Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e-d-w_cf3K1xZKCLxdK5fMspwv4.roa
File: e-d-w_cf3K1xZKCLxdK5fMspwv4.roa (raw, json)
Hash identifier: T33uoEjPqZhZdUWfx1o0izpjga3udEKZ/wo2zPZjvsc=
Subject key identifier: 7B:E7:7E:C3:F7:1F:DC:AD:71:64:A0:8B:C5:D2:B9:7C:CB:29:C2:FE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018EE88CD11A3D1A7F19B48F98F1554188D8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e-d-w_cf3K1xZKCLxdK5fMspwv4.roa
Signing time: Tue 16 Apr 2024 20:15:26 +0000
ROA not before: Tue 16 Apr 2024 20:15:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211275
IP address blocks: 2a0e:97c0:410::/48 maxlen: 48
2a0e:97c0:411::/48 maxlen: 48
2a0e:97c0:412::/48 maxlen: 48
2a0e:97c0:41c::/48 maxlen: 48
2a0e:97c0:41d::/48 maxlen: 48
2a0e:97c0:41f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e8:8c:d1:1a:3d:1a:7f:19:b4:8f:98:f1:55:41:88:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 16 20:15:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7be77ec3f71fdcad7164a08bc5d2b97ccb29c2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:45:73:e6:5c:7a:d7:31:59:32:8a:22:75:97:
b1:5c:cf:c0:80:82:f8:c0:33:4d:37:62:e0:c9:25:
0d:37:ba:26:6c:f8:cf:75:d5:be:72:a7:b9:cb:17:
24:a5:5c:88:cc:c3:b5:ff:09:33:d4:2b:9f:00:fc:
cc:90:7d:18:62:ef:a3:98:8c:33:d5:9e:12:dc:ab:
c0:2d:db:ef:2e:c8:46:1f:d5:45:42:72:01:8e:45:
24:69:f7:c5:1a:e2:ac:d6:2f:e8:84:ce:f8:95:66:
79:c6:a4:09:69:77:cb:93:f5:a6:26:7e:d1:9a:83:
fb:f3:5e:cf:c7:71:e4:fa:0d:ac:7a:52:b8:6f:0b:
80:26:06:49:96:79:19:76:c6:5b:7b:68:c7:1f:cf:
5d:e4:82:fe:db:94:a3:45:7e:2b:89:ba:84:28:2e:
58:9c:d1:59:3f:1d:6a:81:68:6a:92:f5:4c:88:4b:
5f:21:12:93:b3:cd:84:d1:27:d7:5f:4f:39:85:b9:
be:a2:b2:36:67:5d:b6:6d:f5:f8:a3:4f:5e:d5:eb:
29:08:3b:6d:7e:68:1f:26:f5:b8:4b:e9:fb:3a:c2:
b7:66:8e:d4:55:ef:9a:ef:aa:97:a4:ca:86:3b:fb:
f1:55:fa:45:3b:81:bd:bd:99:d5:77:d6:f2:c4:6a:
b5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E7:7E:C3:F7:1F:DC:AD:71:64:A0:8B:C5:D2:B9:7C:CB:29:C2:FE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e-d-w_cf3K1xZKCLxdK5fMspwv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:410::-2a0e:97c0:412:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:41c::/47
2a0e:97c0:41f::/48
Signature Algorithm: sha256WithRSAEncryption
7c:f5:21:65:62:a1:9d:ad:fa:34:f3:10:36:ec:83:70:26:2c:
20:a4:a5:15:d4:17:ed:d7:da:bb:5a:4d:26:ad:37:1a:24:76:
f5:62:78:25:8e:1d:4a:4f:6f:0b:78:d5:8c:f3:08:4d:7c:6d:
18:c8:f5:6e:ac:19:55:92:cf:e0:8e:d8:86:1b:f7:5b:92:07:
34:8f:6c:ef:58:ed:ac:bc:55:23:4f:fa:d3:68:ea:bd:81:ae:
54:2d:82:7a:9c:b7:32:4b:dc:dd:93:e2:c8:f8:64:4d:9d:de:
25:db:bf:84:94:4a:e8:56:ed:d4:c7:cd:4a:10:d3:24:4b:78:
f4:2d:37:a6:c8:d7:0a:7c:64:f5:c2:22:29:d2:08:b2:69:29:
06:37:d4:94:5a:e9:73:dc:a6:18:d6:de:35:3f:eb:50:4e:87:
98:7b:84:90:a5:1a:e0:8f:a2:d9:97:b6:f4:7e:76:ec:62:8a:
1f:92:e7:26:44:ea:9a:7c:4e:83:9b:b9:6a:f8:b9:21:32:a7:
aa:b8:a7:fd:f2:a0:3d:19:98:ae:c2:5d:bd:3c:ac:f8:66:a7:
ca:79:69:7b:bf:ab:9f:de:91:0c:7c:9e:67:c6:7f:e0:5a:c7:
49:bf:de:34:ec:af:e6:e8:84:25:b4:39:76:d2:ff:da:51:ed:
36:84:34:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:41:05 2024 by rpki-client on console-ams.rpki-client.org