Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/T3Wu_72qtO3eH39bRMGZLtCB-2s.roa
File: T3Wu_72qtO3eH39bRMGZLtCB-2s.roa (raw, json)
Hash identifier: 3xFdnz1JW46diUrwT1Z1/hYXNWFbptTPCnd1NLyknKE=
Subject key identifier: 4F:75:AE:FF:BD:AA:B4:ED:DE:1F:7F:5B:44:C1:99:2E:D0:81:FB:6B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCE1D560C88F5ED90055FF439BEE0A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/T3Wu_72qtO3eH39bRMGZLtCB-2s.roa
Signing time: Tue 02 Jan 2024 10:34:08 +0000
ROA not before: Tue 02 Jan 2024 10:34:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147016
IP address blocks: 2a0e:b107:b17::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e1:d5:60:c8:8f:5e:d9:00:55:ff:43:9b:ee:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f75aeffbdaab4edde1f7f5b44c1992ed081fb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:7c:6e:c6:93:09:ba:59:77:ca:90:9c:6b:
7e:f4:56:a0:36:f5:b8:00:48:22:cd:71:7a:fe:f3:
9f:60:36:ab:23:79:04:cf:76:a9:15:36:98:c0:f0:
ce:9a:d6:6e:5f:b3:48:d0:f1:ca:4c:2e:09:9c:58:
9c:0a:74:01:3a:7e:a1:b7:0c:91:18:d0:4b:87:7c:
43:75:cf:06:6a:3d:f8:e4:67:86:71:de:1a:11:7a:
21:f3:1d:6a:c8:52:4f:95:06:16:a3:5c:fd:b2:9c:
85:9f:f9:52:72:dc:57:2f:65:31:9e:a8:5d:53:9a:
7f:6f:39:a4:66:13:39:45:b1:e2:b3:43:62:0f:15:
3f:6b:42:6a:6d:a5:8f:17:8b:71:c7:48:7c:cd:0a:
dd:11:01:8d:26:89:77:58:1c:09:01:6d:47:36:3e:
03:ea:20:4e:33:92:df:8e:49:ca:c1:e5:f2:5c:24:
73:42:e3:0e:05:fe:46:13:b8:d3:33:1a:a0:a1:2e:
a2:f5:96:f9:25:7a:73:27:07:3d:5c:81:44:a3:b4:
79:26:29:b3:d4:e5:b1:f2:71:68:bd:ed:d2:58:cc:
cc:61:cf:ee:a2:c6:2d:0a:bd:0d:35:0d:df:8a:da:
8e:77:ce:f5:55:27:8f:c8:9f:56:f5:03:b5:af:aa:
66:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:75:AE:FF:BD:AA:B4:ED:DE:1F:7F:5B:44:C1:99:2E:D0:81:FB:6B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/T3Wu_72qtO3eH39bRMGZLtCB-2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:b17::/48
Signature Algorithm: sha256WithRSAEncryption
17:a2:f1:5d:76:bb:4e:34:6d:02:e2:78:5c:27:37:d6:c0:39:
c4:b7:aa:11:68:63:2c:0b:58:2c:8d:76:16:df:ef:4c:14:e1:
40:a4:87:b2:aa:29:f9:c6:8f:b3:8b:68:c1:29:15:19:df:43:
e5:1d:ac:ab:9e:be:eb:19:4b:30:ef:e7:b1:8d:ea:a3:ee:fb:
72:9a:23:23:2b:59:f8:a6:66:4e:ef:27:e0:96:31:73:ee:cb:
1e:3a:b4:a0:1b:70:10:be:70:65:fc:ba:e5:a2:4d:f7:16:c6:
d2:b7:f3:77:65:08:a4:37:29:2b:e9:10:8c:88:b0:87:42:1e:
95:67:d8:ba:da:01:11:35:7d:b8:95:b8:a1:a6:e4:a2:68:f2:
62:43:2e:55:d4:73:54:69:ab:51:f7:ef:44:c2:0d:ed:5b:d8:
01:d0:a1:49:f0:88:8c:82:fe:62:0a:6d:c8:35:7c:3c:02:c0:
2d:1c:a6:31:e5:cd:2b:4c:90:f1:a9:d6:93:da:e2:12:09:5b:
2b:3c:34:ec:fb:2d:53:53:1d:c6:23:eb:a2:69:b6:9f:7b:7a:
3d:18:4c:b7:14:61:d7:62:a6:ac:85:d5:88:f9:e3:fe:8d:da:
36:70:d9:fc:8c:3c:8a:53:d8:dc:9e:a7:6c:95:c0:f0:3a:ad:
5f:1e:58:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:57 2024 by rpki-client on console-ams.rpki-client.org