Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VsL1h6ZzNZo17i7hgAKGKJ31uH4.roa
File: VsL1h6ZzNZo17i7hgAKGKJ31uH4.roa (raw, json)
Hash identifier: AZFx1Hy1IBkOlfdMpaabDNi35Ah0nkLZl3rRPKQxFd4=
Subject key identifier: 56:C2:F5:87:A6:73:35:9A:35:EE:2E:E1:80:02:86:28:9D:F5:B8:7E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD3432488BFCC64DD49D72859E6FE0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VsL1h6ZzNZo17i7hgAKGKJ31uH4.roa
Signing time: Tue 02 Jan 2024 10:34:29 +0000
ROA not before: Tue 02 Jan 2024 10:34:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211293
IP address blocks: 2a0e:b107:2190::/48 maxlen: 48
2a0e:b107:2195::/48 maxlen: 48
2a0e:b107:219a::/48 maxlen: 48
2a0e:b107:219f::/48 maxlen: 48
2a0e:b107:2194::/48 maxlen: 48
2a0e:b107:2199::/48 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a0e:b107:2193::/48 maxlen: 48
2a0e:b107:2198::/48 maxlen: 48
2a0e:b107:219d::/48 maxlen: 48
2a0e:b107:21c0::/44 maxlen: 48
2a0e:b107:2192::/48 maxlen: 48
2a0e:b107:2197::/48 maxlen: 48
2a0e:b107:219c::/48 maxlen: 48
2a0e:b107:2191::/48 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a0e:b107:2196::/48 maxlen: 48
2a0e:b107:219b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:34:32:48:8b:fc:c6:4d:d4:9d:72:85:9e:6f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56c2f587a673359a35ee2ee1800286289df5b87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:38:90:85:fa:0e:05:85:c3:64:3b:61:fc:
04:67:e1:0e:1a:c0:f5:fa:da:1d:11:83:8b:c2:93:
f3:13:80:27:68:9b:1b:62:e5:03:37:29:d9:e8:90:
77:9e:84:c3:35:3b:0c:67:c4:d5:4e:70:ea:be:b7:
e8:51:17:82:64:e0:c7:db:6b:80:16:9b:87:0a:5c:
eb:49:e4:60:5f:2b:db:41:b2:f9:6f:42:52:97:3f:
20:e8:e0:b2:e0:e0:2b:ef:07:ae:21:f2:35:89:e3:
29:95:0a:b4:22:9d:ee:19:0f:76:5a:ca:8f:1d:ac:
ab:7e:68:4b:42:61:0d:11:d7:bf:1a:02:2d:68:29:
22:87:7c:6a:e2:66:3e:b4:d5:a7:9e:aa:4c:ae:9e:
60:b6:4d:e6:29:20:3c:a8:11:9b:44:5b:6c:12:4e:
f9:bb:f8:89:5c:86:b3:33:78:bd:1a:c7:01:fe:48:
a9:19:0e:2e:be:64:92:ca:86:83:08:26:2a:ea:18:
e3:2d:8f:f6:c3:43:fb:5e:8a:5d:5d:51:71:76:7b:
0a:b4:c6:e2:b3:d3:11:64:6d:0a:19:c5:fc:1f:ae:
af:ed:2f:39:3d:42:64:c2:0b:77:6d:40:98:0e:9a:
54:56:c2:e4:4f:8f:1b:d9:6f:62:26:b4:b1:86:c5:
d9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C2:F5:87:A6:73:35:9A:35:EE:2E:E1:80:02:86:28:9D:F5:B8:7E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VsL1h6ZzNZo17i7hgAKGKJ31uH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2190::-2a0e:b107:219d:ffff:ffff:ffff:ffff:ffff
2a0e:b107:219f::/48
2a0e:b107:21c0::/44
2a0e:b107:2220::/44
Signature Algorithm: sha256WithRSAEncryption
91:12:a1:ff:56:7d:36:5a:24:51:e5:5a:6b:a8:5c:4a:47:4a:
99:e5:3a:3c:32:b7:64:8a:7d:2c:c5:f3:b9:71:8b:79:51:ca:
09:a1:50:de:45:dd:a1:a9:46:d6:4a:78:84:f2:55:f8:5b:c0:
49:c4:e7:64:40:07:62:d0:32:e9:01:2d:ff:4a:63:20:e6:a8:
dc:96:79:05:a2:c5:5e:50:89:0b:92:bc:5c:c3:85:05:39:57:
12:8d:23:cf:37:44:4a:3b:c8:bd:55:d7:a0:97:8f:67:96:bf:
74:60:04:ae:bc:c2:50:e7:c0:9f:97:c3:75:42:30:b3:8b:cf:
f9:2e:fd:5a:e9:01:be:a6:d6:ab:2e:4b:3b:92:20:12:6c:fd:
23:4f:d9:35:58:54:e7:db:76:42:40:6f:10:77:ac:e2:e3:94:
71:ad:38:6a:05:85:65:70:55:a8:9d:ff:a6:ee:ef:bd:eb:54:
10:9c:43:6e:dd:13:49:c4:fa:f7:33:b9:79:ef:65:f5:ea:a0:
d8:ad:f9:8d:75:62:ec:58:3b:94:cb:c8:12:8c:7e:c3:dc:0e:
c4:cd:b5:66:9e:c4:71:f7:3c:1a:79:0a:11:a3:51:99:f1:99:
8b:71:b5:89:8d:da:f0:28:c8:bd:61:30:e4:1d:6b:71:b6:1e:
8b:04:45:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:34 2024 by rpki-client on console-fra.rpki-client.org