Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IHzVN9uoMdlJ2QxxJBu4Q1uT-8Q.roa
File: IHzVN9uoMdlJ2QxxJBu4Q1uT-8Q.roa (raw, json)
Hash identifier: 3Gh3L8uJtCfal2Uuct8TTX/LyCofZd1MT/SEHm+kNWw=
Subject key identifier: 20:7C:D5:37:DB:A8:31:D9:49:D9:0C:71:24:1B:B8:43:5B:93:FB:C4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD4ACCCD1366D135697221F62B031B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IHzVN9uoMdlJ2QxxJBu4Q1uT-8Q.roa
Signing time: Tue 02 Jan 2024 10:34:34 +0000
ROA not before: Tue 02 Jan 2024 10:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212995
IP address blocks: 2a10:2f01:2a0::/44 maxlen: 48
2a10:cc44:180::/44 maxlen: 48
2a0e:b107:b80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:4a:cc:cd:13:66:d1:35:69:72:21:f6:2b:03:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=207cd537dba831d949d90c71241bb8435b93fbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:58:2e:88:e3:47:f3:a8:f5:b6:37:f4:be:a8:
4f:e4:01:fe:e2:e1:64:fc:8b:80:4a:57:54:99:d3:
7d:df:42:bc:db:b8:da:53:e7:17:5f:2d:01:9b:e4:
9b:66:09:9b:f6:10:b7:57:31:9b:01:12:0d:67:c7:
ce:4b:e1:eb:2f:75:00:16:94:2a:3f:79:0d:74:9b:
f2:1e:1d:63:bd:d1:04:0b:f6:94:24:63:d3:56:df:
e0:df:5f:f5:9e:f8:47:13:d1:19:b2:3f:58:55:90:
6d:75:84:8a:fb:c8:2b:c9:45:a5:c8:c9:77:26:2c:
80:4b:d8:d7:11:f3:ed:cc:28:55:ee:83:4b:6f:86:
70:ce:08:89:99:0b:a0:7a:af:20:a7:40:ff:b8:50:
11:92:2b:fd:01:7a:01:55:d1:06:b8:d7:8e:ab:7e:
8c:9d:da:5e:d4:68:d6:63:47:0e:1f:1e:b7:c8:a3:
70:7c:04:b2:c9:3d:d0:9a:a3:34:b4:19:2c:ac:0a:
f5:95:e3:86:84:60:86:b6:0f:69:5c:95:13:30:f5:
ac:4d:86:77:be:9d:9a:40:0b:5f:7e:f7:41:ae:2b:
fa:fb:5b:d8:09:69:e5:76:52:a6:10:d0:f2:0f:81:
a1:ae:48:cc:e8:e4:bb:1d:f6:e0:cd:b8:b5:33:6f:
c8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7C:D5:37:DB:A8:31:D9:49:D9:0C:71:24:1B:B8:43:5B:93:FB:C4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IHzVN9uoMdlJ2QxxJBu4Q1uT-8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:b80::/44
2a10:2f01:2a0::/44
2a10:cc44:180::/44
Signature Algorithm: sha256WithRSAEncryption
72:d9:16:f3:aa:86:1f:db:4a:2f:83:f9:d5:e7:64:70:71:3e:
2f:34:d7:b8:3b:b8:3f:28:78:61:58:4f:b5:eb:e7:ad:89:0b:
83:d6:5f:a1:b1:3f:5e:9b:f7:91:9f:ed:65:6b:78:7c:0e:29:
b6:2f:90:f9:77:2b:83:46:1b:5e:e7:92:3a:cb:da:7d:dc:ea:
fb:55:80:46:a9:b2:49:73:e2:63:b0:6e:e9:92:02:b7:d3:26:
32:e8:8d:ef:47:3d:d9:8b:50:7e:14:d0:9a:3b:cb:a2:52:e4:
68:e4:ac:58:db:4c:3c:0c:fe:a2:9c:3c:f6:09:87:31:85:a0:
ae:b0:4a:dc:9d:c5:a1:c4:6b:cb:c6:97:c0:c4:b9:69:29:d9:
59:2a:88:b6:22:a5:bf:3a:fa:80:83:23:84:db:fa:4a:4c:95:
ed:c8:4a:56:d3:e0:c8:87:29:da:93:8b:de:25:4e:76:48:4d:
15:50:2c:d1:a5:1a:86:ee:d8:7d:bd:fa:df:2b:db:69:03:0e:
e6:58:15:8d:15:9e:c1:18:f9:59:ba:5a:29:3c:1d:e0:fa:f2:
37:2f:76:4c:19:fc:cc:ab:7c:bd:0b:d8:b6:60:51:db:c5:1f:
b0:5d:83:73:de:6e:b6:da:3c:64:11:ae:45:1c:a6:55:7e:d2:
95:ed:04:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:39:03 2024 by rpki-client on console-fra.rpki-client.org