Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aFIODl97QEtTvYR0NB78bc742nY.roa
File: aFIODl97QEtTvYR0NB78bc742nY.roa (raw, json)
Hash identifier: YZ4t2H0CbycM+EWlw1QoWHS7HlaEPh9A+7ToqpmhOLI=
Subject key identifier: 68:52:0E:0E:5F:7B:40:4B:53:BD:84:74:34:1E:FC:6D:CE:F8:DA:76
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018EC2D6AE23436EEEEC9D08D755933AE3F2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aFIODl97QEtTvYR0NB78bc742nY.roa
Signing time: Tue 09 Apr 2024 12:30:32 +0000
ROA not before: Tue 09 Apr 2024 12:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216361
IP address blocks: 2a0e:97c1:8a26::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:d6:ae:23:43:6e:ee:ec:9d:08:d7:55:93:3a:e3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 9 12:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68520e0e5f7b404b53bd8474341efc6dcef8da76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:5b:30:b0:f9:30:ba:da:a8:77:cd:bc:7c:
df:a7:36:d8:05:64:9d:eb:66:11:69:50:63:f9:da:
ce:7f:ba:3c:3e:c6:47:ec:99:f8:ff:8c:d1:dc:3b:
1c:21:bb:24:75:99:1b:7e:cf:c5:08:22:d9:87:1c:
9d:ed:94:dd:64:af:d1:4c:1f:9f:62:5e:07:36:fc:
77:76:ec:1d:6a:40:24:88:3a:de:3d:20:b8:1b:0c:
6f:31:4c:b4:cf:bf:82:85:6c:2b:90:53:d8:3b:ad:
25:eb:ea:64:38:a5:3b:1c:c1:df:b2:2a:ba:e7:f0:
74:cd:b5:9a:4b:43:f8:12:b0:64:d2:43:c6:13:2e:
ba:f4:35:cb:d1:bb:d3:30:b5:44:e8:ba:34:6c:76:
d0:de:d6:06:73:51:4d:a6:c3:01:99:21:e9:f9:d7:
ac:f9:4d:50:36:77:3d:e2:9c:14:a0:aa:48:42:7a:
fe:4a:05:55:33:22:26:a2:ce:8a:05:bf:66:92:f8:
9e:02:24:5b:c8:ea:61:74:14:62:63:49:bc:30:de:
55:ee:3e:8b:c1:0a:67:d6:40:1e:f9:36:6f:95:c5:
31:ec:03:43:aa:b3:1e:0d:83:a6:1f:c7:78:6c:f4:
14:e5:38:63:71:1d:9c:17:16:15:2f:50:2f:51:87:
60:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:52:0E:0E:5F:7B:40:4B:53:BD:84:74:34:1E:FC:6D:CE:F8:DA:76
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aFIODl97QEtTvYR0NB78bc742nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c1:8a26::/48
Signature Algorithm: sha256WithRSAEncryption
6c:17:1e:7d:60:7d:a1:54:92:0b:d4:24:b2:94:0d:f1:f4:18:
a9:f1:da:dc:8c:37:46:e5:40:b4:77:07:69:60:57:82:b5:97:
c1:f6:f1:5e:bc:03:9e:fe:82:d8:d0:43:c2:4d:ff:f5:00:9e:
01:d3:4b:60:55:3a:01:eb:50:0e:c9:bd:57:e0:c6:5e:da:7a:
a4:e9:08:a1:d7:e9:cc:75:6f:ad:4d:6b:42:ae:d4:d0:32:9f:
08:73:03:39:97:3b:2c:3a:05:91:16:66:79:cd:15:66:f1:61:
fc:66:74:10:2f:1d:5e:6d:aa:1b:b4:07:db:51:d9:02:31:52:
55:09:1b:94:77:61:62:b6:c9:18:55:d9:5c:09:a1:f2:52:5f:
78:9c:56:73:b3:13:54:62:fd:80:06:9c:36:ae:32:84:8a:f6:
6e:ee:5e:78:ca:34:86:4c:3f:25:b0:5b:40:ce:42:93:6e:1f:
71:ec:76:96:b3:dd:55:45:64:45:18:da:95:ba:e9:ed:fd:43:
60:4f:d0:b2:36:a8:04:7c:84:d3:0e:05:9c:8d:08:74:88:22:
ad:e3:d5:fd:62:6b:8e:a1:2e:09:52:c3:86:f6:5f:ae:ac:c3:
5e:32:a9:22:eb:2d:6f:e8:1d:bf:3a:b1:85:6c:8e:75:1a:9f:
22:ba:23:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:07 2024 by rpki-client on console-fra.rpki-client.org