Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fZGjZozrWfdszCpuzBberKSv6yo.roa
File: fZGjZozrWfdszCpuzBberKSv6yo.roa (raw, json)
Hash identifier: xEXx2ahOb0bQefFiTS6dj1/0Mq0dQBYWZjK7VNpH614=
Subject key identifier: 7D:91:A3:66:8C:EB:59:F7:6C:CC:2A:6E:CC:16:DE:AC:A4:AF:EB:2A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CFA13A887CAF405CF71BB23C6317B5412
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fZGjZozrWfdszCpuzBberKSv6yo.roa
Signing time: Thu 11 Jan 2024 19:50:41 +0000
ROA not before: Thu 11 Jan 2024 19:50:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215738
IP address blocks: 2a06:de00:700::/44 maxlen: 48
2a06:de00:7f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fa:13:a8:87:ca:f4:05:cf:71:bb:23:c6:31:7b:54:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 11 19:50:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d91a3668ceb59f76ccc2a6ecc16deaca4afeb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b0:49:fd:57:19:9f:48:40:11:9d:cf:0a:09:
e5:00:dd:66:b2:f6:7c:0e:47:31:a3:5d:5f:51:db:
44:ed:db:bb:c9:65:bf:b0:bf:80:61:42:3e:fd:58:
9d:f4:48:d9:0c:7b:03:6c:00:4c:80:ac:13:8b:58:
1c:b2:de:d6:da:49:f1:bf:5a:f8:4d:d5:ac:15:13:
37:a8:de:ef:1f:01:60:13:b4:81:39:6b:6b:bd:88:
a8:86:a1:cd:b4:b9:8f:b2:3f:76:49:28:59:0e:cc:
b2:9f:de:f0:f2:e0:0d:a6:5f:66:55:91:05:90:a0:
9b:1a:b3:ae:b8:64:66:bd:e6:0e:22:6c:8c:b6:50:
f8:97:b3:8e:d0:a9:f7:12:73:ef:b4:72:70:11:d2:
b7:87:84:42:5e:d3:4a:21:de:fe:a0:b8:34:f9:f9:
82:1e:91:1c:61:c8:8a:3f:0e:cc:3f:62:8c:a6:1d:
d4:89:ce:7b:69:f6:00:8f:30:72:12:ff:c1:bc:19:
d5:dd:50:57:5a:43:eb:81:c6:8d:bf:e8:9d:c5:d9:
77:65:60:25:e5:08:eb:38:6f:b4:c9:8b:6a:37:61:
32:57:6c:7b:82:1b:14:23:54:34:29:32:f1:90:8a:
d5:ad:6e:65:6d:32:6f:36:04:3c:c2:9c:65:da:6b:
f0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:91:A3:66:8C:EB:59:F7:6C:CC:2A:6E:CC:16:DE:AC:A4:AF:EB:2A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fZGjZozrWfdszCpuzBberKSv6yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:700::/44
2a06:de00:7f0::/48
Signature Algorithm: sha256WithRSAEncryption
51:27:e0:74:28:10:10:fc:9b:01:de:c6:fb:0b:8a:60:ce:06:
e8:13:83:ae:e7:f4:35:be:ff:e6:27:81:69:35:8b:de:57:2f:
8f:4f:70:f2:74:d1:e3:8c:69:7c:7e:5d:0f:f2:d6:dd:1a:9c:
38:99:4e:d5:57:78:b3:ef:c5:18:90:cb:cf:d2:b9:50:79:1a:
76:c1:45:b9:07:12:86:31:bb:a1:4e:00:85:3d:80:3c:7d:b8:
c1:85:58:91:e1:b3:0a:89:57:a1:6c:ab:a1:4f:09:82:63:e3:
b7:97:be:af:64:f6:ae:2b:7e:ca:7f:c3:00:35:fb:16:d0:19:
d5:6f:c2:cf:87:47:24:59:b9:f0:b7:27:99:2d:f4:12:08:2c:
f0:cd:b7:97:42:b7:00:42:34:94:e0:92:2d:8b:a2:e5:21:39:
07:d9:9c:ea:fd:e8:0e:7c:de:50:e5:9e:c7:f1:53:fa:23:aa:
d9:82:10:94:70:5f:21:1c:8d:3f:2c:90:c3:28:36:be:27:6a:
40:7c:9a:65:ad:83:5d:f9:fd:95:f9:d1:32:52:03:38:5a:bd:
b4:f7:90:98:19:4e:70:c9:2b:d4:6a:ba:91:23:a9:40:b8:5e:
4d:f8:56:a1:e8:79:ab:87:db:12:8d:06:3c:1b:fa:51:fc:a4:
05:55:14:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:35:00 2024 by rpki-client on console-ams.rpki-client.org