Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vabz1cRs3hkGUmzr8SwEIiSNnZY.roa
File: Vabz1cRs3hkGUmzr8SwEIiSNnZY.roa (raw, json)
Hash identifier: Mj3neZ5Y+AN67GtmjzCC/KjE4hFoSar4tgQvMxzbthk=
Subject key identifier: 55:A6:F3:D5:C4:6C:DE:19:06:52:6C:EB:F1:2C:04:22:24:8D:9D:96
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD10373678FE90D04FCEAFB786DAF0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vabz1cRs3hkGUmzr8SwEIiSNnZY.roa
Signing time: Tue 02 Jan 2024 10:34:20 +0000
ROA not before: Tue 02 Jan 2024 10:34:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206895
IP address blocks: 2a0e:97c0:a10::/48 maxlen: 48
2a0e:97c0:a11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:10:37:36:78:fe:90:d0:4f:ce:af:b7:86:da:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55a6f3d5c46cde1906526cebf12c0422248d9d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f6:b3:29:0f:ec:a5:11:d2:fa:fd:ab:6b:1e:
13:b7:b5:b5:22:6f:bf:65:cd:63:52:30:9a:00:01:
27:2f:2a:68:2f:8d:13:6e:10:c5:4e:8d:4f:2b:b3:
73:f5:56:7b:a9:f7:21:7d:c8:3c:79:d3:db:54:95:
2b:64:62:f7:ec:a2:d7:a9:67:27:bc:cf:4d:da:16:
79:0f:b7:1c:99:d1:ec:d7:1d:03:e1:8f:e1:b6:17:
e1:1c:16:ff:ed:b3:3e:48:c2:2e:f9:ba:9a:0e:35:
42:c4:21:a8:c2:7d:ed:0f:1d:ff:45:e7:3d:98:73:
69:5a:ae:75:66:0e:00:b2:da:d5:18:bb:a4:b6:6e:
40:0d:cb:05:33:34:3e:61:8e:8e:c2:c9:93:07:98:
0f:4c:ca:dc:ea:06:59:bd:57:ba:74:db:50:1e:e7:
c6:51:57:db:bc:a5:ea:26:90:e7:b9:e0:13:b3:28:
8d:d4:76:1d:8d:33:ba:2f:33:82:a3:90:58:1d:42:
65:cd:0e:95:52:78:40:b6:43:ad:b6:95:d5:52:bf:
f7:96:b6:d5:e7:4f:c8:5d:55:22:fb:8f:9e:f4:fb:
db:89:a7:9e:01:de:e7:9a:5e:7b:00:df:f5:9b:7f:
f0:e7:51:18:8d:cb:67:9e:49:89:08:82:35:8e:73:
36:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A6:F3:D5:C4:6C:DE:19:06:52:6C:EB:F1:2C:04:22:24:8D:9D:96
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vabz1cRs3hkGUmzr8SwEIiSNnZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:a10::/47
Signature Algorithm: sha256WithRSAEncryption
ca:63:ef:5a:d6:8c:46:ac:ae:12:b1:53:c9:ed:5b:16:c7:2d:
79:f8:1c:c7:7a:53:e6:84:0d:ea:a8:1d:8f:77:c4:0e:a8:dd:
a9:e8:cc:8e:42:72:8a:66:5d:a6:e1:6e:67:52:9d:3e:f2:ae:
28:e3:b3:ce:ac:58:5f:01:ea:98:e4:75:f4:ab:90:de:29:ba:
2b:99:65:d0:2c:2d:11:91:5e:f4:c1:6b:6c:c5:d6:be:ec:99:
eb:27:ac:e3:8b:ca:5d:23:ea:12:2d:ad:f8:45:5a:15:4d:3e:
2c:a2:10:5e:ff:6a:b8:b1:c1:28:62:f1:73:a9:18:02:0f:99:
14:78:0b:28:e9:c6:18:00:cd:5a:bb:a6:7d:d8:d2:06:25:02:
c8:66:68:88:df:31:42:26:b0:27:b9:9d:4c:09:7a:35:2c:71:
24:58:58:58:b8:f5:2a:bc:78:4f:41:0f:ad:45:b5:0d:d0:4d:
5e:5b:e0:1e:d1:50:2e:fd:29:2f:35:2f:76:8f:cd:32:98:07:
51:4d:1b:90:9a:56:ca:b1:51:b8:3a:ae:4e:fd:24:71:32:87:
33:8e:3b:4b:1b:83:5a:da:27:5b:27:ed:5c:eb:73:3f:24:bc:
63:da:d4:2b:8b:4a:1b:95:aa:20:14:12:94:99:1b:35:19:20:
15:79:be:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:35:00 2024 by rpki-client on console-ams.rpki-client.org