Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V9F6h8hMhpaLox24LHBivCGnGC8.roa
File: V9F6h8hMhpaLox24LHBivCGnGC8.roa (raw, json)
Hash identifier: bDK3TA6OcJwKtb8mbj2KgB5NY0hJ6gJP5Keas0Ri2Cs=
Subject key identifier: 57:D1:7A:87:C8:4C:86:96:8B:A3:1D:B8:2C:70:62:BC:21:A7:18:2F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018DFBB65BD1868751951F00622FBF5ECC44
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V9F6h8hMhpaLox24LHBivCGnGC8.roa
Signing time: Fri 01 Mar 2024 20:30:48 +0000
ROA not before: Fri 01 Mar 2024 20:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57429
IP address blocks: 2a0e:b107:1340::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fb:b6:5b:d1:86:87:51:95:1f:00:62:2f:bf:5e:cc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 1 20:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57d17a87c84c86968ba31db82c7062bc21a7182f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d8:8d:ab:d8:5e:bc:75:ef:f0:4a:5e:af:c8:
fd:bc:90:74:23:e6:6c:1b:9a:d0:d0:1a:4f:67:a4:
f0:94:21:79:a2:fe:9b:be:11:f5:81:3d:e9:4e:ea:
7b:34:5c:b7:62:a2:2f:bb:72:4e:a3:cc:53:ef:7a:
d6:85:3a:6e:03:93:a2:8f:1d:4b:c5:64:ef:3e:dd:
e2:09:df:97:96:e9:29:25:28:0b:74:aa:fe:3b:58:
db:b3:b7:6d:5c:8d:14:6d:6f:85:81:5d:cc:12:06:
e2:47:cb:a1:d0:39:95:af:e9:48:69:47:10:4d:30:
5a:91:2f:84:08:a9:de:db:82:23:6a:92:1c:ea:f7:
68:8b:d0:4a:46:92:0d:bb:50:92:d1:cd:c7:61:29:
32:85:b9:68:46:b9:7e:19:2c:39:76:43:56:d6:c6:
5f:27:65:3e:36:05:63:b1:a6:65:e9:d0:e4:74:f4:
43:40:9f:c7:a3:c4:0b:fa:37:70:b4:87:03:5d:a0:
ed:da:ca:cf:e2:b7:68:81:a0:17:15:4d:80:1d:51:
92:3c:21:fc:36:b6:bd:e5:2f:61:a7:a1:6d:d5:62:
93:b5:b0:42:0b:b3:61:6e:47:50:18:f4:04:da:03:
74:6a:b8:a2:b1:c8:65:07:49:a2:15:ec:80:a7:67:
9a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D1:7A:87:C8:4C:86:96:8B:A3:1D:B8:2C:70:62:BC:21:A7:18:2F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V9F6h8hMhpaLox24LHBivCGnGC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1340::/44
Signature Algorithm: sha256WithRSAEncryption
5f:0c:bd:09:54:e6:d3:68:d5:21:98:2c:ea:42:4a:bd:87:33:
f9:8e:eb:ee:be:84:36:fe:63:97:8c:de:37:37:bb:92:ba:55:
e1:87:63:db:30:fe:d2:50:95:b8:ca:db:0b:f0:08:85:29:25:
9f:4e:ac:83:d0:e9:51:e3:5e:07:73:77:8e:b6:01:4b:3d:60:
8e:41:99:86:39:f5:0b:81:ea:d8:08:72:fa:a8:f2:c7:2a:d8:
bd:cc:07:34:18:78:ff:f1:ad:53:47:bf:25:40:50:dd:a1:7a:
4e:a2:d6:e1:b2:ab:bc:3f:3b:c5:09:fe:82:93:23:ec:4d:b9:
8b:d6:bd:bd:38:7b:88:b6:a4:84:fa:2c:35:d2:17:dd:c6:fd:
be:1c:32:b3:66:7f:f3:72:68:a0:1f:9c:95:58:0e:ec:15:50:
f6:9a:98:2f:01:af:23:f9:dc:cf:c6:c9:49:3f:53:bb:ff:e2:
1b:6b:20:3f:74:c1:e1:47:84:12:f2:c9:21:c4:f3:36:74:dd:
23:ac:db:48:90:7e:1f:1c:ff:6f:c7:fa:64:74:54:b0:d2:2b:
69:3f:0f:e2:68:a8:31:a2:2c:fa:e8:2e:b5:f4:17:eb:80:ac:
07:95:36:f6:41:01:fd:c4:bc:e3:6e:24:1a:f3:10:4b:de:c3:
e4:28:5a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:35:00 2024 by rpki-client on console-ams.rpki-client.org