Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WYa_5nP4ABorfKcTZhiHTLL3K5M.roa
File: WYa_5nP4ABorfKcTZhiHTLL3K5M.roa (raw, json)
Hash identifier: FW9RMqQoSsGx5rWKKo7H1/H6wE4WgEax+SPKDSttAY0=
Subject key identifier: 59:86:BF:E6:73:F8:00:1A:2B:7C:A7:13:66:18:87:4C:B2:F7:2B:93
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD300A85DBE9431EE56C717A369DA8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WYa_5nP4ABorfKcTZhiHTLL3K5M.roa
Signing time: Tue 02 Jan 2024 10:34:28 +0000
ROA not before: Tue 02 Jan 2024 10:34:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211044
IP address blocks: 2a0e:97c0:490::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:30:0a:85:db:e9:43:1e:e5:6c:71:7a:36:9d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5986bfe673f8001a2b7ca7136618874cb2f72b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:e1:9d:b3:1d:9d:42:71:e4:17:63:72:11:
58:10:3c:f9:a0:9b:ec:b9:55:67:e3:99:2d:4a:1b:
14:2f:8a:6e:c7:98:46:8e:ab:ab:e9:6f:0b:71:a5:
e3:50:8c:74:10:c8:45:a4:ae:ae:90:17:7f:6d:57:
b2:f1:24:c6:53:86:90:33:ed:04:69:2f:97:d5:98:
2c:75:e9:a7:d2:e4:b0:8c:bb:ea:62:ee:f7:8f:55:
2b:0d:1d:72:7e:6d:de:39:40:5c:db:70:b9:ef:9e:
40:64:64:16:3f:e1:66:23:ce:af:fd:e4:17:49:aa:
9c:97:83:b1:c5:29:f5:de:95:7b:32:98:b9:67:c0:
fc:0d:bd:12:26:28:f9:12:0f:a4:86:14:13:fb:2b:
bf:63:0d:e8:ba:ea:9a:6d:f4:91:eb:c2:d3:4a:f9:
dd:72:0c:f2:ac:94:7e:d8:48:28:ef:e4:05:96:70:
e8:35:ad:05:bb:32:cc:b4:92:78:ed:39:e0:84:57:
cb:b8:c8:cf:83:87:08:c3:ab:c2:2d:ab:3b:a1:f4:
a0:44:e0:d1:77:a5:12:b1:11:82:c4:f6:68:50:97:
03:37:23:51:14:b8:d9:cb:36:15:e6:21:21:a5:28:
44:83:b9:80:53:8d:55:d3:aa:b5:f3:a6:25:a4:9c:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:86:BF:E6:73:F8:00:1A:2B:7C:A7:13:66:18:87:4C:B2:F7:2B:93
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WYa_5nP4ABorfKcTZhiHTLL3K5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:490::/44
Signature Algorithm: sha256WithRSAEncryption
4e:aa:8f:01:41:12:50:85:6b:f8:90:c4:ba:57:66:8f:ca:26:
ab:81:55:3a:bf:5b:43:87:5a:21:13:d9:99:0d:dc:63:40:1a:
41:84:53:74:cf:59:2c:58:29:4c:e7:11:6d:68:a4:61:96:9a:
99:fe:d4:7c:9b:af:04:3c:fd:7b:2b:3a:5c:d4:d4:42:3f:13:
1d:8a:82:24:7f:48:87:0a:06:47:51:bd:36:72:e3:bb:c1:a9:
3b:3f:96:2d:75:83:75:5e:a8:78:f8:8a:67:16:30:b5:fc:ed:
6b:28:f5:cb:53:56:ec:f3:f3:19:1f:5e:9d:90:91:ce:7e:2e:
4a:09:30:94:5a:92:72:8f:32:20:e8:1b:24:c5:7a:56:19:f3:
08:33:40:82:c7:41:f9:27:9e:5d:b8:0e:44:33:8a:0f:d9:ee:
3e:1f:2a:b0:6e:b5:78:2e:b9:cb:d9:19:a6:d8:9e:be:12:10:
c1:26:3e:76:02:5a:1a:a9:a6:28:1c:a3:d7:69:58:bb:90:fc:
df:7e:60:f3:8b:bf:d4:ab:7b:20:0d:33:2c:f1:d0:8d:6c:7f:
40:11:df:29:eb:96:fa:23:c0:6d:95:79:73:d7:87:79:1f:19:
0c:ec:96:ef:0f:1c:2f:30:c9:9c:38:6e:a9:e3:08:62:63:68:
61:a6:f5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:40 2024 by rpki-client on console-fra.rpki-client.org