Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/alyeKMvLr0xGw-WGphjkswB2Z2w.roa
File: alyeKMvLr0xGw-WGphjkswB2Z2w.roa (raw, json)
Hash identifier: mEsvD3OMgk+HkEG7nZs38UmHd6Y9nGIuoFtNU8NM6p8=
Subject key identifier: 6A:5C:9E:28:CB:CB:AF:4C:46:C3:E5:86:A6:18:E4:B3:00:76:67:6C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0193008A93231A5BA0881CFFC876C021E51C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/alyeKMvLr0xGw-WGphjkswB2Z2w.roa
Signing time: Wed 06 Nov 2024 08:15:01 +0000
ROA not before: Wed 06 Nov 2024 08:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198879
IP address blocks: 2a06:de01:150::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:8a:93:23:1a:5b:a0:88:1c:ff:c8:76:c0:21:e5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 6 08:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a5c9e28cbcbaf4c46c3e586a618e4b30076676c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:e2:6a:b5:94:c4:97:44:b6:6e:b1:3a:fb:
12:9e:90:fc:6c:06:b1:dc:0a:07:25:7b:0a:a8:b0:
85:fa:a2:35:6b:20:44:45:0b:8a:0f:e1:6f:55:02:
d7:78:70:ca:14:a6:fd:b0:42:fb:75:42:c2:58:07:
7f:3d:25:1b:d9:2a:50:4b:7d:67:83:26:e6:6e:00:
31:c6:15:2e:ce:b3:55:49:bb:0a:74:8d:c8:0e:9c:
f2:d8:ac:e5:54:df:4d:7a:ea:b4:67:3b:d8:dd:31:
84:c4:9e:45:db:8a:df:b9:95:57:b9:c8:97:ed:77:
3a:e4:f4:f7:df:69:ac:26:53:42:8e:fc:3d:03:3c:
ab:5d:a0:d9:b8:26:26:4a:d5:22:53:6f:3a:12:36:
6e:19:c8:57:5d:83:df:ed:a1:1c:93:95:c5:75:3d:
74:b9:9c:08:18:c8:01:9a:db:76:8a:62:34:c6:07:
81:31:16:bb:bf:4a:d4:cd:00:e7:74:49:a7:52:8f:
27:9e:eb:c6:f6:0f:de:f4:db:b0:82:37:79:8f:c8:
69:0f:c4:1c:35:08:60:fe:5a:7f:4b:d2:2e:24:21:
95:af:52:99:3c:d2:49:ba:97:b6:e2:2b:82:94:ef:
46:b2:e7:c5:33:7e:b1:c2:8a:ab:e0:62:e4:3d:10:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5C:9E:28:CB:CB:AF:4C:46:C3:E5:86:A6:18:E4:B3:00:76:67:6C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/alyeKMvLr0xGw-WGphjkswB2Z2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:150::/44
Signature Algorithm: sha256WithRSAEncryption
83:5d:b8:a8:13:05:d8:05:15:95:81:cc:f2:3b:2a:4a:39:74:
e9:97:d3:23:ac:73:b5:9a:f2:d7:2a:ff:aa:e4:29:2a:2e:36:
e5:3b:47:79:1e:4d:8b:a6:3d:9e:46:43:6c:98:ae:4c:55:38:
75:43:1b:0c:09:22:03:42:2b:6e:fe:56:bb:c2:7b:f4:be:e2:
b2:46:c7:49:3f:ad:97:bd:cf:58:45:a3:9a:e9:60:6a:e5:6f:
1c:db:89:6e:2f:b9:de:b1:0b:0f:1e:f0:a8:eb:36:9e:e2:60:
d6:cf:7f:14:b7:dc:4c:a3:79:bc:ba:99:2a:23:ed:c9:4b:5c:
36:53:cc:1f:e3:0c:95:90:d8:d7:4a:1c:4e:f1:2c:88:b5:75:
ea:05:8e:39:e7:82:eb:b5:b8:2e:df:d7:ec:b6:dc:47:03:12:
d0:ab:9a:06:03:2a:21:4f:24:64:58:96:a3:11:42:72:17:36:
ac:cf:c2:25:f8:f6:91:3a:9f:61:b3:9a:de:51:0b:bd:c1:1c:
97:91:d7:a7:1e:ad:a4:bd:1c:dd:26:74:91:4b:56:ba:4b:13:
5f:cd:4f:82:c8:45:6b:16:f5:2d:bd:62:bd:1c:14:fa:f1:64:
a4:75:b3:3a:8b:eb:16:04:76:e6:61:14:6a:f1:f7:4b:cb:63:
58:cf:07:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:31 2024 by rpki-client on console-fra.rpki-client.org