Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JMVAs9yofSeVfHv43AUlyBJ8TrI.roa
File: JMVAs9yofSeVfHv43AUlyBJ8TrI.roa (raw, json)
Hash identifier: MHMyqzB01oj78Vc1t/sZoeL4QTll7/XiwgJs+zSA4SA=
Subject key identifier: 24:C5:40:B3:DC:A8:7D:27:95:7C:7B:F8:DC:05:25:C8:12:7C:4E:B2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018F19D3AE485F8D27598CA1F6B50FA4725D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JMVAs9yofSeVfHv43AUlyBJ8TrI.roa
Signing time: Fri 26 Apr 2024 09:54:14 +0000
ROA not before: Fri 26 Apr 2024 09:54:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209300
IP address blocks: 2a0e:b107:740::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:d3:ae:48:5f:8d:27:59:8c:a1:f6:b5:0f:a4:72:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 26 09:54:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24c540b3dca87d27957c7bf8dc0525c8127c4eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:20:ab:4f:c0:9d:6c:ec:62:da:f8:33:ba:c7:
67:27:0a:38:13:f0:d8:4e:ce:bc:73:fc:79:d7:63:
82:14:50:a9:e0:3a:9b:78:64:6f:7e:8c:ad:3d:aa:
f4:6a:2c:75:14:07:e5:ad:5b:f2:3f:3f:5a:05:55:
15:54:b7:eb:0e:a6:51:46:07:df:8c:00:62:dd:11:
f2:2f:b5:34:82:5d:eb:0e:5d:8f:fb:39:79:11:42:
51:c6:f1:e9:a5:b9:a0:22:10:15:fc:7a:78:81:2d:
11:cf:34:0f:b5:ae:7a:27:80:6a:11:89:cd:bb:58:
8f:9d:4b:4f:19:3b:54:f7:6c:1d:1e:13:53:30:96:
31:36:ba:12:93:53:9a:af:60:58:6f:9b:d1:00:46:
59:45:25:fb:83:08:46:67:33:39:e7:e6:b6:59:6f:
a6:51:9a:ce:ba:dc:9e:43:49:30:60:a1:99:08:38:
8a:bb:b2:da:84:d6:66:60:a1:7a:e3:17:0d:2c:82:
58:87:cb:aa:f9:68:7c:40:04:2a:20:82:ca:18:2f:
e5:1f:76:48:40:35:f8:f1:32:8e:3b:f8:48:b4:aa:
32:ae:cb:fc:27:21:e8:f1:6e:54:03:95:06:52:19:
e1:ed:17:0a:12:7f:d8:a6:c8:46:70:2b:bd:eb:7c:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C5:40:B3:DC:A8:7D:27:95:7C:7B:F8:DC:05:25:C8:12:7C:4E:B2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JMVAs9yofSeVfHv43AUlyBJ8TrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:740::/44
Signature Algorithm: sha256WithRSAEncryption
6e:ca:0f:7c:47:9f:7c:28:2a:53:5c:31:fe:c6:fa:01:f6:8b:
cc:ba:76:f9:98:3a:97:29:1b:1b:de:02:87:6a:5a:dd:37:4e:
de:30:e6:02:05:bf:f5:cb:f0:ac:47:e8:8f:53:5e:55:b8:cb:
99:dd:23:71:64:c8:a0:26:96:9d:7a:51:94:77:49:18:4a:a7:
86:81:b3:d2:d8:4f:91:73:2c:b1:95:d2:fb:d4:ba:f4:a8:25:
3b:87:52:45:0c:ae:34:5f:17:05:88:78:52:97:a2:61:73:b4:
af:13:41:a4:0f:9c:e2:fd:30:db:85:f6:cc:41:e1:db:85:c1:
fd:45:8e:41:a3:e0:ee:09:e0:d1:15:81:5b:f5:c3:3c:0e:c6:
a1:df:93:28:fb:51:10:c4:a7:d9:a6:90:60:42:61:e0:59:0e:
dd:87:8a:9d:9b:52:4f:76:59:61:03:7f:d7:5d:44:5b:63:e3:
05:ff:ff:46:f1:23:7f:cf:ac:ad:47:fe:42:81:11:35:9a:63:
b8:d8:2a:10:f1:18:01:7b:44:52:a7:61:a7:bc:95:05:f6:ae:
52:0d:7a:32:16:ef:ee:2a:bb:77:2e:f2:62:41:fa:57:b8:07:
2e:10:7b:23:63:75:a9:79:3a:44:00:cc:1d:89:96:be:3e:5a:
17:90:cf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:54 2024 by rpki-client on console-ams.rpki-client.org