Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dBgn0aVnecS2OaUm14Ssb_1RL9g.roa
File: dBgn0aVnecS2OaUm14Ssb_1RL9g.roa (raw, json)
Hash identifier: aR8J1vuKeOH4pSDkP1fp/RjoSCCea16tvOp5U+e9fqc=
Subject key identifier: 74:18:27:D1:A5:67:79:C4:B6:39:A5:26:D7:84:AC:6F:FD:51:2F:D8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018E01B11F81087C737EA5EB54002BCBB050
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dBgn0aVnecS2OaUm14Ssb_1RL9g.roa
Signing time: Sun 03 Mar 2024 00:22:48 +0000
ROA not before: Sun 03 Mar 2024 00:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44413
IP address blocks: 2a0e:97c0:e50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:01:b1:1f:81:08:7c:73:7e:a5:eb:54:00:2b:cb:b0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 3 00:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=741827d1a56779c4b639a526d784ac6ffd512fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1e:95:79:30:9c:e6:d5:92:6e:4c:6c:7e:59:
4e:ee:5e:1d:53:f1:10:21:37:32:03:ef:69:f6:24:
1e:de:31:3b:00:a1:d0:c5:74:7f:b5:14:04:8b:a1:
5d:2d:d0:4f:78:e6:d7:7c:76:c6:7b:c7:91:1c:a2:
8f:6f:4d:76:8e:21:9a:f2:33:05:2c:86:58:b1:bb:
2c:d6:84:24:49:1f:09:e6:4d:ad:e2:6b:a4:16:03:
ca:af:bb:e8:97:3b:13:bb:c7:93:30:66:98:07:58:
12:8e:c8:d7:9c:39:fb:b6:6b:ec:03:ab:d0:14:22:
89:da:0f:65:70:74:da:4a:c0:05:1d:fe:2a:99:28:
f2:23:bf:e9:22:fd:52:34:11:9e:e5:8f:9e:99:45:
ea:d3:45:07:42:4b:d0:62:9b:51:b9:f2:d7:7a:73:
54:2d:b3:1e:7b:6a:f5:00:f4:82:52:b6:4e:5f:30:
46:f8:8f:68:65:1e:61:c3:28:fb:27:5d:4f:04:6d:
41:d3:07:d2:33:d0:51:7f:14:f9:a6:f8:27:4a:c0:
89:f9:a1:76:64:97:08:e9:b4:d1:38:b4:a5:49:b0:
c7:f1:82:c7:ac:2f:84:eb:dc:97:73:74:00:ef:a2:
89:90:55:d1:2c:06:6d:14:86:39:de:c9:f8:3d:f7:
d4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:18:27:D1:A5:67:79:C4:B6:39:A5:26:D7:84:AC:6F:FD:51:2F:D8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dBgn0aVnecS2OaUm14Ssb_1RL9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:e50::/44
Signature Algorithm: sha256WithRSAEncryption
6e:01:8e:95:d4:6a:3d:78:f1:7b:9a:0c:e2:07:0f:51:38:e5:
36:e3:fd:98:5b:0c:54:ef:8f:6e:17:95:08:97:01:ac:95:6c:
23:81:08:3d:a0:cb:ba:52:0a:0e:d0:53:6c:64:85:39:20:38:
fe:94:17:34:e7:8b:eb:96:a6:b5:23:93:64:a2:70:f6:0a:22:
39:5d:10:66:8b:bd:48:b0:71:c4:20:ae:7a:e6:c0:30:f2:51:
a0:0d:ac:81:e1:2f:0b:71:df:11:a6:9b:94:03:fa:b6:26:2e:
74:a5:93:1d:d2:53:80:4e:de:5d:37:5c:47:a4:3c:1e:26:9f:
e6:b0:47:93:05:7b:70:f7:92:d6:fa:ac:09:2e:7d:32:38:4f:
64:9a:46:d0:b6:c1:b1:5d:b1:a1:61:fc:78:9b:bf:dc:8b:52:
68:73:b9:26:b1:11:07:46:18:62:e7:bb:30:bc:89:67:2e:cf:
a9:0a:c4:53:f0:97:7d:d0:0a:74:12:ad:56:8c:08:63:51:76:
bc:cb:d1:99:de:7b:76:df:cc:85:d8:44:e0:c1:24:1d:20:91:
4b:50:80:d8:42:10:e1:94:9c:70:57:96:2d:a3:8b:24:b1:9c:
ed:df:d1:f0:a0:f1:bd:81:16:d2:14:e3:83:9a:b8:87:37:8d:
08:f3:f4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:17:52 2024 by rpki-client on console-ams.rpki-client.org