Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dpeAsrtSe46wqdt7yzcvsZyyRNU.roa
File: dpeAsrtSe46wqdt7yzcvsZyyRNU.roa (raw, json)
Hash identifier: zbBpMRGUDouFAp2sinUNq4mhTXWC1h5WZHReNuRkpxU=
Subject key identifier: 76:97:80:B2:BB:52:7B:8E:B0:A9:DB:7B:CB:37:2F:B1:9C:B2:44:D5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCBFB2C4FA67BD8B5F609E3281C3C1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dpeAsrtSe46wqdt7yzcvsZyyRNU.roa
Signing time: Tue 02 Jan 2024 10:33:59 +0000
ROA not before: Tue 02 Jan 2024 10:33:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9886
IP address blocks: 2a10:2f00:12a::/48 maxlen: 48
2a0e:b107:f08::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:bf:b2:c4:fa:67:bd:8b:5f:60:9e:32:81:c3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:33:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=769780b2bb527b8eb0a9db7bcb372fb19cb244d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d8:bc:9c:f0:82:26:79:f3:b9:ce:51:43:a2:
16:da:41:aa:13:31:70:4c:bb:e3:e6:a5:19:6d:23:
ed:c0:68:79:4c:01:33:8d:6b:44:1e:4d:dd:44:98:
b6:72:67:b8:cf:0a:eb:ac:f7:b5:ae:a7:47:6c:ca:
90:a2:1a:74:18:e8:ba:9a:bf:2d:9c:e4:7e:ef:0d:
10:41:00:83:7a:99:0a:45:ef:02:67:6b:b5:15:b6:
c0:7b:12:b7:a0:20:bd:7f:46:7f:04:5b:e2:36:9e:
92:0c:22:b5:50:7a:b1:29:38:28:98:e1:9d:fb:a0:
ea:8f:d8:06:9c:96:4f:9f:0d:da:69:66:6c:03:9b:
a9:8a:0c:0f:52:f0:57:07:55:45:1a:a6:c3:c4:0a:
2e:06:e9:f8:f1:24:88:68:ec:4b:77:b8:19:c5:90:
bb:0b:97:73:be:4f:63:a6:55:97:60:ad:77:03:96:
ff:97:a8:d3:ba:51:ee:e3:b5:f0:ac:16:b5:2b:92:
5a:18:d4:84:ce:b1:31:83:9f:18:a0:6a:66:2a:bd:
66:c8:9e:88:ce:1b:26:bd:4f:25:8b:15:cd:0a:b9:
14:68:d2:5e:5b:0b:c1:63:a4:66:8c:7e:88:34:ef:
fd:a5:a2:7b:62:a8:b4:a1:8d:ed:c4:45:5e:7c:bb:
ab:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:97:80:B2:BB:52:7B:8E:B0:A9:DB:7B:CB:37:2F:B1:9C:B2:44:D5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dpeAsrtSe46wqdt7yzcvsZyyRNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:f08::/45
2a10:2f00:12a::/48
Signature Algorithm: sha256WithRSAEncryption
26:0c:51:8c:77:76:5a:2c:ad:8c:2d:6e:6c:20:46:0e:f4:58:
b4:74:58:c4:18:92:61:9f:60:b8:be:9a:91:00:27:94:4f:c7:
8d:1c:b1:e3:90:ff:bf:19:7c:5a:fa:c2:d0:90:c7:75:5f:a0:
5f:9a:77:82:05:13:43:87:cd:d5:85:38:d6:f1:93:a5:c3:a4:
e4:22:1e:37:f8:d7:48:f0:02:83:35:08:4b:52:1f:60:1e:ad:
4f:9e:47:c5:86:92:27:d4:8d:7c:e0:23:ae:73:40:8d:ec:93:
98:bd:6f:25:e9:01:65:93:ee:74:2f:6b:7c:69:55:45:c7:83:
5f:45:83:85:c9:25:a1:bc:15:40:c5:fc:ec:58:89:27:5f:c6:
64:70:91:d7:2e:22:f3:e5:18:5e:1d:08:a6:99:fc:1b:0f:e2:
9e:41:08:03:89:91:63:6b:31:1e:19:71:20:83:d8:00:fd:90:
32:31:51:45:75:d9:b5:f1:1b:1e:30:a2:3f:54:e8:a8:45:a7:
0a:71:7e:75:73:b2:44:a5:9e:07:89:15:a8:dd:62:16:f3:0c:
97:dd:7d:69:09:03:71:62:53:cf:37:53:fc:a7:f5:f6:7c:12:
08:9f:0e:66:a0:a1:3c:cc:a4:09:3c:00:00:db:3e:ba:7e:f9:
6a:98:68:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:39:05 2024 by rpki-client on console-fra.rpki-client.org