Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fzHTDZOOzV7Eat6qHGq0Ej3IZTo.roa
File: fzHTDZOOzV7Eat6qHGq0Ej3IZTo.roa (raw, json)
Hash identifier: iHWC3HfBeH8T/iDC0B2wsklpGyOOjTFd8pldTmEs3ik=
Subject key identifier: 7F:31:D3:0D:93:8E:CD:5E:C4:6A:DE:AA:1C:6A:B4:12:3D:C8:65:3A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD5AB61FAE8473B59B7CB3545BF45B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fzHTDZOOzV7Eat6qHGq0Ej3IZTo.roa
Signing time: Tue 02 Jan 2024 10:34:39 +0000
ROA not before: Tue 02 Jan 2024 10:34:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216425
IP address blocks: 2a0e:b107:1d13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:5a:b6:1f:ae:84:73:b5:9b:7c:b3:54:5b:f4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f31d30d938ecd5ec46adeaa1c6ab4123dc8653a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:8f:c7:38:d8:70:0f:be:b2:b4:26:06:4f:
7b:26:79:c6:c1:dd:08:b7:b7:8f:ed:4c:43:1d:c0:
e3:c2:57:1d:31:d6:40:d1:32:2a:ba:95:5a:21:51:
70:38:90:13:c9:e5:18:40:25:4d:69:3b:67:11:c3:
df:bf:43:38:95:fb:bf:cf:4c:62:f0:6b:78:54:f9:
61:3f:3a:08:79:1e:2c:61:11:2a:42:72:e2:af:9c:
bd:fb:1f:06:bf:11:1a:d4:9c:1c:b9:93:fe:66:82:
73:0f:40:e0:bb:6d:4a:a4:82:11:94:d6:0e:27:75:
9b:22:3c:51:23:c6:a1:68:7c:34:ac:9e:40:eb:dd:
f3:30:63:52:ba:54:9f:3c:ac:e9:16:8b:0b:e9:88:
85:f1:6e:7c:ee:9b:c9:d7:97:5f:07:45:6d:8b:9a:
5c:fe:de:d8:ca:53:95:e7:e0:bf:08:55:26:48:77:
1f:b5:5e:36:06:cb:c9:bb:38:c6:64:47:3b:3a:6d:
76:35:23:30:8b:55:95:ab:ff:3d:23:5c:b2:e1:40:
e7:cd:8b:78:6d:22:68:5e:a7:f0:84:e2:68:20:c7:
6c:97:c1:45:e2:0d:fd:92:12:2b:ed:45:44:9a:b5:
46:e9:6b:e2:34:91:6f:2e:93:a7:88:01:2c:08:c6:
8c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:31:D3:0D:93:8E:CD:5E:C4:6A:DE:AA:1C:6A:B4:12:3D:C8:65:3A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fzHTDZOOzV7Eat6qHGq0Ej3IZTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1d13::/48
Signature Algorithm: sha256WithRSAEncryption
6c:91:07:8c:80:eb:bb:10:8d:47:93:72:33:3b:b5:99:c4:52:
b3:07:ae:32:53:f1:81:34:ae:5f:76:0d:a3:a8:e4:23:8e:1b:
e7:86:0b:89:b1:d7:03:3d:32:a6:f6:ec:1d:ff:db:39:40:40:
eb:18:3b:63:a8:ea:be:1e:5c:33:22:ec:f8:d9:05:be:9c:0d:
d0:8b:ca:91:a1:91:7f:00:3c:e8:e6:e4:9c:2c:64:f5:35:fb:
5d:da:a4:b4:f6:62:96:8e:59:0b:70:05:64:ae:4d:19:c7:d8:
1d:88:ed:3a:ec:ae:0b:bd:b6:d5:e6:1c:21:c9:89:0e:fe:f4:
20:13:00:e7:a6:6e:95:dd:6a:6d:73:af:e6:8b:0b:c7:f8:7b:
9f:be:b0:e4:35:a3:a6:eb:c3:07:82:53:00:0e:37:da:67:1c:
15:a9:a5:14:27:1c:54:a9:ff:10:57:5c:a4:e7:da:29:02:7b:
fb:a9:6f:b8:63:05:9d:d1:f8:d5:37:20:5a:23:86:b6:8c:b5:
1f:7f:7d:8f:56:9d:48:a7:a1:d2:70:3e:ec:43:4f:32:a3:4b:
ba:f2:9d:53:83:67:b7:b5:4a:d6:ce:3d:b6:74:d0:f1:ac:ec:
80:ea:08:85:cd:69:44:7b:46:c7:b1:36:12:a2:98:50:da:6f:
3a:97:15:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:03:06 2024 by rpki-client on console-fra.rpki-client.org