Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Oc3_0JZO9T3Ry0GyNikyTXWAZGs.roa
File: Oc3_0JZO9T3Ry0GyNikyTXWAZGs.roa (raw, json)
Hash identifier: LRMntW02mNsmGU5s8oAFPiudD8VckW6MDLcaqKmlvHI=
Subject key identifier: 39:CD:FF:D0:96:4E:F5:3D:D1:CB:41:B2:36:29:32:4D:75:80:64:6B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D7FFB5BF768B707EB3C5960D177042FCD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Oc3_0JZO9T3Ry0GyNikyTXWAZGs.roa
Signing time: Tue 06 Feb 2024 19:53:15 +0000
ROA not before: Tue 06 Feb 2024 19:53:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202941
IP address blocks: 2a0e:b107:1e10::/48 maxlen: 48
2a10:2f00:187::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:fb:5b:f7:68:b7:07:eb:3c:59:60:d1:77:04:2f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 6 19:53:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39cdffd0964ef53dd1cb41b23629324d7580646b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:c3:d2:76:13:97:68:48:f3:90:d4:e7:cf:
55:a1:64:c0:7d:2f:d5:06:05:70:61:c1:20:fa:a6:
d2:0b:32:7c:ee:56:2b:82:ed:2a:77:e4:22:40:15:
50:9a:61:a8:da:e5:a3:8c:9b:c3:b4:7c:b6:da:f0:
27:e3:fa:66:54:4e:90:eb:9f:7f:e1:e4:18:51:60:
b0:73:68:4a:8d:7b:3b:01:a3:46:32:ce:2e:9b:ba:
c2:1d:d8:58:c4:d4:c1:a6:32:f2:18:98:f9:5b:f3:
91:06:69:ee:56:09:ef:7d:7c:5c:a6:14:ae:64:c0:
67:57:67:ab:20:b7:bc:74:de:ff:90:76:21:10:b4:
7d:0b:77:5a:2e:d4:03:5f:23:b9:b5:ad:cb:78:16:
71:8e:9a:99:9f:1d:96:99:12:fd:fc:78:34:d1:43:
d8:07:56:8e:dc:b9:c7:97:a1:2c:0d:ed:19:ee:96:
8d:a9:2f:0b:28:a6:b1:45:de:fb:38:1a:40:c4:70:
7a:91:a2:94:eb:7a:fe:48:3d:b3:87:f1:53:40:c8:
01:48:45:74:34:3c:c0:2f:22:da:48:09:ee:70:08:
cc:d2:f2:ed:1d:cb:ff:b7:69:37:d4:ca:05:a8:8a:
8a:87:2e:4d:15:00:1e:92:f4:64:9d:0f:c5:88:77:
99:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CD:FF:D0:96:4E:F5:3D:D1:CB:41:B2:36:29:32:4D:75:80:64:6B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Oc3_0JZO9T3Ry0GyNikyTXWAZGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1e10::/48
2a10:2f00:187::/48
Signature Algorithm: sha256WithRSAEncryption
ae:67:ba:8d:ee:e7:70:ee:74:56:96:8c:e5:b6:99:0f:90:da:
89:6c:e0:6f:ca:a5:e2:4c:98:66:54:d6:18:10:1b:85:ee:26:
37:05:0c:47:f2:9a:28:f9:d5:03:89:58:13:68:67:b2:f6:29:
c3:64:14:e1:52:55:47:58:f3:09:f1:14:ed:f1:64:50:13:23:
e6:78:d6:ec:8c:86:d8:c0:af:43:f6:ff:fe:91:f3:c6:c7:2f:
49:69:57:a4:e2:6d:ae:1c:4d:3a:50:a9:93:09:75:38:ed:26:
5f:0b:7b:ed:90:59:e8:e1:50:33:11:cb:40:ae:d0:8f:be:86:
8f:a1:c8:59:2a:b2:a4:19:43:03:f6:cf:7d:01:68:49:7e:d6:
2b:43:c5:09:4c:ec:f1:17:15:0a:14:91:b9:7b:ca:1c:a2:9e:
bf:84:14:53:43:fe:0f:76:f8:18:26:d3:06:b9:12:6a:a9:07:
92:e0:9a:77:90:d8:15:f3:80:37:b7:99:7e:b6:f9:13:7c:57:
5f:9b:77:09:16:d6:f2:85:1e:a8:f7:26:50:a7:48:a2:2f:37:
5b:01:99:ef:76:4c:b9:70:c6:47:ca:27:cf:b8:43:39:9c:fe:
26:bb:d9:37:cc:b0:c8:82:cf:21:6a:19:1d:3d:11:c9:61:36:
12:b8:92:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:33 2024 by rpki-client on console-fra.rpki-client.org