Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OWy1T8yBDE3FbH1P4kKlY6UZNl8.roa
File: OWy1T8yBDE3FbH1P4kKlY6UZNl8.roa (raw, json)
Hash identifier: vQBgfW9gfBzII1vhTCH8Mf9oQL2it8BoMk5yScrLWyE=
Subject key identifier: 39:6C:B5:4F:CC:81:0C:4D:C5:6C:7D:4F:E2:42:A5:63:A5:19:36:5F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019069DC895988DE468B794FB32498FB7478
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OWy1T8yBDE3FbH1P4kKlY6UZNl8.roa
Signing time: Sun 30 Jun 2024 15:56:19 +0000
ROA not before: Sun 30 Jun 2024 15:56:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216112
IP address blocks: 2a0e:97c0:de0::/44 maxlen: 48
2a0e:97c0:de1::/48 maxlen: 48
2a0e:97c0:de2::/48 maxlen: 48
2a0e:97c0:de3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:69:dc:89:59:88:de:46:8b:79:4f:b3:24:98:fb:74:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 30 15:56:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=396cb54fcc810c4dc56c7d4fe242a563a519365f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:1a:fb:67:5b:c6:c2:e0:b2:02:ba:7e:59:
bd:f2:3a:c8:3a:6f:6f:11:2e:bf:cf:9c:74:07:19:
33:80:c3:cf:43:5e:92:98:2c:d6:ce:50:cd:11:c4:
f8:7f:e2:2c:92:86:95:f4:fc:89:92:90:b2:9a:2f:
fc:3b:e0:3b:4c:5f:0d:07:db:0e:fb:46:58:c9:95:
02:87:39:97:98:e9:41:6f:e8:aa:80:53:e5:60:05:
b3:00:a7:3d:7c:80:29:db:13:b7:96:7a:08:8e:99:
47:3b:16:08:08:c2:07:01:70:7f:52:29:44:9d:0f:
65:d6:b0:b1:de:c1:42:cd:20:11:a4:73:e5:2f:d4:
23:7e:98:fe:6f:cf:c2:9d:63:b7:2e:b0:9d:a0:3f:
77:a5:3a:33:49:21:6c:aa:10:b2:b4:50:fa:db:ff:
b1:1e:a8:f8:65:d9:c6:9e:b3:0a:d1:47:c1:e3:b2:
16:3f:41:ac:05:02:99:45:c7:28:d9:d6:28:40:ed:
b5:11:e4:67:71:3d:17:c6:7f:e5:17:8a:f8:57:0b:
56:9d:14:a7:67:e7:eb:64:8b:79:10:31:a2:cc:18:
ef:61:44:8a:fb:e9:e0:23:c1:7a:f4:6e:da:29:25:
fa:0b:bb:db:eb:dd:85:38:ef:33:39:f6:db:f8:70:
03:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6C:B5:4F:CC:81:0C:4D:C5:6C:7D:4F:E2:42:A5:63:A5:19:36:5F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OWy1T8yBDE3FbH1P4kKlY6UZNl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:de0::/44
Signature Algorithm: sha256WithRSAEncryption
26:cc:6f:ab:d7:3b:ea:9f:e6:59:95:6f:62:2d:94:d0:0b:48:
90:a7:6c:3c:4b:26:e1:1d:5d:ed:f5:f3:30:7c:33:f7:86:d4:
16:05:fa:2b:3a:6b:e7:9c:7a:f8:55:dc:23:a9:a7:ce:2d:8a:
4b:ec:67:94:8d:42:79:45:89:95:b8:28:5e:6d:94:79:62:8a:
4c:5c:f5:6b:bb:3d:fe:20:35:e0:14:b0:6f:c2:b5:31:15:61:
b8:ef:73:a7:3b:2d:58:67:ed:22:ab:af:f8:c7:8d:41:48:4c:
11:d5:e1:f0:91:53:20:90:30:c1:88:06:00:de:11:b8:93:12:
f9:e0:39:eb:6a:15:e3:22:1f:56:f4:da:d7:46:ce:2c:ff:06:
9e:8c:3e:d1:bc:ab:a1:93:d1:29:50:87:0d:c3:f8:7f:8b:9a:
49:1d:f0:7b:04:ab:b1:df:20:e2:be:36:4d:b6:1c:86:d5:e5:
9a:d7:c1:d7:7b:40:c3:33:ed:f6:0e:e8:f3:04:51:d5:60:69:
24:e5:c2:4d:12:3b:fd:44:76:51:6f:be:38:cb:fa:fa:1b:c0:
62:8b:06:9a:e5:dd:67:54:b4:4a:22:ac:92:a4:fe:90:6a:d7:
f9:26:4b:c8:93:ca:1a:90:3e:2e:d5:26:8d:59:5b:d1:46:74:
4b:fa:1d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:30 2024 by rpki-client on console-fra.rpki-client.org