identifier: v/qAxSmWxI4ELs4jlimoKey47Dj82TsCdY/R5CRydx0=
Subject key identifier: 18:46:67:C4:6D:76:64:7C:8A:39:26:D9:9F:F3:F5:A8:69:11:5C:66
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD189239C76FFD74F6EF668E09A5DD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GEZnxG12ZHyKOSbZn_P1qGkRXGY.roa
Signing time: Tue 02 Jan 2024 10:34:22 +0000
ROA not before: Tue 02 Jan 2024 10:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208699
IP address blocks: 2a0e:97c0:730::/48 maxlen: 48
2a0e:97c0:731::/48 maxlen: 48
2a0e:97c0:738::/45 maxlen: 48
2a0e:b107:9fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:18:92:39:c7:6f:fd:74:f6:ef:66:8e:09:a5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=184667c46d76647c8a3926d99ff3f5a869115c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1d:bc:94:24:40:f5:f6:d7:51:d9:f8:83:76:
ce:f1:12:62:fe:18:af:0e:81:91:3c:69:5a:22:a6:
b7:80:c6:32:e7:fe:62:1a:66:ef:91:46:0b:ad:1c:
4e:69:c5:fa:c0:8e:4e:cd:1e:6c:bf:5f:67:f9:3a:
ae:37:f9:50:9f:86:db:58:cd:db:3a:3c:f9:fd:b7:
89:2b:ad:b2:07:03:4a:f5:09:16:1f:34:43:74:80:
7f:c5:10:ae:de:da:7e:79:5e:9a:af:5a:c4:ba:6a:
e1:28:8a:ce:af:45:47:ef:49:b8:3c:03:b6:2a:97:
38:79:32:d6:b3:11:d3:78:1c:cb:b2:77:ae:2e:76:
98:f5:ae:7d:1b:ae:77:c0:a6:22:58:a0:10:a2:95:
f7:90:3e:80:3c:97:5e:1c:8c:90:03:fd:29:5e:58:
05:50:7d:2f:b6:24:e4:51:25:bd:1e:d2:3c:15:df:
1b:56:f4:d0:aa:f8:ec:5e:b2:a0:d2:7b:12:07:be:
61:a2:ea:cd:97:12:dc:87:9c:81:9c:72:af:6e:4a:
a4:a0:18:5b:16:da:9b:d9:b4:b4:ec:26:ff:97:39:
89:6d:61:fd:76:69:22:d0:85:05:69:9b:91:0e:68:
f9:b5:55:e8:78:7b:49:f8:dc:c0:56:9d:75:a6:2c:
38:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:46:67:C4:6D:76:64:7C:8A:39:26:D9:9F:F3:F5:A8:69:11:5C:66
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GEZnxG12ZHyKOSbZn_P1qGkRXGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:730::/47
2a0e:97c0:738::/45
2a0e:b107:9fe::/48
Signature Algorithm: sha256WithRSAEncryption
9f:9b:79:e8:eb:3e:bd:96:88:57:4c:d9:54:2e:f9:7a:66:a3:
29:d8:56:ff:44:43:20:7f:61:27:d5:b5:22:c3:44:3b:55:97:
93:6d:3e:f7:0f:8d:34:ec:1b:dd:33:4c:f6:13:fa:b3:e8:5d:
79:14:8f:a4:0b:59:12:d0:32:7c:6c:28:0a:7f:e5:11:f6:2a:
2d:fb:8e:9b:53:59:65:af:ad:49:d6:c0:aa:e1:72:3b:bf:6f:
1a:ea:ad:04:19:91:73:5e:49:2f:b6:b7:d4:2e:7e:ae:25:73:
05:83:b3:09:02:ac:6f:b7:ce:5c:01:8c:ab:d3:d4:32:90:e3:
2b:25:81:9c:20:41:aa:8d:2d:42:e4:52:ca:c5:35:d6:50:ed:
a0:95:f0:34:98:ad:d1:03:b1:76:b8:4c:82:d3:fc:f0:70:34:
79:d1:4b:cf:7c:f8:fe:e7:be:c1:51:69:05:5e:9f:56:2b:c0:
dd:ee:28:c3:ae:03:98:e9:6c:4b:47:52:c9:d3:75:c3:46:fa:
45:8d:6e:8b:dd:ac:e4:0b:05:94:cd:77:39:e0:2d:d2:26:e3:
37:25:bc:43:d1:b2:b2:ff:38:19:71:3d:d8:03:19:6d:eb:75:
96:e2:31:d4:30:ee:e3:99:23:2d:ff:8f:70:d3:c7:20:04:54:
2f:24:1d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:34:59 2024 by rpki-client on console-ams.rpki-client.org