Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/No1sXDyBhE_LMhbMCUP9HrRgudk.roa
File: No1sXDyBhE_LMhbMCUP9HrRgudk.roa (raw, json)
Hash identifier: VdT3YSANQVEBnv3VAF6laKitnb54NTjq9NTGhJunKiU=
Subject key identifier: 36:8D:6C:5C:3C:81:84:4F:CB:32:16:CC:09:43:FD:1E:B4:60:B9:D9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CF3540E82D5480C56259F2E3CCC6CF7BC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/No1sXDyBhE_LMhbMCUP9HrRgudk.roa
Signing time: Wed 10 Jan 2024 12:23:41 +0000
ROA not before: Wed 10 Jan 2024 12:23:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207564
IP address blocks: 2a0e:b107:ed0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:54:0e:82:d5:48:0c:56:25:9f:2e:3c:cc:6c:f7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 10 12:23:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=368d6c5c3c81844fcb3216cc0943fd1eb460b9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d3:2b:08:46:0f:07:53:0e:7c:53:d8:79:e1:
3c:d7:a5:0f:cb:23:fd:ca:b0:6a:d5:7e:5c:ab:14:
bc:07:67:d5:33:46:f4:7f:18:38:d0:fd:06:7f:9e:
4b:d2:34:49:02:f1:37:5b:72:39:87:a5:3e:dd:5f:
0a:14:8b:bd:fc:4b:93:47:b5:11:12:86:50:a1:8f:
e3:0e:a6:91:80:bd:ea:a8:00:0d:44:a2:cf:7a:ef:
a3:b6:f2:e6:0c:9e:ce:c5:0c:44:61:63:9d:02:5c:
98:bf:a5:83:1d:9d:88:8b:ba:ed:31:65:10:d3:83:
11:c9:b6:20:47:a5:74:53:51:b5:5e:65:eb:be:66:
8c:60:b0:21:ad:76:a6:14:00:0d:c7:84:0b:2d:49:
24:a4:eb:d8:1d:7b:41:8a:36:82:1d:1d:64:29:17:
43:5e:cc:c4:16:64:c2:57:d8:f8:aa:2f:34:40:39:
62:29:3c:61:24:a1:36:c3:68:23:a6:22:33:e3:ba:
85:d5:ce:0e:20:4f:65:04:70:f3:b7:96:0d:a7:da:
4e:ae:1d:13:ef:f0:fe:d7:b9:a0:19:bd:b6:51:27:
77:e3:9e:1f:f1:85:43:75:ba:42:6f:83:73:88:ba:
94:b1:d9:25:91:41:8a:6f:ec:f7:81:3f:79:a0:4b:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8D:6C:5C:3C:81:84:4F:CB:32:16:CC:09:43:FD:1E:B4:60:B9:D9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/No1sXDyBhE_LMhbMCUP9HrRgudk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:ed0::/44
Signature Algorithm: sha256WithRSAEncryption
18:59:d9:94:97:da:db:73:4a:7e:fa:c1:d6:61:18:f3:3b:03:
ee:78:6d:07:cf:b4:b4:c5:c8:f1:d9:13:f1:dc:77:75:15:3f:
e0:fa:05:aa:4b:76:ec:36:2b:bc:0e:d4:f1:7d:9a:4e:41:95:
3d:7c:d0:2f:0b:16:e1:2e:a3:a5:11:9c:1e:45:1f:8e:88:94:
8c:85:c7:e3:a0:6d:1f:9e:a2:e8:0a:60:c6:47:a4:33:ca:69:
a8:d9:53:11:ff:03:17:8a:b9:4b:c0:4a:42:ee:fc:a6:64:f2:
11:46:59:4a:da:8f:dd:79:9e:33:ec:95:24:a6:33:03:86:ce:
3e:28:d6:d6:3b:55:3d:0b:89:0f:ea:96:e6:be:64:cb:c7:a6:
43:4a:50:1e:ca:3b:b5:7a:43:80:e8:ad:f1:55:a6:15:8f:90:
e0:a1:13:a1:d3:32:78:e0:6f:17:18:7a:b2:89:24:31:94:af:
6c:8e:2f:d0:59:e3:27:51:ca:f7:15:01:23:92:b4:76:08:79:
87:f1:98:ac:7a:45:fc:2f:bb:f0:ca:9f:9f:69:9c:5c:d7:66:
46:83:1b:e3:6f:16:ed:fb:d3:11:e9:6d:5a:0f:5d:c2:59:f2:
7a:c9:a0:19:b4:0d:50:47:78:0b:6f:66:e8:ad:3d:11:c6:fd:
f1:c3:d3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:05 2024 by rpki-client on console-fra.rpki-client.org