Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L7UJJANRHSjl_1JrlBje12OvQVc.roa
File: L7UJJANRHSjl_1JrlBje12OvQVc.roa (raw, json)
Hash identifier: v3dPiIdk4Nc0usIy5HbvddtE5JU7Fej8W3BDCTONOsM=
Subject key identifier: 2F:B5:09:24:03:51:1D:28:E5:FF:52:6B:94:18:DE:D7:63:AF:41:57
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD5C9938BCFCE8B81A4176B58BE8CB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L7UJJANRHSjl_1JrlBje12OvQVc.roa
Signing time: Tue 02 Jan 2024 10:34:39 +0000
ROA not before: Tue 02 Jan 2024 10:34:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400542
IP address blocks: 2a0e:97c0:a46::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:5c:99:38:bc:fc:e8:b8:1a:41:76:b5:8b:e8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fb5092403511d28e5ff526b9418ded763af4157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:ff:ce:cd:93:65:ad:ed:78:a1:e2:76:33:
c7:8e:33:f0:91:5b:2b:2d:24:9c:0d:14:91:67:b7:
5b:80:86:3b:17:ef:95:be:d6:11:8f:15:25:1a:0f:
7b:55:a5:c4:30:bc:ae:9f:a1:6b:e8:02:25:b3:d3:
1a:ef:36:a7:8f:f8:7d:0f:0b:16:62:ca:de:70:56:
2a:df:dd:fd:4c:31:46:ee:00:e7:f2:ba:a9:d7:fe:
15:f7:cd:bd:d4:d9:2d:76:9f:70:b4:fb:d9:a0:6a:
39:33:8a:c5:a3:38:ed:40:81:58:b1:ba:67:06:dd:
c3:2e:cb:f3:40:b2:b0:47:96:43:7c:1e:76:76:44:
88:d1:3b:ea:dd:c0:50:2c:91:21:fa:6a:c0:59:0b:
c6:56:cb:de:fd:da:ab:73:ce:32:56:2a:46:0c:eb:
c4:e0:74:3d:19:d9:bc:a2:39:e2:f1:41:d0:52:b9:
53:2c:3d:81:b9:83:5d:a6:47:73:d3:48:3c:cc:1e:
93:63:ef:54:c4:2d:73:8b:53:42:0c:9a:53:39:5b:
35:72:47:55:b7:71:61:96:ed:68:2e:b6:a0:3e:12:
c0:a1:49:81:b7:89:87:79:7b:7d:93:3d:cc:bb:c3:
9d:ba:76:6f:18:ff:6f:6f:31:61:e2:5a:b3:f5:30:
e0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B5:09:24:03:51:1D:28:E5:FF:52:6B:94:18:DE:D7:63:AF:41:57
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L7UJJANRHSjl_1JrlBje12OvQVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:a46::/48
Signature Algorithm: sha256WithRSAEncryption
4a:3f:6b:87:0e:90:09:83:a1:64:1c:44:77:bf:86:c8:37:2f:
15:16:e4:39:db:8b:27:e1:37:ec:e0:da:8c:65:17:53:13:44:
9b:73:56:3e:b2:b7:13:93:f6:8f:f8:a6:c7:dd:b1:72:f5:ae:
91:31:5f:5e:2a:2b:b8:0c:1d:26:0f:c8:18:aa:d6:52:e0:e5:
5f:d9:f0:e4:85:b7:15:59:d1:51:5c:f6:01:cb:38:33:77:43:
0f:cb:b5:11:bf:32:30:54:0d:f5:74:dd:c5:6f:c7:2c:7c:1d:
cf:f3:f1:fe:1e:88:ec:d9:a2:fa:31:23:60:41:48:4b:04:c5:
eb:1a:94:1c:4e:f4:f6:43:c7:c5:9d:fe:61:fc:35:d3:9f:ac:
c3:15:6e:45:24:d6:4c:53:d8:01:62:11:a3:bc:4f:5f:64:fb:
ef:e3:ac:31:b0:94:f1:66:b1:8d:ea:e1:3d:7b:94:c3:61:81:
57:7c:f7:30:8f:cb:c9:09:27:d2:2f:ce:13:67:0b:c1:b2:85:
28:20:e7:aa:3c:e2:f0:77:b9:a3:ac:d8:a6:e5:c2:bf:05:c9:
f1:51:1b:fc:c1:8d:2c:de:f6:2d:d6:1c:cf:e2:17:f3:aa:b3:
2c:c5:78:55:29:2c:3f:36:bb:80:43:c4:b5:f7:2a:fd:1d:eb:
96:39:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:33 2024 by rpki-client on console-fra.rpki-client.org