Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WbJQ3i3RaDOuS6WAVdVYz3-Zl24.roa
File: WbJQ3i3RaDOuS6WAVdVYz3-Zl24.roa (raw, json)
Hash identifier: Wf4Rh0iOEFTIFrQYb7qJ2SsPRAXBlvoluS29qbazyuY=
Subject key identifier: 59:B2:50:DE:2D:D1:68:33:AE:4B:A5:80:55:D5:58:CF:7F:99:97:6E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCC7F1AD5A764A04B19C6013A0D043
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WbJQ3i3RaDOuS6WAVdVYz3-Zl24.roa
Signing time: Tue 02 Jan 2024 10:34:01 +0000
ROA not before: Tue 02 Jan 2024 10:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39282
IP address blocks: 2a0e:b107:e80::/44 maxlen: 48
2a10:2f00:15d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c7:f1:ad:5a:76:4a:04:b1:9c:60:13:a0:d0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59b250de2dd16833ae4ba58055d558cf7f99976e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:7c:84:ee:17:2b:09:8a:b2:6a:c6:50:49:
56:30:7d:f9:b3:97:1e:dd:dd:79:3e:ca:28:e9:23:
17:13:10:a3:d7:d7:e1:d7:a9:61:1c:ee:a5:41:4c:
6c:b3:e8:0b:7b:65:c2:e4:a1:b2:eb:a8:ae:8e:c1:
a1:1f:bc:63:ea:35:3b:c1:ad:cf:5a:07:33:fb:78:
a0:de:c5:b1:8e:ec:d8:92:b5:16:e8:18:14:2c:d6:
27:a5:1b:02:db:87:91:d9:2d:6d:5b:67:4a:06:02:
75:7d:84:32:df:2f:e3:a7:28:4e:96:54:f2:be:94:
41:1b:d4:1c:84:06:8e:35:1b:b4:be:d7:94:6c:35:
80:a1:df:ad:21:4f:d3:39:f8:85:b9:5f:d6:37:d7:
b2:05:77:95:0a:49:6b:7d:de:3d:b2:72:3a:1e:1c:
cd:70:d7:ea:67:60:67:38:9a:82:68:51:ff:c7:9e:
17:1a:fa:c2:34:46:21:c0:8b:94:19:98:40:7b:c1:
e3:95:eb:b0:72:91:1b:1f:53:56:5f:d2:a8:ff:60:
ae:ae:af:02:7e:f7:82:81:96:9f:d8:57:cd:e4:81:
1b:b7:c0:c5:d7:69:70:ba:a0:58:01:7b:50:26:61:
cd:b9:57:86:fd:6f:42:49:80:43:0a:99:33:d7:83:
7c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B2:50:DE:2D:D1:68:33:AE:4B:A5:80:55:D5:58:CF:7F:99:97:6E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WbJQ3i3RaDOuS6WAVdVYz3-Zl24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:e80::/44
2a10:2f00:15d::/48
Signature Algorithm: sha256WithRSAEncryption
b5:a7:76:d1:43:60:e0:ee:9b:09:27:93:3c:37:99:d9:f4:ff:
dd:ad:4c:85:1c:8e:6b:7e:57:1e:77:1f:68:55:18:ee:2b:36:
e8:17:fb:aa:d3:ba:02:1c:61:fd:c8:1a:e3:21:5a:ea:d1:f5:
79:b5:7d:2a:d2:61:8a:58:9b:22:0e:53:95:c3:bc:80:6e:d3:
12:bd:f6:f7:79:6b:80:9e:79:4e:e3:28:3a:9a:8b:99:57:8c:
a7:bb:68:c2:d8:26:83:c5:ba:d7:20:8a:2a:dc:53:31:d3:47:
b3:a6:19:96:b0:1b:79:12:29:9c:51:03:4e:9f:0d:94:15:ef:
80:65:2a:8d:5e:53:c8:03:f1:32:37:8b:46:aa:51:fc:73:06:
35:1e:8e:80:0f:8e:b6:69:f5:b9:59:5b:c5:9f:19:09:f2:7f:
a0:f6:92:45:25:9b:04:30:6b:d0:b2:e7:c0:60:89:75:47:49:
48:14:3e:05:b7:80:b1:31:b2:d8:cf:aa:9c:ef:69:2d:ac:ca:
d7:04:13:3b:57:b6:ba:9b:83:e9:c9:d9:c6:f9:37:4c:ec:8a:
a7:8b:88:07:4c:fe:73:8a:d9:c1:f0:f0:00:89:c3:a1:5e:e6:
ad:18:cf:df:bb:e3:95:ec:c7:47:ca:8f:95:27:4c:e8:66:35:
f5:f4:0b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:40 2024 by rpki-client on console-fra.rpki-client.org