Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JzpwY3AVJ9wjqqioJqnnlopu4CQ.roa
File: JzpwY3AVJ9wjqqioJqnnlopu4CQ.roa (raw, json)
Hash identifier: 98/Q38nPhbz20oNJtrEkm9KRCrcWn8TLnMx3UUw3wQI=
Subject key identifier: 27:3A:70:63:70:15:27:DC:23:AA:A8:A8:26:A9:E7:96:8A:6E:E0:24
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD19C164BD1DCA705559C966C57CDD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JzpwY3AVJ9wjqqioJqnnlopu4CQ.roa
Signing time: Tue 02 Jan 2024 10:34:22 +0000
ROA not before: Tue 02 Jan 2024 10:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208840
IP address blocks: 2a0e:97c0:bd0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:19:c1:64:bd:1d:ca:70:55:59:c9:66:c5:7c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=273a7063701527dc23aaa8a826a9e7968a6ee024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e4:c3:95:8d:ca:56:8f:43:60:84:25:e2:11:
b5:9d:76:98:ca:9d:c0:95:89:10:ea:27:b3:6b:6e:
59:1a:da:83:34:19:ff:63:dc:cc:07:a0:da:2a:7c:
ca:ec:02:8d:bb:8a:01:eb:4a:db:0a:3f:6c:11:15:
42:0c:da:2d:19:5b:be:f9:1e:3e:48:1b:80:c5:5b:
d0:14:f8:b7:f2:22:b4:6c:3d:3d:f0:fc:5e:e7:51:
d1:66:c1:39:a6:0c:55:01:60:1d:b4:4f:39:7e:c3:
e0:4b:88:2f:fc:25:21:3b:a1:da:be:a8:f2:a5:1b:
29:a2:e9:6f:ca:6c:de:fd:fd:1b:b7:b1:60:c9:db:
8d:4a:05:fc:19:31:5b:a8:80:df:f0:91:75:19:a1:
b4:11:cb:21:e3:8b:d1:82:e5:17:78:86:17:3f:d3:
49:cf:4d:3d:17:38:ec:1f:69:6b:19:e4:e6:35:24:
90:80:c2:db:7d:4a:4c:44:ef:b0:49:e2:ba:49:93:
4f:12:86:69:d6:19:ec:76:bb:26:73:57:b8:ba:a8:
f1:eb:36:50:76:6f:b3:88:04:f5:f6:84:a2:ef:0c:
8e:d3:53:3d:dc:83:41:2d:12:30:35:1b:05:e3:33:
1a:f6:3b:80:7b:0e:04:6a:ba:c2:50:4c:62:11:38:
41:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3A:70:63:70:15:27:DC:23:AA:A8:A8:26:A9:E7:96:8A:6E:E0:24
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JzpwY3AVJ9wjqqioJqnnlopu4CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:bd0::/44
Signature Algorithm: sha256WithRSAEncryption
55:c8:42:66:ad:60:ec:f2:42:92:5a:e5:e0:d0:8a:96:98:03:
9a:4e:3a:db:da:9f:1e:34:84:73:6d:c4:1b:f8:fa:78:3e:f0:
83:4c:1c:d8:1d:2e:60:18:a3:cb:89:1a:ed:ac:1c:37:ed:60:
2b:5c:38:70:62:97:c3:39:b5:8b:c3:57:21:fe:d7:0d:ea:90:
94:33:62:8c:8b:f1:08:db:e6:57:dc:3e:98:8d:5e:43:2e:95:
11:d0:7f:f1:66:29:fe:fe:0c:79:64:63:4e:ec:3a:4a:c3:de:
90:87:04:65:46:1b:65:fe:4a:95:02:ba:81:74:07:fa:46:a5:
3f:85:14:e9:e8:19:5e:92:38:cc:68:36:cc:7e:c1:37:f9:23:
fa:48:79:04:97:56:da:b5:15:22:c3:28:b6:ec:fa:97:2d:0e:
84:70:bd:88:de:34:76:b3:e2:93:30:01:2d:01:a3:30:4e:5d:
cd:79:e5:a1:08:6d:e8:59:20:ab:26:13:45:cb:67:aa:72:d7:
9e:60:6b:dd:87:2d:24:8a:07:18:eb:77:0e:ce:54:a7:06:87:
6b:18:76:3a:39:56:61:68:c4:11:7d:a7:c8:2f:52:e4:03:6a:
d3:23:90:2f:95:6b:f1:03:32:9e:cb:45:ad:b6:23:30:e8:52:
b0:ec:b5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:04 2024 by rpki-client on console-fra.rpki-client.org