Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Uo4IzdQBD_9bu2DIYLk_jiX5uGs.roa
File: Uo4IzdQBD_9bu2DIYLk_jiX5uGs.roa (raw, json)
Hash identifier: /6hs+P+wOfWjefcf2Br+joTHPYxLfn5+u8x859B/i44=
Subject key identifier: 52:8E:08:CD:D4:01:0F:FF:5B:BB:60:C8:60:B9:3F:8E:25:F9:B8:6B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01939B77DA21016051E464E5885A0309671A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Uo4IzdQBD_9bu2DIYLk_jiX5uGs.roa
Signing time: Fri 06 Dec 2024 10:15:43 +0000
ROA not before: Fri 06 Dec 2024 10:15:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213748
IP address blocks: 2a06:de00:f0::/44 maxlen: 48
2a0e:97c0:580::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:77:da:21:01:60:51:e4:64:e5:88:5a:03:09:67:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 6 10:15:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=528e08cdd4010fff5bbb60c860b93f8e25f9b86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:5e:19:4a:56:ec:1b:62:43:79:e4:0c:60:
16:43:95:c6:1a:57:cd:5f:db:1b:61:e6:31:90:b1:
d2:0b:71:c5:5b:62:29:4c:3d:63:1a:a1:36:9a:63:
55:9b:e3:74:d6:e4:2f:c3:a5:e8:57:f0:00:25:2c:
94:3d:d3:3c:fc:04:07:67:de:4c:9a:3a:5a:d1:fe:
88:76:4b:b8:f3:a4:1e:2e:1e:b1:cc:86:fb:a3:1f:
96:fc:14:ff:7a:44:be:22:90:5f:95:60:ab:b4:ea:
ed:1d:dd:40:52:e3:dd:46:61:56:9f:d9:9a:44:10:
31:f7:6c:4b:d4:fb:1e:d6:21:df:b1:90:f1:e1:21:
39:a0:63:7e:ee:c9:88:75:f7:6c:90:43:f9:75:af:
fe:3e:cd:c1:d4:bb:8a:b4:8c:2c:0b:44:85:11:10:
72:29:04:b3:f3:4c:f9:dc:09:16:2a:1f:bd:85:74:
8a:2f:ac:c9:99:b7:06:7e:68:d8:f4:cb:88:21:d3:
7b:80:d2:cf:01:a0:80:00:48:47:0d:6f:f5:4f:6f:
59:a6:9c:d0:08:be:01:1b:8a:93:36:d5:77:cb:73:
c8:ad:a9:44:46:5a:a5:05:86:44:07:53:fe:10:ba:
52:e4:a4:ca:67:9e:5f:14:af:bd:e5:8e:d3:7b:43:
ac:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8E:08:CD:D4:01:0F:FF:5B:BB:60:C8:60:B9:3F:8E:25:F9:B8:6B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Uo4IzdQBD_9bu2DIYLk_jiX5uGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:f0::/44
2a0e:97c0:580::/44
Signature Algorithm: sha256WithRSAEncryption
a5:26:1a:3b:c3:b8:e9:c7:1b:17:fd:d5:75:30:19:cd:93:9d:
c1:32:e9:77:66:fb:af:15:35:9c:8a:37:1a:95:1d:c9:8a:15:
4e:e6:c8:f8:24:18:18:fd:77:95:ee:7c:2f:7a:ab:6e:c7:1d:
8c:60:dd:77:c8:73:16:54:96:15:2b:44:7d:7a:08:71:d7:ec:
06:5f:a0:25:19:9f:88:cb:2d:50:6c:6c:e5:11:50:79:2d:3f:
9f:12:c7:f4:17:47:82:97:0c:b6:3b:7b:55:1d:d0:86:85:d0:
e5:a6:14:5e:ff:6a:93:68:ea:47:da:99:22:6c:3c:9d:11:c2:
03:35:3c:62:8c:99:49:e8:b8:23:d9:79:df:1c:40:57:2b:61:
51:5f:5f:98:f3:35:0d:ef:91:cc:f5:cb:ac:66:13:38:89:8d:
df:71:cd:ef:6d:98:7c:98:52:72:ba:59:6a:76:5c:cc:d3:19:
94:f6:0f:55:74:9a:95:6f:ae:c8:90:cc:d8:6f:af:70:85:38:
8b:26:cc:49:b4:5a:96:f2:99:4b:f2:41:7c:b3:37:87:4f:ea:
3e:5c:81:02:33:1c:f3:1f:77:bf:47:72:8a:be:32:aa:0e:8e:
8e:59:4c:bc:c9:d5:6c:18:b2:14:62:ba:f6:b2:de:7b:38:0b:
b8:b9:7e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 20:36:26 2024 by rpki-client on console-fra.rpki-client.org