Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V2m4FUCwCqeT118torHWjmwPm48.roa
File: V2m4FUCwCqeT118torHWjmwPm48.roa (raw, json)
Hash identifier: 3s5cjb03xkGnPuDhTS6h0Y5fFQN2F/yM1js5STNmDUQ=
Subject key identifier: 57:69:B8:15:40:B0:0A:A7:93:D7:5F:2D:A2:B1:D6:8E:6C:0F:9B:8F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018DB4A45217588F912582DAA056C1A4B6ED
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V2m4FUCwCqeT118torHWjmwPm48.roa
Signing time: Sat 17 Feb 2024 01:18:04 +0000
ROA not before: Sat 17 Feb 2024 01:18:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199304
IP address blocks: 2a0e:b107:16c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b4:a4:52:17:58:8f:91:25:82:da:a0:56:c1:a4:b6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 17 01:18:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5769b81540b00aa793d75f2da2b1d68e6c0f9b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f7:77:68:5a:74:df:38:13:e1:c7:5d:2b:b3:
e5:ba:51:9b:00:c2:cb:9a:c5:cd:2b:86:2f:4b:8c:
60:4b:0d:41:6a:c9:99:41:c3:a5:a1:90:f2:72:a5:
fb:5e:75:c1:05:1c:c8:df:cc:d0:9e:42:b5:36:45:
e3:3f:06:91:e0:84:fe:ad:54:2f:b0:70:10:8f:d9:
63:a1:19:8e:3b:dc:b2:3b:95:32:43:a9:a4:9c:94:
e6:c9:00:b9:ad:42:17:1e:36:fc:e5:06:1b:8b:b7:
d4:cd:54:49:27:44:67:c2:da:4d:d4:fb:a1:98:0b:
cf:64:3e:a6:b2:7d:2c:75:5d:4f:c8:50:50:a4:21:
88:de:76:9c:78:b1:20:08:fc:39:b9:83:65:44:14:
31:3e:9f:f1:78:94:83:66:cc:a2:91:e3:2d:32:a1:
83:2b:59:09:f5:42:06:eb:fc:64:5c:39:9f:bc:fd:
eb:e9:29:6c:23:d0:90:08:26:95:fb:0c:82:d8:6c:
6d:f1:4d:56:28:50:ae:0b:2c:45:85:4d:66:3a:66:
f4:f0:26:86:af:02:fb:67:b3:34:95:96:7b:6c:c2:
f7:4f:64:e3:22:e4:08:a7:87:aa:93:6c:41:c0:d1:
51:76:2e:ba:97:06:b7:78:55:ae:13:e2:af:99:85:
7b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:69:B8:15:40:B0:0A:A7:93:D7:5F:2D:A2:B1:D6:8E:6C:0F:9B:8F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V2m4FUCwCqeT118torHWjmwPm48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:16c0::/44
Signature Algorithm: sha256WithRSAEncryption
38:c1:61:88:04:dd:36:10:71:68:3a:c2:9a:8c:a6:41:1c:b7:
ea:0d:b1:e3:16:15:45:99:90:ca:56:2e:ed:20:3e:61:66:55:
2b:f4:de:f8:ec:f4:0b:8a:dc:67:42:24:7b:fa:d5:9e:70:27:
ea:8d:74:b1:8a:8d:65:c3:58:64:89:04:9e:86:91:bf:d9:05:
68:2d:9a:e6:c5:90:cd:3e:d6:23:5c:83:b3:0d:b5:04:56:11:
a9:cc:4a:dd:a5:5b:6d:c0:05:59:ac:93:85:47:14:af:4a:08:
84:45:33:2f:14:fc:ec:c6:44:df:72:71:3b:94:ed:81:a8:ec:
bd:9b:91:68:ca:b0:e2:66:c7:94:cc:75:b8:60:23:4d:b0:95:
0a:30:81:9e:9c:18:bc:3b:5c:04:18:ec:64:ea:8d:48:0d:0d:
57:48:28:0d:32:ea:10:50:81:4e:e2:ae:93:8c:76:f5:61:e4:
a5:91:81:51:e3:ed:5f:a1:e5:66:71:ff:11:9b:ae:4f:40:25:
99:1f:25:3b:ba:01:34:d5:73:07:02:1e:71:2b:82:46:af:85:
28:61:b0:94:26:64:83:64:1a:72:4f:ce:b7:2a:f0:cd:76:94:
70:7d:a2:cb:6f:d7:a3:28:5d:f8:5c:b0:96:25:af:05:23:94:
49:07:d9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:40 2024 by rpki-client on console-fra.rpki-client.org