Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W1hlUoKaTlDfxsn41KPvN9viYpQ.roa
File: W1hlUoKaTlDfxsn41KPvN9viYpQ.roa (raw, json)
Hash identifier: zU2HyFm6UFtbqzb42ibt++9SeRUGCZ3NRuUHNt1f81g=
Subject key identifier: 5B:58:65:52:82:9A:4E:50:DF:C6:C9:F8:D4:A3:EF:37:DB:E2:62:94
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018E91D0D39CCF5013DD6BD429A9DA4235EC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W1hlUoKaTlDfxsn41KPvN9viYpQ.roa
Signing time: Sun 31 Mar 2024 00:02:45 +0000
ROA not before: Sun 31 Mar 2024 00:02:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53667
IP address blocks: 2a06:de05:6000::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:91:d0:d3:9c:cf:50:13:dd:6b:d4:29:a9:da:42:35:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 31 00:02:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b586552829a4e50dfc6c9f8d4a3ef37dbe26294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3c:9d:2a:41:b0:a2:b8:e1:12:78:06:08:33:
25:11:1a:f8:52:1f:e0:37:23:57:e5:98:27:88:43:
91:d5:5f:1a:6e:5c:48:0b:77:94:96:ce:d9:ee:f9:
b7:1c:59:70:55:8b:bb:9f:72:08:51:b9:1e:60:bb:
00:9e:8a:c4:61:8b:c8:ed:78:f6:85:ab:0e:cc:6a:
67:ae:07:6a:20:b3:13:06:06:69:eb:97:1b:41:56:
fd:e4:6f:61:c0:8c:d9:cc:13:a9:82:32:14:9d:ed:
1d:7c:ab:53:b2:42:15:1c:75:82:32:55:e2:c6:d0:
d3:97:32:18:35:80:2c:cf:af:5d:cb:d8:b9:c3:6e:
ab:2f:13:65:bc:ae:20:17:f0:67:f5:f0:35:b3:ae:
36:d9:6d:f1:b6:e7:b2:23:f3:7b:5f:ce:58:97:ba:
14:2a:0c:b2:6f:09:7e:2f:de:3c:ff:d3:f1:c3:84:
e3:d5:0f:da:6b:90:eb:0f:ca:3f:af:85:2f:cc:56:
d3:42:84:c0:4e:66:64:96:5d:e5:36:42:c6:c1:e4:
e5:b4:b7:e1:c7:1e:49:55:33:4f:93:f0:d0:5d:38:
50:79:0b:e4:26:91:7f:db:fb:af:37:55:f6:d4:c0:
73:7e:97:7f:66:ff:4a:a4:cd:eb:3f:ad:f7:fb:34:
ca:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:58:65:52:82:9A:4E:50:DF:C6:C9:F8:D4:A3:EF:37:DB:E2:62:94
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W1hlUoKaTlDfxsn41KPvN9viYpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de05:6000::/38
Signature Algorithm: sha256WithRSAEncryption
c1:7c:5e:3a:95:6a:9a:5c:9e:7f:27:0d:67:7b:71:3d:c9:b5:
c9:0a:8d:6c:84:ce:7d:42:2f:69:1c:6a:80:05:04:d5:a6:64:
46:fa:c4:11:52:ab:1a:e3:2e:43:33:31:3b:d5:48:db:3f:05:
00:88:d1:1d:e7:7b:6c:ca:a7:b2:19:a0:9d:97:83:70:8a:00:
35:72:c5:d7:9e:ce:03:ad:c6:ef:49:da:b4:f0:f5:da:ba:0f:
4b:48:7d:ef:29:9d:60:69:b5:15:62:51:18:58:26:96:55:28:
2f:41:28:52:67:fc:1a:e6:63:38:35:ab:5e:7b:d0:58:51:dc:
1c:35:c7:ff:0d:64:9d:3f:6d:e5:fc:71:93:dd:58:1a:d6:ba:
df:75:d4:78:12:55:a2:d9:c4:29:57:9f:6e:b9:32:cc:75:48:
ac:c4:32:45:05:91:23:51:ea:40:82:e7:fa:95:dc:95:eb:c4:
b1:32:bf:cb:b9:d6:2c:64:e2:54:73:1f:48:53:4a:1a:b7:ed:
a1:95:a5:0f:31:9d:27:86:02:55:50:a9:0d:f1:90:2a:81:67:
cd:e5:e2:cb:60:5c:a9:07:e1:67:04:5e:ef:d7:98:28:20:fc:
04:ab:f3:4a:6f:a4:25:96:cb:4a:ed:4c:eb:c4:62:19:b6:ec:
ef:3f:e5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:34 2024 by rpki-client on console-fra.rpki-client.org