Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gMKYXHYQ7in2WIawJvROWhTZHrQ.roa
File: gMKYXHYQ7in2WIawJvROWhTZHrQ.roa (raw, json)
Hash identifier: awbQlLP0ECFg4rvXKtQm9cHf/6TORBK5SVwplL0qmTQ=
Subject key identifier: 80:C2:98:5C:76:10:EE:29:F6:58:86:B0:26:F4:4E:5A:14:D9:1E:B4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D249B93DAE4264B277872B466F2FA348A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gMKYXHYQ7in2WIawJvROWhTZHrQ.roa
Signing time: Sat 20 Jan 2024 02:03:12 +0000
ROA not before: Sat 20 Jan 2024 02:03:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216406
IP address blocks: 2a06:de06:381::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:24:9b:93:da:e4:26:4b:27:78:72:b4:66:f2:fa:34:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 20 02:03:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80c2985c7610ee29f65886b026f44e5a14d91eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:38:59:09:b5:2b:b2:0a:62:5c:8e:18:2a:e0:
cd:91:cb:53:07:cd:ce:1f:cb:e4:6a:d1:70:c5:be:
39:f9:cf:44:0d:7f:83:d2:f3:a9:09:d6:10:4b:4d:
7e:9d:9d:74:66:47:53:12:5b:b7:d3:21:1d:a8:5c:
9a:b2:8c:46:d0:ba:a7:a3:d2:0a:9b:1e:d6:eb:4b:
b4:2a:be:fa:85:6d:a3:89:2b:c6:a0:67:80:ad:29:
38:a2:01:97:61:0a:61:24:e4:0d:25:8a:8a:f7:99:
e7:33:38:5b:ea:e7:b6:db:8d:21:3e:97:96:92:45:
49:81:0a:00:9e:63:bc:18:dd:c8:b2:2b:f9:23:99:
a5:12:4f:1c:bc:4e:a7:cb:6b:db:cb:9c:55:95:f4:
7b:57:e4:18:a4:51:4e:bf:3b:30:ca:88:9e:2e:19:
2f:95:81:e3:0f:a4:4f:9f:d2:b6:8f:e1:69:f1:fc:
3a:f9:11:13:60:d6:15:5e:ec:3f:1c:00:35:2f:a0:
0c:c5:88:44:3a:08:51:a0:95:00:d7:39:33:c8:88:
49:56:3d:a1:11:82:8a:4c:f8:7d:28:4f:c2:a8:eb:
4b:e5:26:19:0b:85:75:30:27:60:96:1e:7d:39:5f:
32:a4:3e:c1:45:6f:9b:06:01:e3:a2:17:25:39:d7:
8b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C2:98:5C:76:10:EE:29:F6:58:86:B0:26:F4:4E:5A:14:D9:1E:B4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gMKYXHYQ7in2WIawJvROWhTZHrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de06:381::/48
Signature Algorithm: sha256WithRSAEncryption
bf:22:2d:c7:d1:af:06:11:96:6b:80:46:df:45:8f:30:8a:19:
60:ab:13:93:22:ea:c7:92:29:57:8f:11:1f:66:62:a5:b1:16:
d2:bf:e6:30:c2:e5:66:8a:04:22:57:0d:97:4a:7b:c4:1f:c1:
cc:29:bb:31:a0:99:37:e6:0a:1e:9b:2a:50:f2:11:93:89:7c:
5e:ed:96:b8:82:a3:6a:bd:67:41:b6:f9:99:75:c3:61:d4:af:
67:8d:09:3b:dd:2f:1a:33:e3:83:33:b8:d0:1b:d0:87:b3:7b:
cc:0b:b6:f2:bb:b3:1d:8d:3e:44:a8:33:33:f7:7a:18:98:6d:
72:28:de:49:7b:39:ac:89:68:db:70:85:d1:d5:44:af:a3:53:
c4:29:a4:4b:fd:c7:f4:c4:58:71:34:7a:85:ba:d3:5d:80:07:
35:c4:7c:e7:59:35:d1:fd:e3:9c:71:39:3b:49:8b:04:c6:2c:
58:ef:b7:76:c2:2e:12:b2:15:d9:1f:00:95:8d:41:ed:89:b3:
9c:8b:47:65:c3:68:4a:bd:8a:f7:cb:c7:43:49:5e:09:b1:00:
db:fa:94:61:d9:63:20:aa:ef:c5:65:2b:4c:df:17:9b:8d:fc:
08:4e:3d:f2:69:62:18:4f:24:b8:83:06:58:b8:33:34:a9:d2:
70:33:ec:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:41:05 2024 by rpki-client on console-ams.rpki-client.org