Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JsLTxBR3hWU9EHciX1xRKmpl4Gw.roa
File: JsLTxBR3hWU9EHciX1xRKmpl4Gw.roa (raw, json)
Hash identifier: XEPwVE7x6HzE4K9Of193oJkS6RMwDP+K1Ly3Qlk6mCI=
Subject key identifier: 26:C2:D3:C4:14:77:85:65:3D:10:77:22:5F:5C:51:2A:6A:65:E0:6C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCEE7D14989EA5456AAF09402B728D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JsLTxBR3hWU9EHciX1xRKmpl4Gw.roa
Signing time: Tue 02 Jan 2024 10:34:11 +0000
ROA not before: Tue 02 Jan 2024 10:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199613
IP address blocks: 2a0e:b107:1f20::/44 maxlen: 48
2a0e:b107:11b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ee:7d:14:98:9e:a5:45:6a:af:09:40:2b:72:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26c2d3c4147785653d1077225f5c512a6a65e06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:eb:a8:34:c7:bf:2c:82:0c:d3:52:b0:3d:
c3:fa:a1:6b:0f:b7:75:32:2f:e8:f6:84:42:1b:ea:
a9:a8:fe:0d:8b:3a:88:3c:4b:de:38:47:d1:32:e8:
03:9e:08:44:0a:c8:72:1a:ec:52:79:2d:95:d0:5f:
63:3a:f0:08:f4:f8:48:3e:a3:e5:d3:af:aa:51:47:
38:8e:78:0f:a9:cd:22:3a:2f:66:65:f7:d2:89:c0:
0d:0a:7c:eb:3f:dc:15:30:de:e1:97:af:b5:3c:9f:
a6:8d:99:c1:7d:e8:3e:80:51:39:d6:a7:16:43:4b:
0e:59:38:40:0b:d2:d2:e7:cb:1e:3b:b1:d5:a1:43:
9e:1c:6d:07:dd:ed:a2:20:87:f1:4d:52:89:2b:ca:
a4:cc:34:ed:d1:44:79:f4:c4:11:7a:02:a9:40:ad:
ba:1e:04:28:8d:ca:ef:2d:17:f6:d2:8f:a7:55:45:
c6:bc:f8:a8:ed:c9:e7:d8:00:d6:bf:9a:82:05:d4:
0e:6c:0e:97:bf:19:47:de:28:aa:2c:ec:b6:be:a9:
e8:2e:dc:1e:d6:43:de:94:ef:3a:e9:02:5f:97:e1:
94:0d:6a:7f:c2:fb:33:99:4e:86:45:b9:0e:2b:16:
b1:4b:79:b9:95:b6:59:44:84:69:21:81:58:59:30:
ac:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C2:D3:C4:14:77:85:65:3D:10:77:22:5F:5C:51:2A:6A:65:E0:6C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JsLTxBR3hWU9EHciX1xRKmpl4Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:11b0::/44
2a0e:b107:1f20::/44
Signature Algorithm: sha256WithRSAEncryption
a4:08:77:1d:48:a8:c0:c8:92:57:0e:1e:35:1b:60:96:0e:fc:
7e:ff:b1:c7:04:32:b9:58:0b:46:69:e2:fe:b2:c3:09:1b:8b:
01:18:15:c1:c7:ed:33:ad:d5:3a:12:aa:38:5f:d8:03:b3:1f:
e1:25:6b:8e:8d:68:1b:92:d9:7b:33:f2:d7:eb:d2:ba:10:f4:
11:34:97:76:74:5c:00:d0:fc:46:7d:45:ed:b6:3a:88:c9:1e:
d3:e4:ac:11:80:cf:97:e2:30:f0:68:c1:2f:97:66:df:69:79:
ce:f0:ee:61:95:1a:62:27:71:c1:6f:87:08:41:e5:97:cc:9c:
6c:57:7e:cb:95:ac:95:28:47:e4:93:24:cd:2d:46:5d:a3:a5:
03:c9:01:c7:dc:cb:0f:fd:3a:e8:d7:cb:fa:1b:7d:ac:91:09:
5f:58:e5:f9:01:da:35:9f:41:15:90:bd:b5:70:f8:d3:25:04:
1f:49:b5:b8:e9:98:0d:50:dd:c2:ac:a5:e9:5b:e0:bf:9e:50:
2e:86:22:af:ef:3f:8b:db:3e:b2:08:3b:bc:2a:8a:c3:b2:29:
a8:0b:e7:55:34:f0:cf:90:04:73:59:a4:f1:0b:e9:08:7d:8f:
0e:b8:15:f6:e4:a5:d9:a9:f7:5f:39:a4:46:aa:ea:54:bb:3b:
9f:7f:59:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:41:04 2024 by rpki-client on console-ams.rpki-client.org