Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hJX0PzKtRyn7y1IMj8cP5ubfv7Q.roa
File: hJX0PzKtRyn7y1IMj8cP5ubfv7Q.roa (raw, json)
Hash identifier: zHuuxclAQXUUhJ1T2tbdsgCL0EqK4Ar9Qaycqco0DnM=
Subject key identifier: 84:95:F4:3F:32:AD:47:29:FB:CB:52:0C:8F:C7:0F:E6:E6:DF:BF:B4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCFBC8700E7F03DD364EBD70BBB81F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hJX0PzKtRyn7y1IMj8cP5ubfv7Q.roa
Signing time: Tue 02 Jan 2024 10:34:14 +0000
ROA not before: Tue 02 Jan 2024 10:34:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201911
IP address blocks: 2a0e:97c0:ae0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:fb:c8:70:0e:7f:03:dd:36:4e:bd:70:bb:b8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8495f43f32ad4729fbcb520c8fc70fe6e6dfbfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:cf:ba:81:e4:36:0d:4a:1e:37:a1:fc:22:
28:aa:23:12:cc:95:c7:c5:82:59:11:75:16:f6:25:
54:7d:0b:76:66:5f:c4:88:7c:57:9f:e8:2d:6b:da:
b0:7d:60:db:10:61:0a:9e:5b:7e:9c:94:55:80:c8:
37:14:a9:57:83:cb:36:32:b7:81:e6:c6:db:8a:d4:
b1:e2:d4:2f:bc:4e:f3:fb:f5:f2:ee:a2:62:05:ef:
9f:ee:4e:9a:8f:f5:d0:76:ee:d4:82:0a:ae:7b:48:
0a:5d:f2:85:c2:08:af:9a:a9:53:5a:62:b6:4d:ff:
01:60:12:d0:2a:5a:bc:db:fd:db:55:ef:5b:44:02:
bd:43:16:f7:54:86:84:d0:18:04:3a:31:0e:6c:b1:
32:fe:77:1e:33:70:b3:c7:f2:03:23:01:f7:52:34:
c6:84:9c:b0:e0:e7:13:e0:28:66:74:48:52:eb:eb:
c1:64:20:e0:d9:5d:37:2f:2b:d8:ab:b1:50:f6:a7:
30:27:85:06:e5:1a:43:e1:16:e4:d0:58:62:7f:fb:
98:55:f3:5c:ae:6a:a5:0f:50:8a:0b:48:cb:38:f5:
26:a4:cf:4b:f7:cd:fc:0d:33:00:04:b3:66:de:e3:
a2:d9:40:48:8e:81:f4:16:bd:18:e4:b9:93:2a:44:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:95:F4:3F:32:AD:47:29:FB:CB:52:0C:8F:C7:0F:E6:E6:DF:BF:B4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hJX0PzKtRyn7y1IMj8cP5ubfv7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:ae0::/44
Signature Algorithm: sha256WithRSAEncryption
7a:18:42:46:c4:fd:47:36:87:f9:1b:9b:65:5e:98:64:f1:dc:
e8:26:d8:56:20:29:96:ec:12:5f:69:5a:9a:03:bd:1b:68:59:
e3:e9:d4:20:81:1e:59:ca:56:38:58:3f:a0:e9:bf:26:3d:88:
13:fc:e2:8e:5e:d5:6c:ae:6e:09:59:4f:d3:39:e2:fa:91:a8:
66:d2:ba:2f:fe:34:dc:ee:08:74:8d:34:36:97:aa:6d:34:6f:
df:f0:32:f7:09:8c:c1:09:36:d6:38:de:f7:a0:1b:c8:dd:0a:
68:7f:15:94:39:bb:de:ae:36:bd:b7:06:55:0c:6a:58:76:26:
23:b4:39:aa:40:4a:e2:ff:0e:4a:50:e2:8b:4a:64:5e:4c:16:
9e:ff:d1:a8:d5:d8:71:57:48:2c:ec:59:79:a1:1a:d8:59:17:
0d:2a:e1:66:fe:32:3b:f3:9f:4a:3d:85:b3:f2:22:eb:61:39:
52:1e:d1:06:6c:6b:a5:d1:2d:ce:ad:30:a2:5b:30:78:25:99:
71:cf:15:ca:ec:c6:b7:cd:51:9f:0e:f2:70:00:ea:97:e2:ef:
ee:d9:d4:c9:46:33:b8:f4:b4:36:93:5b:1e:48:a7:2b:7a:7f:
e0:85:c8:31:d2:c8:da:7e:23:17:05:19:ce:23:60:1f:7a:4c:
63:82:0e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:39:06 2024 by rpki-client on console-fra.rpki-client.org