Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MELYlnc1lU1ef_Z2Rh-QZeXKTDs.roa
File: MELYlnc1lU1ef_Z2Rh-QZeXKTDs.roa (raw, json)
Hash identifier: t55cW4OoLkYIJN/jtBF+aP7NSnumop/DnxjwVCq6Xtg=
Subject key identifier: 30:42:D8:96:77:35:95:4D:5E:7F:F6:76:46:1F:90:65:E5:CA:4C:3B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018EBD9553F4AA591997DF813A0584E52131
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MELYlnc1lU1ef_Z2Rh-QZeXKTDs.roa
Signing time: Mon 08 Apr 2024 12:01:03 +0000
ROA not before: Mon 08 Apr 2024 12:01:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215191
IP address blocks: 2a0e:b107:28b8::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:95:53:f4:aa:59:19:97:df:81:3a:05:84:e5:21:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 8 12:01:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3042d8967735954d5e7ff676461f9065e5ca4c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:45:f1:e4:9a:fb:94:89:ee:76:8e:9f:d6:d3:
ac:93:1c:c9:00:68:7b:da:f2:63:94:42:a2:be:b6:
50:dd:59:72:ef:8d:b0:5b:a0:23:45:0d:0b:21:f8:
35:6a:ab:37:f1:fa:b9:b6:2b:fa:55:99:c2:cb:f3:
0a:7b:d5:29:be:9f:99:67:5e:32:3c:39:96:8e:c2:
56:37:47:46:30:50:c9:a3:48:09:ac:20:00:f1:40:
44:45:7d:a0:e4:7f:2c:c5:b2:bb:2d:9c:a9:1a:b1:
19:31:32:3f:95:a3:37:05:e9:25:79:eb:84:65:57:
23:07:38:a8:b6:13:09:ae:91:50:54:02:be:77:b3:
84:5e:d5:65:33:9e:f9:56:7d:d5:ce:42:6c:71:78:
6f:7c:4d:94:48:aa:18:85:27:e6:da:48:dc:fb:bf:
4c:35:b7:57:5b:60:87:6a:de:9b:a0:24:4a:2f:e7:
2e:44:a1:64:d8:f4:6f:73:da:15:45:91:06:d5:f9:
7d:0a:d8:10:13:d4:6e:37:23:c8:d8:92:a1:b2:dd:
e2:5f:fc:69:25:c0:d1:9a:98:2a:63:a4:98:f7:64:
7f:3f:3e:1b:97:ea:13:75:af:a7:92:1a:3e:81:04:
e5:33:be:f0:dd:dc:88:29:d0:c3:11:d5:82:b5:59:
65:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:42:D8:96:77:35:95:4D:5E:7F:F6:76:46:1F:90:65:E5:CA:4C:3B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MELYlnc1lU1ef_Z2Rh-QZeXKTDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:28b8::/45
Signature Algorithm: sha256WithRSAEncryption
b6:45:af:3a:29:ef:eb:1e:ff:bf:e3:d9:00:82:2a:e3:63:af:
06:48:60:61:24:e8:78:5b:32:ae:a4:23:01:78:ed:8d:60:8a:
9c:50:0e:69:9b:d4:b7:e6:ee:cc:8c:17:b8:89:f5:e7:4f:f1:
9c:33:53:96:66:94:0e:53:7c:c3:09:a2:91:61:62:22:8b:87:
ae:7e:73:54:9b:e2:24:6e:68:ae:f2:62:bb:99:5c:6f:6d:18:
97:4d:92:93:27:86:9e:f7:5e:e4:41:7a:eb:78:50:db:17:a7:
be:ad:a3:82:30:e6:ca:15:de:c3:54:67:9f:d9:54:d3:ed:02:
9e:66:43:2e:da:ca:76:45:86:41:aa:6d:0b:8f:86:49:de:36:
fd:40:18:80:e5:bf:bd:11:7f:7d:3f:85:d0:73:fb:7b:a7:f5:
4c:b9:93:0a:19:ce:07:0d:35:75:99:63:c9:0e:2c:27:9f:aa:
07:5f:29:fb:2a:4e:1a:93:16:02:9b:c7:24:5f:63:54:a7:4b:
6b:b4:da:4a:cc:30:ba:75:9c:6a:90:5f:74:1d:91:8f:e5:c9:
be:f9:7e:77:da:35:dc:a6:1d:49:f7:e2:2e:52:10:c5:e1:b1:
aa:79:fb:28:82:a2:c1:52:83:e5:d1:d3:98:dc:99:40:54:a6:
6d:42:fa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:39:04 2024 by rpki-client on console-fra.rpki-client.org