Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ys1bBMSXVFmtqfq2hL_1sO0UW9s.roa
File: Ys1bBMSXVFmtqfq2hL_1sO0UW9s.roa (raw, json)
Hash identifier: SUocoVa8J+Ud7OVXnMe3ic9y3jDCI4I8d7id6eQXSeE=
Subject key identifier: 62:CD:5B:04:C4:97:54:59:AD:A9:FA:B6:84:BF:F5:B0:ED:14:5B:DB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCFC9D3666C75D0141E798A9AEFE60
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ys1bBMSXVFmtqfq2hL_1sO0UW9s.roa
Signing time: Tue 02 Jan 2024 10:34:14 +0000
ROA not before: Tue 02 Jan 2024 10:34:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202002
IP address blocks: 2a0e:b107:1d14::/48 maxlen: 48
2a0e:b107:1d11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:fc:9d:36:66:c7:5d:01:41:e7:98:a9:ae:fe:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62cd5b04c4975459ada9fab684bff5b0ed145bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:89:c6:8a:16:c6:e7:76:b2:0e:86:14:fd:
5f:dd:ff:d7:12:eb:42:aa:ed:b3:f9:8f:54:a7:de:
b6:05:f6:a4:06:5c:8d:5e:2a:bb:50:2a:d8:55:61:
5d:f5:03:53:9f:7a:00:7e:a5:4a:68:67:53:f9:d9:
15:d7:a9:e3:61:99:d8:e3:a2:e7:b8:ca:34:af:ad:
8c:47:4b:a6:7f:be:e3:28:da:e1:d2:d3:b6:4a:36:
0c:1b:50:d2:ae:77:f5:f5:42:02:ef:76:51:6d:32:
3d:a3:b2:06:99:be:1e:d6:58:ba:90:60:9a:2d:51:
13:77:a2:f8:cd:c1:25:3c:4f:d5:d8:88:d9:e8:50:
55:1c:e7:17:f9:dd:ca:e7:a3:8a:6b:14:44:4d:4c:
d5:58:d1:8f:9a:37:0f:23:d1:64:9d:f7:91:09:57:
6a:d6:b4:cf:9d:74:41:27:d2:9e:ba:a0:bb:f4:fc:
a5:64:60:5d:42:c8:76:a3:9e:c6:12:96:a9:6c:ba:
42:9d:75:43:7a:3a:10:69:cf:f0:0f:ac:c8:64:45:
1d:0a:95:80:ab:d7:1c:85:a0:3d:b5:b5:6e:12:a4:
45:ff:7a:6b:e8:4f:f1:56:7d:75:ce:9a:62:87:f4:
66:81:b1:aa:6b:49:78:39:31:87:cc:bd:26:10:5f:
28:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CD:5B:04:C4:97:54:59:AD:A9:FA:B6:84:BF:F5:B0:ED:14:5B:DB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ys1bBMSXVFmtqfq2hL_1sO0UW9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1d11::/48
2a0e:b107:1d14::/48
Signature Algorithm: sha256WithRSAEncryption
3b:6f:7e:61:40:9b:0e:32:58:95:f3:34:4a:c0:fd:d7:d8:9d:
ae:90:1c:72:79:19:2e:5a:4b:d1:ac:96:45:67:5e:62:bb:14:
0b:1b:13:ac:46:a4:cc:ed:9e:57:30:3e:bb:1d:20:4e:8d:82:
24:58:8e:be:ef:87:9e:29:33:30:f4:1d:57:a3:14:4a:ab:69:
61:ea:2e:dc:14:22:78:ac:30:bd:d4:a0:a3:c7:78:3a:d8:25:
f9:ec:26:3f:9c:b5:b9:82:10:b5:e8:24:f0:8c:b4:eb:a6:cd:
5f:bd:f6:c4:0f:56:0f:53:98:3d:76:5f:09:ca:4a:09:72:11:
e5:28:9d:7d:2f:d9:fb:3a:3d:3f:f0:ad:67:e2:94:5e:f0:bc:
c6:40:71:28:65:52:ee:3e:7f:b3:4f:2a:4b:0e:a1:e0:ee:75:
6c:d8:e6:18:2a:af:ad:9a:4f:3d:73:02:22:97:96:6e:83:ab:
a7:84:da:07:59:55:ee:fe:1c:57:4d:c5:41:26:b4:e4:70:43:
48:53:11:23:22:c4:3e:0f:af:69:cb:dd:80:a9:cc:d7:cc:92:
75:89:5c:01:de:e0:d1:c2:c8:50:e3:d4:4c:e4:a6:9b:16:0b:
7e:39:88:3d:ee:73:be:05:db:49:72:9d:cd:2d:6c:bd:d5:bd:
1f:f6:4f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:39:08 2024 by rpki-client on console-ams.rpki-client.org