Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Zl0tE2IUiO3QQ2o-y76PybcTuN0.roa
File: Zl0tE2IUiO3QQ2o-y76PybcTuN0.roa (raw, json)
Hash identifier: xcAteOEj4Pc+MdYf07GXUp36YRnDvBmKw0NpoXaNQIw=
Subject key identifier: 66:5D:2D:13:62:14:88:ED:D0:43:6A:3E:CB:BE:8F:C9:B7:13:B8:DD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD269FAB8BA50F46A07E7BCB05D6D3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Zl0tE2IUiO3QQ2o-y76PybcTuN0.roa
Signing time: Tue 02 Jan 2024 10:34:25 +0000
ROA not before: Tue 02 Jan 2024 10:34:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210631
IP address blocks: 2a0e:97c0:900::/40 maxlen: 48
2a10:cc40:1e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:26:9f:ab:8b:a5:0f:46:a0:7e:7b:cb:05:d6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=665d2d13621488edd0436a3ecbbe8fc9b713b8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:b5:be:e4:17:fc:0a:54:04:45:e3:ef:03:
9a:62:c1:be:fc:65:22:6b:c1:31:3c:67:89:85:80:
1a:db:fd:0b:a6:07:00:f4:61:a2:dd:dc:65:b4:be:
41:fa:40:45:a7:dd:cb:c8:f5:e2:10:00:71:89:bb:
63:60:ca:0d:8d:2d:2a:75:0e:17:7d:fc:2e:f4:d7:
1b:c9:25:ef:6e:6f:45:95:cb:b4:b6:06:1a:32:ac:
2a:ef:39:39:12:d8:d8:f2:26:eb:40:02:3a:a7:d9:
9b:2e:84:8f:73:52:9d:d4:ac:37:94:d5:f9:89:28:
ca:4f:db:e1:bd:33:9a:4f:93:a8:13:fe:11:1e:50:
c2:27:f7:0b:b5:ae:d8:65:99:cc:1b:04:94:f8:4f:
52:ce:f1:fb:4a:ac:8a:d0:55:ac:7b:00:a0:98:c2:
42:fa:88:3d:8e:b3:85:2f:b7:a4:71:64:5f:d3:96:
f3:77:ac:f7:8d:4a:fb:ee:92:5e:14:f4:83:e9:63:
2d:b5:a2:7b:4b:5b:0c:26:2a:e9:1b:6c:c9:94:cd:
0e:54:16:33:54:0b:67:76:db:ec:f6:af:5c:c2:08:
31:d8:3d:be:4a:a7:14:74:4c:f1:2d:87:ac:c8:ca:
c5:68:6d:53:bb:56:ce:4c:3f:c0:b0:1f:a6:dd:e5:
e1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5D:2D:13:62:14:88:ED:D0:43:6A:3E:CB:BE:8F:C9:B7:13:B8:DD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Zl0tE2IUiO3QQ2o-y76PybcTuN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:900::/40
2a10:cc40:1e0::/44
Signature Algorithm: sha256WithRSAEncryption
74:bd:4b:e0:1b:e7:2c:96:05:e9:9f:6e:bf:82:5d:9b:7e:c2:
f5:dc:c7:34:1d:25:9a:e4:31:da:01:5a:d4:4d:22:38:0c:ff:
a7:ec:c3:ac:be:ca:43:63:fe:92:bc:e2:8b:a3:46:1f:a3:53:
45:3b:40:04:5a:ab:d3:ba:d6:3f:b7:2b:08:07:16:2d:bc:f7:
21:28:77:d4:48:bc:47:b9:6b:73:b1:bd:2c:cf:4a:80:d2:36:
21:0f:c5:09:5b:e6:78:d4:47:bb:e2:57:cc:68:f9:64:2e:b1:
ab:bc:56:d2:2f:36:d8:d9:36:fe:e1:4b:06:fa:a2:d3:5b:c7:
ca:0d:a6:87:5c:10:00:8d:2a:2d:22:3b:e2:4c:00:64:69:4c:
b5:d3:85:08:ea:f8:1d:dc:a5:7f:74:3b:62:a1:89:d9:b9:32:
c7:c1:db:22:be:4d:4d:bd:f9:a3:da:0f:7a:10:64:a5:cd:7a:
f0:43:b5:c8:95:cf:c8:10:e0:8c:48:1d:51:09:be:65:47:ce:
b9:0f:be:29:5f:53:9a:5e:43:bf:4c:6b:fc:dc:cd:86:34:8d:
c6:03:d6:8f:03:cd:7d:cc:da:ef:97:b5:c7:0e:09:88:32:c8:
ab:9b:40:c8:d4:e8:44:9b:b5:ca:71:66:3f:72:b8:8d:fe:9a:
ef:fe:0f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:43:29 2024 by rpki-client on console-ams.rpki-client.org