Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ebJB5FW8Sr1XSKZAkohB3gyEEjs.roa
File: ebJB5FW8Sr1XSKZAkohB3gyEEjs.roa (raw, json)
Hash identifier: murzH4Hh4Dg65Y7wQSzBcMb3LCIU9yWphl9iY0QLnMk=
Subject key identifier: 79:B2:41:E4:55:BC:4A:BD:57:48:A6:40:92:88:41:DE:0C:84:12:3B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018EC2D797D84B6D368BBCC1033173EF8A89
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ebJB5FW8Sr1XSKZAkohB3gyEEjs.roa
Signing time: Tue 09 Apr 2024 12:31:32 +0000
ROA not before: Tue 09 Apr 2024 12:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200436
IP address blocks: 2a10:ccc1:109::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:d7:97:d8:4b:6d:36:8b:bc:c1:03:31:73:ef:8a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 9 12:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79b241e455bc4abd5748a640928841de0c84123b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5b:73:a8:78:30:38:a1:80:3d:17:66:3c:c6:
2a:f3:d4:37:fe:94:d1:eb:4e:a7:d5:88:ae:bf:5f:
3e:0d:bc:db:17:09:88:92:01:42:94:fc:fc:38:45:
27:7e:5d:62:2a:8c:50:f4:fc:b0:6c:87:34:70:c6:
08:f6:12:f3:3f:cf:80:32:95:48:76:d7:10:08:8d:
fa:40:78:d6:04:09:69:b3:77:b3:08:3d:0a:82:db:
ba:1b:fb:fe:96:73:bd:f1:db:4d:fe:f1:f1:71:35:
22:00:e2:5f:f5:10:b0:28:e0:f3:22:d4:fb:cf:59:
8a:82:4d:1e:f9:d3:7f:b4:4a:99:1f:00:2c:85:d3:
23:09:63:7e:36:b2:15:c7:87:9a:3d:2f:c0:55:dd:
2f:70:f4:49:3f:43:00:77:7b:8e:f0:a8:81:45:09:
e4:c1:6b:25:3a:9d:19:f6:6c:5f:f2:81:b1:a5:76:
83:92:05:53:d6:e1:cb:4d:40:af:7c:de:56:20:6c:
35:0f:29:65:c2:33:ea:9a:8a:f0:ca:5e:10:1c:4b:
cb:f7:13:7a:48:9b:ea:b0:6d:01:64:fb:92:dc:c6:
4b:aa:a1:ac:5e:e6:54:a1:72:7a:b0:71:fc:b1:39:
28:13:05:83:2f:dd:b1:68:b9:86:ca:e0:b2:d6:43:
29:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B2:41:E4:55:BC:4A:BD:57:48:A6:40:92:88:41:DE:0C:84:12:3B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ebJB5FW8Sr1XSKZAkohB3gyEEjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc1:109::/48
Signature Algorithm: sha256WithRSAEncryption
81:78:a8:63:4c:bc:34:45:c1:b5:be:30:53:06:4a:bf:c7:6c:
68:49:a4:9e:45:a7:fc:da:cf:c7:9d:b8:84:97:40:a5:18:95:
50:c2:f1:5a:21:11:24:25:85:aa:b2:ce:48:0f:79:48:9f:bd:
a5:5a:fe:0e:c1:0f:f0:fa:43:ce:aa:21:d8:cb:c7:de:a4:1f:
40:bf:ca:53:a1:29:b1:d2:85:e9:0b:af:32:2b:9c:42:56:63:
0a:fc:f0:25:ad:ab:41:b5:79:16:56:87:41:33:7a:80:01:07:
bc:6b:2c:c1:84:92:ea:68:ae:f4:53:39:f6:fc:49:de:d3:88:
5f:39:28:8a:11:32:6d:1c:a3:0c:af:76:ae:09:43:0c:c3:68:
ee:c1:13:d8:14:39:4c:be:f9:0e:88:de:34:1e:1b:ca:8d:ef:
97:7f:d4:15:7f:89:6b:37:f0:61:9e:4c:27:1f:f6:f2:b6:9f:
25:33:3e:4b:f6:c8:f4:a0:b8:f7:b8:31:4a:3a:d3:be:74:ec:
fb:37:31:56:be:b5:df:15:5e:0b:7e:aa:70:3e:cd:f3:5e:91:
87:07:78:45:39:e5:98:98:af:ae:6a:ab:2c:42:a6:55:ec:27:
fa:d1:b4:bc:75:71:c9:78:1a:e0:cc:e1:5b:90:05:1d:e0:66:
08:ab:70:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:35 2024 by rpki-client on console-fra.rpki-client.org