Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bZwVP25V13WJPvdNpTrVdvBI-tI.roa
File: bZwVP25V13WJPvdNpTrVdvBI-tI.roa (raw, json)
Hash identifier: AE0ebg7JQ79tKg0mO6aKm2ecK9+ftpzDEgKO5halNBE=
Subject key identifier: 6D:9C:15:3F:6E:55:D7:75:89:3E:F7:4D:A5:3A:D5:76:F0:48:FA:D2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019171AFF8547C9FA12091AEACDB9ED59FD0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bZwVP25V13WJPvdNpTrVdvBI-tI.roa
Signing time: Tue 20 Aug 2024 21:27:23 +0000
ROA not before: Tue 20 Aug 2024 21:27:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 2a0e:97c1:d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:71:af:f8:54:7c:9f:a1:20:91:ae:ac:db:9e:d5:9f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 20 21:27:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d9c153f6e55d775893ef74da53ad576f048fad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:27:6a:4c:b6:e0:4a:df:50:25:54:3b:2a:
dd:55:d4:30:f1:9e:16:52:1e:ce:00:42:c6:f9:e7:
54:83:ea:2c:92:5a:b7:39:ae:a5:55:dc:6f:05:ee:
e1:b3:01:c0:75:c0:b8:74:a1:43:0f:49:58:52:88:
91:a9:63:9a:92:48:6d:39:84:a7:ab:0f:bd:3b:78:
93:2f:68:e1:0f:68:43:a0:44:d3:58:18:ed:5e:e3:
fe:91:42:4a:e3:7a:7b:16:78:6e:01:81:2b:59:0b:
9e:4e:91:28:26:d0:d2:e6:e4:69:28:3f:6d:fa:98:
53:5b:a5:35:f9:5a:b9:53:7e:f8:5c:42:82:c1:57:
c8:fb:0b:84:43:67:f8:53:8a:33:55:4b:04:89:55:
b8:eb:9d:f9:83:c9:d6:68:10:c2:ea:e2:cf:7f:4d:
25:ae:96:36:9d:4c:19:0b:71:e3:cf:00:32:a0:a0:
f5:80:68:7f:56:e2:98:49:8a:8f:6c:b6:93:e6:cd:
20:24:2d:ae:f1:a6:61:a6:b8:ad:5b:88:25:e0:fb:
bb:29:2e:43:14:ba:b8:0c:23:52:89:e1:83:7e:05:
f6:fd:67:cd:14:cd:c3:12:95:0c:be:9e:d5:88:73:
1a:93:f1:9d:f0:be:d8:1a:c7:1a:e3:be:35:07:fb:
58:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9C:15:3F:6E:55:D7:75:89:3E:F7:4D:A5:3A:D5:76:F0:48:FA:D2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bZwVP25V13WJPvdNpTrVdvBI-tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c1:d0::/44
Signature Algorithm: sha256WithRSAEncryption
15:f8:cd:91:54:ce:d5:00:d7:a7:55:bf:07:65:42:34:ee:e2:
fb:d3:d2:67:c4:e2:22:a9:8a:6c:be:17:f7:9c:ea:60:5f:e6:
ca:a7:66:72:96:6c:0e:a5:c1:ed:3c:27:01:78:26:c3:43:b6:
a9:7a:e2:34:85:7c:45:66:b2:7f:dd:fd:00:79:95:e6:25:64:
3c:22:5a:57:01:78:c0:16:3f:98:6d:71:40:41:a5:88:94:02:
59:02:22:1a:3a:ad:9c:b7:85:45:58:5a:13:d9:53:e3:04:b1:
98:99:30:6c:a6:c9:12:4d:e3:87:c9:7e:08:be:91:76:23:90:
8a:b5:38:d6:d2:f5:5b:45:76:60:58:57:8b:7f:77:63:42:7c:
50:2b:81:fe:af:91:a6:6a:6f:53:dd:34:e9:e8:cb:9f:db:7a:
d1:1e:5c:95:d5:de:c8:ea:49:48:dd:29:2e:cd:f0:aa:85:6e:
b0:e6:1c:ce:60:75:c2:5a:f8:04:af:a5:1f:19:36:92:a0:ee:
e7:73:db:9b:20:f0:c5:15:8a:68:db:de:cd:98:d9:f3:54:bc:
a5:b2:92:77:2c:60:53:04:65:d4:b0:57:54:e1:33:d1:7d:3e:
f6:f9:59:a1:c5:fb:c1:70:f5:0b:37:0c:bb:89:a1:07:af:f7:
57:59:20:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:31 2024 by rpki-client on console-fra.rpki-client.org