Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MY5T3wWXb0DpUs1l9sruf56rbBw.roa
File: MY5T3wWXb0DpUs1l9sruf56rbBw.roa (raw, json)
Hash identifier: OXfZn/xx+sE9cPChrsR3OpsMocKD+axuU6LeJMd6/Xw=
Subject key identifier: 31:8E:53:DF:05:97:6F:40:E9:52:CD:65:F6:CA:EE:7F:9E:AB:6C:1C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0190464BDCC0E8F2607C357AF2BF0B9AB8D2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MY5T3wWXb0DpUs1l9sruf56rbBw.roa
Signing time: Sun 23 Jun 2024 18:11:35 +0000
ROA not before: Sun 23 Jun 2024 18:11:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213215
IP address blocks: 2a0e:b107:6e3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:46:4b:dc:c0:e8:f2:60:7c:35:7a:f2:bf:0b:9a:b8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 23 18:11:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=318e53df05976f40e952cd65f6caee7f9eab6c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:81:e0:02:3c:cd:11:18:10:6c:95:5f:50:
54:5c:90:a7:2d:9b:26:8d:51:e8:fb:e9:ec:0b:7c:
92:50:82:a1:8d:61:ba:97:95:a8:52:1d:59:28:d2:
f2:83:02:fb:c2:1e:d8:48:34:6a:f6:d4:2f:36:0c:
1c:17:f8:22:39:e4:9e:c6:76:84:23:3a:e6:95:55:
0a:f5:22:84:35:ea:68:18:e9:22:07:34:45:da:74:
83:fd:65:dd:16:5d:dc:a7:e5:e5:43:56:8e:92:6c:
67:bd:47:0e:0a:f1:00:e3:a4:e8:0c:95:6a:f1:25:
a5:82:8e:8f:46:d3:34:96:63:bc:43:2f:ff:cb:f6:
b3:9c:1f:eb:0e:82:0c:4e:77:de:9e:3e:5d:d9:b8:
22:b8:1c:c9:c3:25:9e:72:f2:61:ad:12:b7:58:76:
9a:d6:69:f5:f8:bd:0c:51:09:d9:c5:ee:60:7d:f5:
54:cb:e1:51:88:5b:00:7c:9b:3f:24:56:52:68:ec:
df:b1:84:a0:1d:5c:1e:d0:37:48:d0:7d:25:6f:2c:
a2:e2:4e:2e:3f:7c:3b:c3:cb:61:1d:c1:0c:8c:8d:
a0:51:3a:ce:47:a1:5d:71:cd:fb:f4:f0:84:06:89:
4a:2a:44:fb:71:2e:07:35:d5:8e:34:5b:97:f0:67:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8E:53:DF:05:97:6F:40:E9:52:CD:65:F6:CA:EE:7F:9E:AB:6C:1C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MY5T3wWXb0DpUs1l9sruf56rbBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:6e3::/48
Signature Algorithm: sha256WithRSAEncryption
0e:a1:7d:2b:c1:b5:5b:08:69:97:81:2f:11:dc:a0:db:ac:86:
d0:99:d8:be:ed:f1:90:18:a8:7c:cd:47:be:74:86:3e:4f:33:
5b:29:92:05:09:5c:ac:82:68:cb:eb:68:e7:fa:c0:0b:29:db:
e6:16:ba:a1:47:e9:6a:06:0d:99:c9:28:47:88:47:85:ab:36:
a0:a3:29:32:3d:73:68:04:f4:49:cc:64:09:81:9c:04:bd:84:
c8:4a:7c:64:83:99:a4:9e:61:d4:40:44:84:e6:90:e4:30:e7:
e9:ce:7b:6d:57:96:5b:e2:47:34:a0:67:1e:92:ff:02:a3:a8:
a3:e7:61:0d:d8:75:9a:fa:95:18:64:19:9f:a7:4b:a0:28:5f:
1a:32:63:dd:ae:16:12:b9:69:34:6f:2c:fc:0f:21:aa:98:9f:
d2:91:a4:e8:04:a7:81:d1:2f:ca:ed:77:65:dc:7a:3f:67:23:
8f:5d:32:9c:95:8d:bb:3f:0c:92:09:20:95:3b:cf:f9:05:ab:
e9:67:f6:bd:8f:58:6d:b1:a8:d5:fc:48:45:2c:ba:b3:bc:09:
2e:e6:55:c2:5a:01:c8:a4:c3:5d:e6:18:be:71:9c:44:eb:4d:
c3:a6:30:05:d5:2f:cc:88:de:f2:30:73:1c:f6:53:bb:44:3f:
7c:5b:eb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:55 2024 by rpki-client on console-ams.rpki-client.org