Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eZ1lxVcl4HYqCJ-0HbkPstgQ_LA.roa
File: eZ1lxVcl4HYqCJ-0HbkPstgQ_LA.roa (raw, json)
Hash identifier: r4PGmNTUN+nDT+LEmvHcqg3d4Zj6JQu1gVO5LXTklOI=
Subject key identifier: 79:9D:65:C5:57:25:E0:76:2A:08:9F:B4:1D:B9:0F:B2:D8:10:FC:B0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCDF2498A10FF491BA17DE6B8766E9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eZ1lxVcl4HYqCJ-0HbkPstgQ_LA.roa
Signing time: Tue 02 Jan 2024 10:34:07 +0000
ROA not before: Tue 02 Jan 2024 10:34:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141445
IP address blocks: 2a0e:b107:12c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:df:24:98:a1:0f:f4:91:ba:17:de:6b:87:66:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=799d65c55725e0762a089fb41db90fb2d810fcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:6e:7c:c4:b5:58:97:9c:8c:cf:c0:23:b7:
ef:c2:d7:98:58:9a:d7:a0:53:8c:ae:26:40:46:e3:
95:64:82:c7:c5:ec:e0:b1:da:6c:1b:a6:cf:e2:88:
e9:09:ed:a5:db:13:70:66:18:aa:c9:ec:59:57:f0:
2c:76:c2:80:ad:48:72:f6:df:c8:96:02:69:a9:f8:
60:44:58:26:ba:fe:8b:dc:da:00:ec:3f:2d:0a:f0:
3d:f2:4d:a3:0d:5c:c8:32:60:de:02:1f:ef:0a:0b:
fd:e4:72:a4:67:66:18:c4:df:d1:7e:f9:8d:38:68:
b5:e2:02:4b:30:33:c6:e4:de:a4:6b:0c:6e:e3:1a:
45:7a:34:b3:37:bd:0e:74:57:e3:57:fd:25:14:61:
7c:ed:db:88:d0:13:7b:16:ff:cb:23:06:d3:bd:79:
1d:bd:bc:fe:b6:6e:8f:d7:d8:9b:21:6e:aa:6d:c4:
62:46:6d:fb:98:85:9a:5a:d1:47:4a:49:d2:9c:fa:
60:94:e2:3e:50:e0:6e:72:81:72:4e:32:c2:98:3c:
f4:b0:3a:66:52:55:dd:a4:11:51:06:17:bf:40:5b:
46:f9:11:47:f2:36:1b:c8:51:50:0d:88:3a:24:34:
e9:b8:d4:72:52:ba:68:d2:04:59:cb:25:d6:59:2f:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9D:65:C5:57:25:E0:76:2A:08:9F:B4:1D:B9:0F:B2:D8:10:FC:B0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eZ1lxVcl4HYqCJ-0HbkPstgQ_LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:12c0::/44
Signature Algorithm: sha256WithRSAEncryption
54:b2:d3:8e:09:43:3e:ce:ae:5d:a2:86:70:bd:69:27:2c:2c:
b5:dd:2c:f2:80:1d:4d:7c:cc:f7:3b:f7:52:b1:52:9c:4d:a9:
14:c2:d5:15:48:3f:3e:3c:71:9b:b3:1d:47:de:f7:92:7d:0c:
81:c0:6d:cc:03:48:28:7e:c2:8f:f1:f4:d1:91:62:aa:a9:21:
b5:6e:c1:95:be:a3:f4:12:e5:20:3f:3f:1e:70:f4:be:42:58:
0c:06:37:60:3e:b1:6d:82:7c:96:56:79:ad:a3:ce:fd:21:87:
8f:57:3c:47:0f:d4:59:49:c2:c7:4e:71:5a:42:04:c5:98:dc:
4b:a7:6f:a8:af:a3:c4:5b:2f:f9:d7:50:a3:a2:42:0b:e4:40:
02:ca:fe:fd:b8:11:9e:b8:30:c2:e2:eb:1e:90:1a:b6:5b:93:
26:22:b9:de:8a:73:39:a1:0c:17:b8:a1:a9:df:32:c7:fb:51:
1f:23:c7:1e:af:3d:29:39:e7:66:17:15:26:d2:01:18:37:71:
4b:70:5e:93:4f:d8:56:fc:d2:dc:8c:88:85:75:6f:d1:4c:9d:
78:30:9e:5e:a1:32:46:10:b3:d5:14:ff:90:9e:42:58:e2:5c:
bd:2d:fb:c0:17:b8:17:16:5d:1f:08:e4:58:12:0e:2c:c2:59:
f8:0f:0a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:22:03 2024 by rpki-client on console-fra.rpki-client.org