Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IDxKsU1yGbiZxXY0t5D7867sOf4.roa
File: IDxKsU1yGbiZxXY0t5D7867sOf4.roa (raw, json)
Hash identifier: o+T/dlhHXfMvvR0MaHncKecmG7GFV6+kqCon6wxAceo=
Subject key identifier: 20:3C:4A:B1:4D:72:19:B8:99:C5:76:34:B7:90:FB:F3:AE:EC:39:FE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D6B6A2E49CC421846338F86696916F66B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IDxKsU1yGbiZxXY0t5D7867sOf4.roa
Signing time: Fri 02 Feb 2024 20:02:17 +0000
ROA not before: Fri 02 Feb 2024 20:02:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200516
IP address blocks: 2a0e:b107:f60::/48 maxlen: 48
2a0e:b107:f61::/48 maxlen: 48
2a0e:b107:f65::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6b:6a:2e:49:cc:42:18:46:33:8f:86:69:69:16:f6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 2 20:02:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=203c4ab14d7219b899c57634b790fbf3aeec39fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:f5:21:43:ae:1a:8c:ad:cf:a0:68:5c:9d:
44:bc:24:d3:a0:0e:f4:59:52:91:5c:4f:9a:6b:56:
db:b2:de:cf:bf:cf:47:88:56:09:3e:27:1c:9c:fb:
0f:34:f6:2f:b3:8d:96:b0:a4:f3:d8:9a:65:75:e7:
cd:25:90:ee:78:1d:39:38:cc:aa:43:16:87:e8:21:
ce:64:15:44:04:13:7c:96:b6:b6:51:ff:14:9b:2c:
6c:66:f4:c0:72:c2:0c:f0:01:3a:59:c9:3a:66:d0:
70:c2:cf:7a:26:78:13:7e:d4:1c:15:ac:dd:2c:57:
b5:35:1f:0a:59:57:53:0e:59:b6:53:01:a4:0f:ec:
de:46:bf:9f:8d:40:d7:8c:c7:54:79:76:ba:04:3b:
d0:b3:2a:86:f9:00:72:f2:01:ce:20:86:ca:0b:17:
16:39:87:ca:56:b2:48:36:ac:bb:c5:9a:f0:ba:c8:
a8:81:ff:c2:8b:0a:0f:3d:ca:a1:30:e0:58:be:26:
71:03:11:ef:e4:8a:bc:f1:9e:69:46:be:7b:ec:c9:
1b:e7:f6:8e:ba:cb:57:2b:af:35:c2:a3:a2:cf:41:
7c:ad:1c:4b:5a:e1:67:2c:c6:3a:30:82:45:34:14:
c7:48:e5:cb:2d:af:25:b0:8b:55:56:b2:dc:2e:0b:
a8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3C:4A:B1:4D:72:19:B8:99:C5:76:34:B7:90:FB:F3:AE:EC:39:FE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IDxKsU1yGbiZxXY0t5D7867sOf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:f60::/47
2a0e:b107:f65::/48
Signature Algorithm: sha256WithRSAEncryption
a5:97:6b:22:b8:dc:ef:c5:33:da:e9:a6:da:8c:49:96:50:4f:
2c:2f:51:41:59:33:c9:31:c4:0a:d3:cf:c7:3f:92:99:24:a1:
d3:58:92:82:e0:b6:5a:ad:0d:7e:49:f0:82:26:a8:81:77:c7:
99:91:16:52:79:ee:82:5d:b7:72:d0:06:25:06:0b:2c:7b:e0:
84:47:54:17:5d:22:7a:9f:c1:18:e5:e9:fc:ee:f3:4e:7d:97:
59:06:5e:ab:c7:5a:4f:7a:33:94:f7:26:13:71:ff:5d:79:30:
c5:d4:a3:11:7e:fc:61:05:99:17:66:fd:6b:a2:e7:4e:e0:1b:
5f:76:23:98:27:66:1f:72:80:ce:9c:5c:77:c6:b8:d4:b4:2d:
a2:3d:0b:65:b9:e5:a7:ef:31:c0:88:2c:12:36:51:ee:1e:96:
e1:0d:9c:41:48:62:fc:31:5b:3a:73:ad:e0:de:cf:52:5d:52:
db:d7:54:d7:ca:5c:95:35:0f:3b:02:83:52:4a:e4:9e:c4:be:
5a:7a:49:85:9e:3a:97:d8:9f:b5:a3:d0:06:16:03:c7:86:13:
9a:5e:0e:78:e9:fd:a7:f3:69:ab:00:ca:1a:2a:0d:7f:02:57:
f0:f6:fa:b9:62:98:1d:83:db:22:92:ef:48:62:8a:f6:86:c9:
27:18:13:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:17:51 2024 by rpki-client on console-ams.rpki-client.org