Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Gcm4IVh_0RFvsV7bG5Ti6hkh1d0.roa
File: Gcm4IVh_0RFvsV7bG5Ti6hkh1d0.roa (raw, json)
Hash identifier: DJJAPK3BO1mSR+A3wYt4IJsvgM9vcB8LVLBxiaakjtY=
Subject key identifier: 19:C9:B8:21:58:7F:D1:11:6F:B1:5E:DB:1B:94:E2:EA:19:21:D5:DD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD45A25C1CF7561885D19AAC60A819
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Gcm4IVh_0RFvsV7bG5Ti6hkh1d0.roa
Signing time: Tue 02 Jan 2024 10:34:33 +0000
ROA not before: Tue 02 Jan 2024 10:34:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212508
IP address blocks: 2a0e:b107:dd0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:45:a2:5c:1c:f7:56:18:85:d1:9a:ac:60:a8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19c9b821587fd1116fb15edb1b94e2ea1921d5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2b:80:70:7b:51:89:cf:e6:4b:32:02:95:95:
89:e4:e6:0c:aa:34:74:02:0d:86:91:71:47:e2:79:
7a:b0:08:80:32:b6:47:c6:07:43:46:79:16:94:bc:
18:9f:46:c2:2e:e3:bd:51:7c:f4:77:17:9c:f8:61:
29:ca:24:91:06:64:5a:80:0a:92:fd:19:a7:23:08:
39:0e:19:9f:52:fc:e5:e4:d6:be:c8:0b:b7:be:31:
53:76:d9:c9:82:29:77:c4:c7:df:53:a6:4a:a2:cc:
69:82:b7:c0:a8:19:7f:13:3d:9b:b1:df:92:78:08:
20:53:80:65:b7:c0:6d:5c:db:0b:a4:4c:95:35:4c:
c7:cd:57:d0:dd:33:42:c0:99:af:58:f0:eb:52:7c:
0e:e3:72:4e:0c:dc:44:a7:80:20:f2:86:3f:d4:28:
ea:ca:91:2d:37:55:49:c5:78:10:29:23:28:5d:36:
d9:cf:65:b4:6e:fd:6f:7f:6a:1b:68:16:4b:f5:d4:
21:0d:d4:34:f0:67:7b:fd:6e:9a:43:33:e4:ee:3e:
bd:30:6b:99:05:72:86:81:37:46:31:08:44:11:77:
73:5c:b9:b7:c4:6d:6a:54:25:ba:02:d3:9c:0e:88:
d6:00:90:5e:4a:8b:69:6d:f6:5c:41:ce:ba:74:a7:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C9:B8:21:58:7F:D1:11:6F:B1:5E:DB:1B:94:E2:EA:19:21:D5:DD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Gcm4IVh_0RFvsV7bG5Ti6hkh1d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:dd0::/44
Signature Algorithm: sha256WithRSAEncryption
a5:aa:0f:cf:0a:69:53:3a:ae:14:cd:07:12:c1:4a:33:06:59:
4d:c1:93:bf:e2:87:ab:e3:71:20:de:9b:12:e5:e8:cd:d6:8d:
0b:8a:5c:65:e0:f0:84:b6:a2:21:92:4b:28:c3:8e:60:cd:78:
f6:86:24:19:d7:06:33:84:7f:c6:ae:e1:ce:f4:b4:3f:26:f4:
ad:e5:3d:14:2a:6c:48:9c:f5:4e:d8:70:f9:41:6e:f1:9d:c4:
ef:8f:6c:4e:93:01:00:90:c3:d6:f0:4c:cb:5c:08:3a:3b:d1:
a9:b2:be:95:f6:bb:e9:ff:94:3d:ca:3b:ad:18:a3:45:16:1f:
fa:f6:51:f0:99:14:7f:fd:e1:c1:2f:e4:08:e5:55:17:3e:15:
06:70:fc:62:62:b2:2c:fa:6e:60:92:a9:f2:67:91:3a:f7:c2:
43:20:dd:7d:f6:b6:80:5a:68:4e:a9:88:83:f8:2b:7c:b1:e8:
2f:08:64:68:1b:46:91:64:7d:8c:c2:7d:eb:de:bb:a1:38:e6:
f3:12:c5:46:dc:63:47:59:0a:0d:3e:63:f2:f9:e3:ab:f7:d6:
db:2f:4f:6c:a0:26:3f:c1:63:9f:2e:24:27:29:fd:6d:fb:9f:
f1:2d:3b:dc:18:59:16:ca:9f:25:97:4d:19:87:a7:a5:6d:0b:
37:c1:8d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:33:16 2024 by rpki-client on console-ams.rpki-client.org