Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/I3zoepvMXl4HZMZRmYiPtpXA1zc.roa
File: I3zoepvMXl4HZMZRmYiPtpXA1zc.roa (raw, json)
Hash identifier: oM55MZypw4ZHaveoGGnhPC4KrLLkXae1gnP2lBcDDrk=
Subject key identifier: 23:7C:E8:7A:9B:CC:5E:5E:07:64:C6:51:99:88:8F:B6:95:C0:D7:37
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCF53A6D7874610B3A6608ACDDE1C0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/I3zoepvMXl4HZMZRmYiPtpXA1zc.roa
Signing time: Tue 02 Jan 2024 10:34:13 +0000
ROA not before: Tue 02 Jan 2024 10:34:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200529
IP address blocks: 2a0e:b107:1d30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f5:3a:6d:78:74:61:0b:3a:66:08:ac:dd:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=237ce87a9bcc5e5e0764c65199888fb695c0d737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:ad:aa:89:ed:c2:47:b9:44:d8:f7:a1:62:
65:81:78:d4:5a:f3:c6:de:07:a7:ed:91:12:95:68:
e9:e2:ab:ba:15:10:e0:35:8f:f0:4e:2a:84:09:ef:
5d:cd:da:bf:2d:57:d5:84:ff:e3:94:a1:6f:a0:ee:
c0:d8:4d:9f:62:02:f6:5b:08:e7:ca:f0:57:8d:39:
d1:72:82:d6:a0:69:fe:a8:95:1f:1f:1d:ec:d9:f6:
96:cb:8a:cf:61:d8:0b:eb:52:d9:bb:dc:d4:79:c3:
84:68:44:2d:94:da:40:07:bc:ad:09:20:7e:4e:ed:
fd:b3:fa:6d:40:90:da:76:d8:24:dd:4e:55:fd:1f:
56:80:ed:98:9a:83:0f:24:09:31:ff:c5:d6:78:1f:
28:c3:0c:ea:bd:56:e5:70:1a:3c:3e:ce:cf:1b:fb:
c7:f3:5a:df:62:0a:6d:c2:12:a7:5e:e8:1e:08:e4:
5d:29:dc:ba:ae:c9:9b:81:07:c4:ae:66:10:3b:94:
a0:d5:d2:25:fc:1e:b8:28:ef:60:a1:4e:b7:0e:93:
0d:31:ce:85:56:a5:e9:72:cf:14:2d:e5:ef:77:34:
9d:08:80:e9:e8:e3:46:ed:1b:47:fa:94:69:a2:6b:
d7:54:d4:d4:c7:ec:5f:1d:5d:7b:4e:dc:b5:11:06:
61:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7C:E8:7A:9B:CC:5E:5E:07:64:C6:51:99:88:8F:B6:95:C0:D7:37
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/I3zoepvMXl4HZMZRmYiPtpXA1zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1d30::/44
Signature Algorithm: sha256WithRSAEncryption
04:8f:d0:00:f2:00:0d:e8:e7:d7:4d:b8:0c:70:fd:78:a2:64:
eb:87:cc:4b:d7:08:f0:60:33:dd:f3:f0:b2:e2:7e:b8:48:ed:
2a:b1:b5:bd:b0:1d:22:4d:b6:5b:45:82:17:27:52:b0:4d:60:
2b:a0:aa:2d:8c:55:c5:f3:24:0e:2d:f3:75:07:c4:a7:47:d0:
81:18:ce:15:ec:46:3e:93:d8:60:17:52:8f:50:b1:bc:2d:4a:
f1:dc:23:57:91:f4:ec:42:e9:ee:f0:cc:e1:30:ce:ed:1e:61:
5a:34:07:b4:0d:75:76:dc:ca:f3:73:77:c0:65:e9:9f:c4:07:
24:21:72:7f:bb:e0:d5:35:5b:6a:8e:94:f8:a0:14:0f:2c:43:
12:b0:89:28:4f:96:dc:3a:08:c6:cd:1e:b3:54:ee:ec:41:7c:
af:cd:84:13:cc:9a:8f:cd:75:6b:46:58:5d:49:33:2d:eb:6a:
ae:6f:d8:39:4a:44:be:be:32:1f:c9:ee:04:e3:6a:cd:96:f6:
cc:1c:6c:29:0c:98:22:2b:6e:79:b5:e9:f1:30:66:22:d3:29:
03:6a:12:68:27:22:ee:66:29:43:b9:88:d6:1b:f1:f1:72:fa:
e3:28:dd:ee:70:39:62:b1:b9:72:b2:e8:f5:f4:6c:41:44:22:
b6:11:c2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:22:01 2024 by rpki-client on console-fra.rpki-client.org