Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/evv9hRFiPZj2Ef3dGM-fKqN2NZ8.roa
File: evv9hRFiPZj2Ef3dGM-fKqN2NZ8.roa (raw, json)
Hash identifier: DuxoWPI4HNH6KKAvfYU8fuXp0W+TUSJN/an/bfxWb3M=
Subject key identifier: 7A:FB:FD:85:11:62:3D:98:F6:11:FD:DD:18:CF:9F:2A:A3:76:35:9F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD0B9AF1684BBBBD85683D34B678CA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/evv9hRFiPZj2Ef3dGM-fKqN2NZ8.roa
Signing time: Tue 02 Jan 2024 10:34:18 +0000
ROA not before: Tue 02 Jan 2024 10:34:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204901
IP address blocks: 2a0e:b107:f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:0b:9a:f1:68:4b:bb:bd:85:68:3d:34:b6:78:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7afbfd8511623d98f611fddd18cf9f2aa376359f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:c7:32:8d:13:d8:a2:6f:65:42:ca:78:41:
d9:e0:f7:a8:d5:fe:cf:e2:b5:ab:a3:8a:6e:01:78:
b1:73:74:90:07:3c:99:65:dd:3f:91:87:e3:38:b7:
d4:3f:06:53:fa:50:b1:63:78:35:fe:cd:5d:e8:5d:
0f:a2:92:b2:1b:e3:02:d1:0f:15:97:e5:37:ce:08:
84:79:b4:5c:89:68:ea:42:2b:63:e6:32:63:fa:8a:
f5:d7:fa:28:13:e5:5d:e2:e8:96:d8:18:cd:5a:18:
07:9a:3c:b1:7b:97:95:c5:db:17:4b:c4:e5:02:fb:
6f:e8:db:fc:0f:cd:73:87:2b:27:b5:6c:c4:33:ec:
3f:02:be:0c:3b:f2:b5:7b:80:ef:98:66:e6:51:48:
84:69:21:d0:f6:c8:6a:62:2b:58:5a:16:fb:34:ea:
a1:e0:48:8b:50:fb:69:53:24:c5:1b:41:9b:bd:71:
6a:cf:70:05:ea:8e:2d:e2:ee:f7:1f:d7:f3:2f:a3:
16:58:bc:72:ac:4d:61:dd:72:66:a0:76:bd:df:d5:
89:5f:e0:a1:e8:32:4a:8c:f7:30:89:d6:84:0f:65:
9c:a0:8f:30:a6:16:4c:b6:ca:ff:5c:be:93:a5:34:
ff:61:f8:94:2a:36:38:7e:ff:1f:78:d9:9c:a4:3a:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FB:FD:85:11:62:3D:98:F6:11:FD:DD:18:CF:9F:2A:A3:76:35:9F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/evv9hRFiPZj2Ef3dGM-fKqN2NZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:f0::/44
Signature Algorithm: sha256WithRSAEncryption
78:40:6d:8e:02:ae:d1:c7:64:f3:64:06:31:b6:41:eb:fc:3f:
87:6e:eb:a9:f2:b4:66:1d:6c:d0:73:97:aa:af:2e:6a:1b:7f:
e2:d1:49:10:66:b3:2f:76:81:61:4c:48:6c:6d:78:ce:4d:8f:
13:6d:c7:68:3d:ef:71:a2:54:97:1f:47:cd:f4:b3:6a:44:72:
4f:d3:9f:5f:34:a4:6f:8e:de:26:3c:3d:03:1c:d0:da:13:98:
0f:87:91:4e:a2:48:b2:9b:5a:fb:3d:d8:49:1f:20:00:87:a5:
d0:d5:0d:4a:15:a4:24:8e:6a:6e:54:05:9b:0a:01:ba:bc:15:
37:2f:86:aa:25:9a:18:5f:c2:d6:01:f4:a5:ac:34:f6:da:12:
5c:d8:db:18:8d:f8:9f:d6:03:25:ad:84:99:f8:d6:a0:0d:4f:
52:37:74:72:95:6a:41:40:67:fc:bb:c6:5e:02:4c:51:7e:cb:
5c:96:5b:b4:de:0d:1e:a3:65:93:da:77:29:f2:0f:49:35:d8:
54:c7:36:c6:39:eb:48:da:bc:aa:2f:bd:17:35:e9:ad:40:c5:
1e:3f:6e:9a:92:1b:be:c1:ac:0f:31:94:3c:70:8c:8f:2e:65:
0c:d2:1d:65:c2:da:13:9e:d2:75:56:3a:25:63:c4:83:a9:32:
01:b6:9e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:40 2024 by rpki-client on console-fra.rpki-client.org