Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ka0P0YsEadQ9P_0pab-3UZeLmc0.roa
File: Ka0P0YsEadQ9P_0pab-3UZeLmc0.roa (raw, json)
Hash identifier: qLTp4KC1oRXWliwikKwEJlSYqz3OoXZp2UKsjNy2Ky4=
Subject key identifier: 29:AD:0F:D1:8B:04:69:D4:3D:3F:FD:29:69:BF:B7:51:97:8B:99:CD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCDF4F3F228E1A435ABA5834CF8F42
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ka0P0YsEadQ9P_0pab-3UZeLmc0.roa
Signing time: Tue 02 Jan 2024 10:34:07 +0000
ROA not before: Tue 02 Jan 2024 10:34:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142055
IP address blocks: 2a0e:b107:1170::/48 maxlen: 48
2a0e:b107:df5::/48 maxlen: 48
2a0e:b107:1172::/48 maxlen: 48
2a0e:b107:1171::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:df:4f:3f:22:8e:1a:43:5a:ba:58:34:cf:8f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29ad0fd18b0469d43d3ffd2969bfb751978b99cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b1:4d:22:c3:8c:33:73:9d:0c:a0:9a:b3:02:
c2:bf:34:34:e9:57:fb:f5:ed:71:2c:d0:19:a1:36:
c9:b5:eb:bb:13:35:41:ba:e6:51:ef:be:02:d0:9a:
d1:9e:9d:56:d7:93:51:47:bc:de:21:67:ca:a2:b6:
94:95:79:00:f0:a2:71:44:76:12:a9:10:4b:24:61:
cf:26:c0:91:76:0f:8b:e8:e6:9c:ec:3f:8b:f3:e6:
4b:02:c0:8e:09:79:06:60:61:81:61:7e:bc:ae:d0:
07:d4:52:74:a9:aa:57:d6:4c:ee:a4:94:06:6a:69:
6a:c6:69:bb:d8:3c:ae:d3:c5:d1:43:a5:13:48:48:
7c:20:1e:75:aa:84:4f:a4:6c:7f:8d:a0:5b:ba:45:
b8:c7:18:53:c0:b0:fc:56:99:7b:d4:4e:52:c9:39:
f7:bb:52:83:4b:8f:26:8d:75:34:3b:3e:29:90:bc:
03:11:ee:52:98:63:6b:d9:f4:32:7b:3f:87:31:13:
a6:0f:10:4e:a9:28:5b:e0:a5:e3:a2:84:cd:28:89:
c2:89:e9:6d:04:2b:3a:1f:89:4c:28:52:b7:6c:3b:
c2:f5:8d:7d:77:8b:ae:71:77:42:5c:8e:40:cb:32:
f2:dc:a0:11:65:91:ce:29:bc:5f:fa:0c:e9:c8:bd:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AD:0F:D1:8B:04:69:D4:3D:3F:FD:29:69:BF:B7:51:97:8B:99:CD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ka0P0YsEadQ9P_0pab-3UZeLmc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:df5::/48
2a0e:b107:1170::-2a0e:b107:1172:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
cb:c9:8c:a9:2a:0c:27:24:8d:35:77:64:2a:82:7f:eb:69:87:
83:c6:6b:50:fa:1c:54:a9:ce:78:0f:14:99:0a:fc:b9:ee:02:
87:6a:b3:31:93:fc:2e:6c:29:fe:f2:ca:c9:85:9a:75:64:f9:
e2:cd:e4:25:0e:e6:6d:fe:f2:69:d4:c7:51:1a:1f:62:88:86:
14:fd:d0:3c:c7:89:1b:d1:25:c6:8d:05:86:35:42:f6:51:f6:
01:ba:36:9d:0b:b6:dd:5e:1a:f0:2b:e4:d9:a9:34:2e:19:47:
d0:c1:80:77:df:93:a8:5f:9b:1d:a6:8c:d2:c6:12:69:10:e0:
c2:b6:8c:0b:8e:23:d1:71:74:b0:58:d1:83:e0:f8:1b:23:cd:
ba:fb:67:87:fa:54:d6:98:2f:bc:6c:92:41:45:c1:f0:ae:04:
03:30:4d:46:55:a7:ad:ab:79:65:aa:33:d4:23:a9:4c:3f:e2:
9d:c9:d8:68:f9:d0:39:c5:2a:ce:3b:24:48:f9:8c:e1:67:4c:
98:c8:78:96:37:29:b0:83:37:b3:a7:f3:a6:85:00:88:bf:07:
65:d4:0f:ab:33:c3:0d:ba:a5:29:53:61:d7:ff:51:45:be:42:
27:8e:16:fa:11:4e:08:12:b6:77:71:3b:76:e5:87:b9:dc:35:
0f:c8:b2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:41:04 2024 by rpki-client on console-ams.rpki-client.org