Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/T-m3fb9eRFCpHmJHsdnNzyR9ppc.roa
File: T-m3fb9eRFCpHmJHsdnNzyR9ppc.roa (raw, json)
Hash identifier: IwNejFHW+I4u3UZ1EZxSxlu4VOHGlSXOlbJWZZJYeDs=
Subject key identifier: 4F:E9:B7:7D:BF:5E:44:50:A9:1E:62:47:B1:D9:CD:CF:24:7D:A6:97
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01911932CE208B1D6BE10A9183143A9EE3E9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/T-m3fb9eRFCpHmJHsdnNzyR9ppc.roa
Signing time: Sat 03 Aug 2024 17:04:05 +0000
ROA not before: Sat 03 Aug 2024 17:04:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203345
IP address blocks: 2a0e:b107:1a10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:19:32:ce:20:8b:1d:6b:e1:0a:91:83:14:3a:9e:e3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 3 17:04:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fe9b77dbf5e4450a91e6247b1d9cdcf247da697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:d2:da:68:ca:58:47:41:7c:2a:09:6c:e8:
c3:b6:92:c6:d1:e7:90:a8:14:de:9a:11:ba:c5:ce:
17:25:88:fd:4b:d0:59:9e:5c:b5:d1:d0:6d:a8:0e:
1c:cb:cf:53:e8:a0:ce:2e:7e:dc:89:3c:6b:b6:62:
54:06:46:a5:2e:63:8d:4c:af:59:bf:68:09:79:97:
fe:ea:8f:9c:4a:f0:8d:28:74:51:4a:c9:14:c4:f2:
17:9e:98:5b:63:5e:50:09:20:5a:4a:d4:14:07:bb:
74:5a:61:c1:da:4f:18:49:e6:3a:ac:d8:8b:f4:a0:
54:64:9e:21:a4:3e:fc:e6:fe:9e:2d:db:06:89:89:
4f:0a:53:0d:ea:a2:2c:a7:42:db:1d:5c:c7:ae:0e:
6f:e8:82:ac:f8:52:a1:9c:ef:b0:fb:a7:72:dc:95:
2f:fe:fb:3f:43:99:1e:33:33:78:a6:1d:6f:d1:df:
30:f4:91:06:eb:2d:3c:5d:43:7c:89:c1:ff:37:b4:
11:93:c3:5d:2e:ab:1e:1d:58:6f:7b:3c:65:b7:42:
d1:4e:83:d4:42:0a:48:55:65:2a:28:53:7c:fa:86:
dc:dc:34:85:ef:23:d0:fd:27:48:5e:33:a9:dc:0d:
b3:29:66:eb:6c:ad:36:6c:15:03:3b:bb:99:ce:04:
78:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E9:B7:7D:BF:5E:44:50:A9:1E:62:47:B1:D9:CD:CF:24:7D:A6:97
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/T-m3fb9eRFCpHmJHsdnNzyR9ppc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1a10::/44
Signature Algorithm: sha256WithRSAEncryption
7f:15:6b:d6:d7:0b:8b:4e:72:c3:9f:09:9a:11:c0:26:dd:8b:
f8:fd:95:c0:1e:e4:b2:cd:e9:89:da:4b:ab:62:69:41:57:fd:
70:2d:8a:2c:f6:9a:eb:23:64:46:71:56:06:0c:3a:a0:5c:d3:
a1:79:4c:db:be:7f:74:3f:6b:24:e8:ea:57:52:67:36:90:c3:
b0:cc:fc:15:10:e1:2c:e4:8b:cf:57:3b:73:7a:b2:8c:d5:a4:
e3:94:87:19:41:61:c5:72:5b:aa:d0:7c:72:4c:90:94:6e:f5:
63:75:40:88:18:ab:dd:59:46:60:92:c3:98:80:c9:6a:70:ab:
a7:90:f2:bb:52:3e:96:e6:ea:49:56:7d:6b:d6:7d:da:2b:e0:
75:f1:1d:f2:a0:e5:1c:73:b5:f9:79:ed:dd:21:3a:9c:47:32:
32:4e:55:1c:77:ce:f8:e1:17:e1:42:1a:3e:b8:6f:c4:63:b1:
f6:ee:5c:02:cf:09:dc:15:b5:68:56:ea:95:88:65:68:3b:43:
42:60:99:b5:21:20:35:bd:8d:85:a0:4a:ec:c2:53:50:68:41:
85:e7:63:38:4d:07:e8:13:eb:1c:50:1d:f9:37:f6:31:3d:83:
de:02:32:3d:26:11:da:0b:bf:f8:01:45:4b:0e:34:26:c5:cf:
9c:e3:c0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:57 2024 by rpki-client on console-ams.rpki-client.org