Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N-d5XbtsbyjhHuVP6BWu2Hqc4I0.roa
File: N-d5XbtsbyjhHuVP6BWu2Hqc4I0.roa (raw, json)
Hash identifier: y7h1ZVOEmq1RnpFdJKRU3SZWbMlmEEeRIc/5AuIJWrA=
Subject key identifier: 37:E7:79:5D:BB:6C:6F:28:E1:1E:E5:4F:E8:15:AE:D8:7A:9C:E0:8D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018EB664F9F4212DF1CC75A12DF692EA455A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N-d5XbtsbyjhHuVP6BWu2Hqc4I0.roa
Signing time: Sun 07 Apr 2024 02:30:54 +0000
ROA not before: Sun 07 Apr 2024 02:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215569
IP address blocks: 2a0e:b107:28a6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b6:64:f9:f4:21:2d:f1:cc:75:a1:2d:f6:92:ea:45:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 7 02:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37e7795dbb6c6f28e11ee54fe815aed87a9ce08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:25:f6:96:f0:17:1e:ae:44:8c:5d:28:2a:38:
ad:fa:a8:b5:6e:46:ca:49:12:73:9e:f4:d1:86:6e:
5f:0c:95:e3:7c:f9:a6:9d:ca:20:4d:20:36:bf:51:
61:4a:5c:9d:a9:6a:c4:b8:a5:96:f1:b2:40:4c:f2:
79:a3:d4:40:68:bd:56:4a:4d:27:5c:db:01:a2:b6:
16:ce:08:25:d3:ae:77:d7:b3:81:13:98:8e:df:bf:
a6:99:f6:f2:6e:01:e5:83:f8:81:b0:5e:02:b0:40:
b0:36:8e:7a:53:db:f6:45:4e:3b:06:5a:10:c5:3c:
04:88:b6:a2:32:6d:04:37:e0:ff:a6:7d:f1:ef:d1:
23:8b:f5:20:a8:5d:b4:c2:b6:6a:2f:77:1b:dd:66:
48:da:50:57:c5:1c:78:70:37:ad:68:1e:c7:c4:50:
98:35:5f:e3:92:6c:1a:1d:d4:b5:69:a2:89:49:3b:
11:61:cf:9a:01:65:1e:45:ec:0f:4e:58:0d:31:a4:
48:ab:bc:82:db:68:ce:82:1f:34:38:0b:1f:d2:ad:
4e:17:8a:a1:49:09:73:80:77:68:fc:c7:be:80:55:
11:46:fc:f4:e8:86:c5:db:fa:d3:83:a9:9d:c2:1c:
2a:42:ca:f9:07:28:e4:2d:4f:f9:07:67:3f:8d:04:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E7:79:5D:BB:6C:6F:28:E1:1E:E5:4F:E8:15:AE:D8:7A:9C:E0:8D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N-d5XbtsbyjhHuVP6BWu2Hqc4I0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:28a6::/48
Signature Algorithm: sha256WithRSAEncryption
3e:72:05:6e:45:45:ac:38:b8:92:a8:5f:bf:81:54:0e:21:93:
69:3b:72:a9:7a:ce:ee:1d:3e:f9:85:9e:1b:73:70:4e:8d:85:
d3:07:e3:a4:ca:ea:84:e3:ae:ec:1c:57:b1:1c:b5:11:03:a0:
ce:be:fa:a5:ad:ad:a4:be:d1:8b:c4:7c:03:de:e7:86:9d:4e:
94:19:ab:18:d4:cd:8a:0a:73:a9:51:39:4d:43:68:4e:63:28:
30:72:f0:cd:99:dc:d4:fb:57:15:23:60:4e:dd:12:d9:1a:09:
91:bd:8f:04:1b:f1:d4:29:32:12:cc:82:54:c9:54:8e:b5:f1:
ad:0d:7f:75:45:9e:da:9c:fd:32:c4:d6:19:94:28:00:77:9e:
97:a3:83:7a:d7:aa:6f:dc:52:73:7c:d1:84:83:e7:65:ea:94:
ae:9e:66:e9:ef:f7:bb:69:37:4f:a1:47:13:64:45:c0:73:6b:
6d:4f:42:a7:93:e9:2a:4a:ab:e9:be:9d:66:bc:8c:19:95:ec:
7c:47:0f:47:a0:cd:5e:5b:44:c3:1e:7f:e1:12:41:d3:b3:37:
99:19:3c:86:ec:f8:a9:a8:b8:9b:2e:86:4f:0e:1b:52:21:9a:
d9:6c:1e:17:90:4f:96:7a:e0:a5:4b:72:52:d5:bf:cf:0e:e9:
7a:ec:36:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:33:16 2024 by rpki-client on console-ams.rpki-client.org