Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L7yVluUuxvg43eH1P3qcWaVyAOk.roa
File: L7yVluUuxvg43eH1P3qcWaVyAOk.roa (raw, json)
Hash identifier: hM45QS4xBHOU8FmIw/5sI8fJg2bEDqC468fpaDdC1nM=
Subject key identifier: 2F:BC:95:96:E5:2E:C6:F8:38:DD:E1:F5:3F:7A:9C:59:A5:72:00:E9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD2E767A621C999B2C71A704BAE8BB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L7yVluUuxvg43eH1P3qcWaVyAOk.roa
Signing time: Tue 02 Jan 2024 10:34:27 +0000
ROA not before: Tue 02 Jan 2024 10:34:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211013
IP address blocks: 2a0e:b107:1580::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:2e:76:7a:62:1c:99:9b:2c:71:a7:04:ba:e8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fbc9596e52ec6f838dde1f53f7a9c59a57200e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:98:63:07:05:a9:a0:a3:36:d6:cd:57:9f:
d8:5a:e9:7f:4e:b1:8e:c7:56:2c:26:5e:44:c7:1e:
3d:98:1e:56:43:61:65:c4:98:17:b1:6d:8e:16:af:
f8:35:4e:5c:d1:26:c7:03:ae:80:ae:a0:04:2d:41:
b7:6d:39:e1:71:1f:50:ae:53:20:00:64:c3:7d:1d:
ae:e5:2b:fc:c6:8a:4f:9a:62:f6:e9:0f:cb:4e:51:
d1:75:98:aa:3f:58:e3:43:db:bf:0b:26:38:5e:ce:
19:03:2a:56:e0:e6:51:90:92:13:35:72:7a:fd:04:
99:7d:dd:66:40:eb:b9:b6:6d:d4:2c:0d:94:43:92:
29:67:96:16:02:a6:af:5d:77:b5:fe:fd:a1:a1:7c:
cb:a3:0b:24:f4:ce:89:29:24:b4:8c:29:9f:74:d8:
5d:96:33:64:54:0f:37:f1:4d:57:e4:c3:c3:e6:7d:
ee:6c:98:ba:f2:0f:ca:49:48:b9:32:07:4c:1b:98:
e3:7b:37:90:d3:bf:cf:eb:de:0d:06:9c:d3:88:78:
54:bf:e5:ec:2e:c5:09:5e:f3:ae:e9:d5:c0:57:5b:
61:7b:86:1d:1f:04:67:cd:0b:cd:8a:c8:b5:a0:ee:
34:3f:e6:03:dc:73:c7:f2:6d:c6:ef:8d:5b:68:00:
36:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BC:95:96:E5:2E:C6:F8:38:DD:E1:F5:3F:7A:9C:59:A5:72:00:E9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L7yVluUuxvg43eH1P3qcWaVyAOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1580::/48
Signature Algorithm: sha256WithRSAEncryption
54:62:2d:96:fe:11:80:8e:6b:b7:9f:c2:18:39:9e:c5:6d:10:
70:35:0b:b2:99:97:8a:ce:c4:e2:5d:46:48:b9:ed:72:59:1d:
87:2f:5d:38:5b:a9:c7:83:f7:d5:64:bd:97:43:6b:8b:b2:29:
ac:50:bc:3e:80:c0:e1:77:4b:f9:10:ac:7b:bd:60:07:df:cf:
80:7e:5f:36:6b:7d:37:11:e6:89:db:cf:a1:30:11:51:81:b5:
1c:9f:ba:2c:bc:26:88:f1:ba:10:fc:3d:8c:36:b3:d3:9e:e8:
0f:29:bd:f8:76:a1:23:74:8b:4a:aa:91:64:49:52:7d:e6:19:
48:74:cc:a6:f2:e4:e7:16:2e:eb:f8:d7:1a:f9:b6:93:9b:f9:
6f:d0:39:fe:07:98:38:4f:04:73:7e:01:6f:cf:9c:5c:77:bd:
34:50:f9:16:37:37:7c:a5:f3:fb:c7:ed:1c:ce:e9:bf:3f:90:
dd:fe:72:52:71:05:2c:5e:b7:5c:0d:84:d1:be:00:25:7e:81:
db:a8:2f:48:39:58:15:ce:5d:e3:cd:a1:31:1c:2b:fa:73:ba:
78:bc:5f:df:33:2d:83:8e:7b:56:83:96:c7:c1:d6:9f:a5:94:
4e:51:8f:63:6f:77:ad:d5:9c:c8:f6:7c:da:e9:75:cd:0d:8d:
90:ad:97:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:39:04 2024 by rpki-client on console-fra.rpki-client.org