Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Miv0Gz-H9QVFyq5GOuVxJbhy4f8.roa
File: Miv0Gz-H9QVFyq5GOuVxJbhy4f8.roa (raw, json)
Hash identifier: Co9DbQwny8YYCSyby3MUsc4i6hmNs2imh4SLn/MwBBg=
Subject key identifier: 32:2B:F4:1B:3F:87:F5:05:45:CA:AE:46:3A:E5:71:25:B8:72:E1:FF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD488E63624E34FF621390DC59DC01
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Miv0Gz-H9QVFyq5GOuVxJbhy4f8.roa
Signing time: Tue 02 Jan 2024 10:34:34 +0000
ROA not before: Tue 02 Jan 2024 10:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212858
IP address blocks: 2a0e:b107:88b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:48:8e:63:62:4e:34:ff:62:13:90:dc:59:dc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=322bf41b3f87f50545caae463ae57125b872e1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:b2:41:18:19:4f:d6:53:5e:f7:95:25:2b:
21:9d:9c:a1:26:8e:12:5c:04:08:52:1a:19:9a:2f:
37:8c:19:92:fe:a5:18:23:6a:59:e1:81:65:cd:d2:
59:46:a4:fb:c3:6f:54:f7:e0:fb:fa:16:e5:e3:d0:
fe:1e:5f:fe:21:b8:85:ba:1e:35:2e:93:98:97:8b:
40:e1:6c:bb:7c:e4:17:91:69:34:1a:b0:84:fc:71:
a4:4a:af:65:e9:bf:d2:b9:90:40:f5:0f:f7:00:57:
09:97:82:e6:2e:a6:d9:cd:f7:8e:d6:65:34:f5:6c:
48:10:48:c1:e1:ee:d8:8e:db:23:00:b9:6c:83:27:
3b:c5:64:93:2d:55:30:ab:19:fa:03:97:4d:58:9e:
ce:cd:02:f3:d4:b0:9a:95:2d:e2:b6:74:cd:cc:0a:
94:98:67:62:65:60:c1:44:a0:1f:85:66:eb:6c:5c:
bd:28:5c:90:c8:3f:c9:14:bd:74:d5:99:87:6d:ae:
5e:a8:f6:85:f9:fd:2d:24:2e:06:58:b8:65:df:67:
c0:e0:d2:62:ab:ae:f0:1d:ed:db:58:9e:2d:d9:f3:
9b:1b:0f:a0:a0:1e:cf:09:87:60:79:63:4c:32:3e:
a2:36:ed:4d:0a:e9:38:18:76:de:91:b5:4a:93:10:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2B:F4:1B:3F:87:F5:05:45:CA:AE:46:3A:E5:71:25:B8:72:E1:FF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Miv0Gz-H9QVFyq5GOuVxJbhy4f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:88b::/48
Signature Algorithm: sha256WithRSAEncryption
ab:1c:5d:91:23:86:d0:e7:1e:70:b9:17:80:6b:35:1c:30:be:
a9:ac:ed:cf:01:12:21:e5:52:41:9b:41:95:db:55:01:f3:9e:
a7:e5:8d:12:2f:e4:b6:a5:d5:06:48:cb:7b:4f:38:23:1c:b4:
de:21:dc:af:51:f5:1c:6c:29:58:ed:80:52:c8:1e:39:68:29:
d8:8c:9c:35:39:1a:c3:27:01:37:b1:4a:32:b9:94:64:be:75:
42:f8:b6:3b:d5:bf:31:5a:d0:42:95:e7:16:fb:4f:bf:78:ab:
ea:d9:36:7b:22:49:d7:34:43:e3:63:08:3b:e3:c7:be:cc:44:
fd:f2:a2:d2:e1:d1:ce:0f:fd:09:83:1a:09:c0:95:0b:da:fe:
19:cb:d8:24:e3:d5:53:08:b2:9b:b4:78:c3:12:54:ee:59:d3:
3a:2b:4c:27:29:72:dc:65:38:65:f4:c2:90:fa:b0:8d:4e:ce:
87:ab:af:89:eb:a9:8a:d2:6a:40:30:80:4a:31:47:04:e2:21:
cb:78:c8:95:3f:04:34:53:0c:b2:eb:cd:f4:eb:88:01:41:65:
58:ba:51:39:ce:75:d4:d7:42:b9:f8:ca:36:87:7b:dd:8f:39:
6a:a2:e7:04:47:a7:84:6b:0e:47:91:e7:7e:79:e6:83:27:f4:
6d:45:c2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:56 2024 by rpki-client on console-ams.rpki-client.org