Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OFb8sTIiNak4Sbv0flaGplFTkbM.roa
File: OFb8sTIiNak4Sbv0flaGplFTkbM.roa (raw, json)
Hash identifier: ADYnO7kbUoSYblC+qlj5RklzwJltNw3s7QqFipJUWew=
Subject key identifier: 38:56:FC:B1:32:22:35:A9:38:49:BB:F4:7E:56:86:A6:51:53:91:B3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0193A530F74AD385A7ED5D0FB4513FAC9CF5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OFb8sTIiNak4Sbv0flaGplFTkbM.roa
Signing time: Sun 08 Dec 2024 07:34:29 +0000
ROA not before: Sun 08 Dec 2024 07:34:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210537
IP address blocks: 2a0e:b107:17c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a5:30:f7:4a:d3:85:a7:ed:5d:0f:b4:51:3f:ac:9c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 8 07:34:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3856fcb1322235a93849bbf47e5686a6515391b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:d3:d3:4d:98:1c:91:3e:ae:e9:86:83:61:
fe:52:5f:49:54:ad:8f:57:ec:4c:34:ab:58:7f:d0:
0c:b0:52:4f:e2:31:6c:32:49:ee:0f:c0:d4:ec:85:
fc:29:12:23:22:4c:31:ad:d2:35:0e:a3:35:91:6c:
ad:b7:95:e7:b9:cc:29:d2:07:f3:cf:3a:9d:02:21:
82:11:a1:6d:c7:71:5f:5c:1a:68:51:d5:44:d2:ab:
0e:33:72:1c:ed:de:36:93:3d:e0:72:3c:5a:c7:36:
7e:79:79:b7:bc:65:bc:2b:00:ed:72:04:4f:33:af:
cd:8b:13:01:28:67:9b:28:d5:22:52:9d:44:1f:37:
01:c6:78:05:7a:6c:ad:42:6c:07:41:61:e2:bf:db:
f0:4a:74:b9:65:30:30:f9:bf:eb:b4:78:d1:d2:f8:
33:c7:8b:19:b7:27:1f:46:b2:fd:c2:b5:33:4a:6a:
56:21:77:7d:92:5b:72:3a:c5:8f:d8:1c:3b:6f:c3:
56:d1:e9:51:a8:06:02:91:14:70:97:bc:74:3b:55:
07:b2:79:c5:b6:08:a9:78:77:5c:eb:c2:be:74:c8:
b4:eb:66:a5:44:fe:8b:e1:cb:ed:de:e4:3d:e1:1a:
7f:3b:b5:9b:5a:a9:89:f9:33:a0:b9:9c:45:0f:08:
a3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:56:FC:B1:32:22:35:A9:38:49:BB:F4:7E:56:86:A6:51:53:91:B3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OFb8sTIiNak4Sbv0flaGplFTkbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:17c0::/44
Signature Algorithm: sha256WithRSAEncryption
3f:af:bd:a2:84:f2:8f:5a:01:2b:0e:4a:03:97:ef:1b:fa:2c:
8c:60:29:41:10:3c:91:b4:0a:8e:03:44:9b:58:1c:c5:00:e2:
9f:6f:d7:85:f9:69:6e:3f:66:6c:90:e1:6e:ad:77:30:af:3f:
f0:f4:29:87:e6:07:59:df:65:ec:38:48:66:13:19:0c:76:d2:
f4:05:f2:3a:a1:ad:04:50:b6:1d:dd:24:b2:b2:92:a1:8b:16:
77:72:1f:a1:67:95:09:b8:e8:0f:37:f1:c1:58:01:06:6f:4f:
46:94:6f:45:2a:b7:1d:04:e9:b7:e9:c0:29:d2:27:28:23:b4:
5e:8b:4b:78:1f:01:2f:d9:e3:ef:9b:e4:7b:2c:aa:23:fb:ec:
e3:b2:8a:31:6a:87:12:b5:6a:45:61:bf:2c:1f:35:f0:57:e3:
11:34:e2:e5:a6:dc:b8:ae:78:eb:51:bd:59:d2:8e:d7:55:0c:
e7:c9:c7:6d:ec:34:d6:64:5e:62:fc:69:36:fa:8d:99:2e:c2:
f7:fd:e9:fb:fb:43:eb:20:ed:57:de:db:94:51:84:b6:3e:de:
98:cf:3d:78:13:08:c8:f1:f5:cf:91:e5:dc:8c:65:f6:7d:0e:
8d:c5:97:3d:41:0c:89:e9:81:bb:59:d6:13:08:9c:a0:71:1f:
11:6b:68:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 21:47:07 2024 by rpki-client on console-ams.rpki-client.org