Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hTAbo-4CU2J-OIc0gCPZ-TwBwL8.roa
File: hTAbo-4CU2J-OIc0gCPZ-TwBwL8.roa (raw, json)
Hash identifier: eE9Ah/gQjd/zhOFZBYUn8iLLjIi3w3uTtCBROjlnbmc=
Subject key identifier: 85:30:1B:A3:EE:02:53:62:7E:38:87:34:80:23:D9:F9:3C:01:C0:BF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018F19D3AD4BEE6D3598596962930945BC0D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hTAbo-4CU2J-OIc0gCPZ-TwBwL8.roa
Signing time: Fri 26 Apr 2024 09:54:13 +0000
ROA not before: Fri 26 Apr 2024 09:54:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24239
IP address blocks: 2a0e:b107:740::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:d3:ad:4b:ee:6d:35:98:59:69:62:93:09:45:bc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 26 09:54:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85301ba3ee0253627e3887348023d9f93c01c0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:3c:05:07:af:ae:48:4c:b4:ac:82:6a:92:
7a:7c:2b:1d:62:8e:6c:2e:06:a7:66:d3:cb:df:8b:
30:78:58:bd:b4:a5:08:d6:83:f5:43:8d:56:48:ac:
09:69:0b:56:dc:b8:1d:ee:65:54:59:4e:65:63:68:
76:92:c7:df:d1:f1:38:dd:6a:76:56:69:f5:fb:84:
89:34:50:23:15:e3:5f:7a:9f:73:0e:6d:20:5a:c8:
4e:09:e4:e4:91:81:d9:7c:e2:2b:13:50:ce:56:9a:
da:a9:dd:4f:8c:88:c6:65:54:a6:d0:81:a6:6e:c9:
68:d7:99:b3:e8:7f:60:a3:e8:24:ba:a6:a9:11:24:
bc:9d:c1:80:22:17:19:26:c0:9c:79:5a:2a:88:75:
07:0d:4a:94:ad:74:df:6c:f0:17:55:b4:ad:b1:01:
6c:14:bf:88:4f:6d:b3:ba:0c:e3:a5:84:d8:ac:55:
06:41:6d:37:a2:f4:70:75:97:94:28:b0:67:73:02:
87:99:cd:ee:ed:34:1c:f5:d3:57:3a:b9:91:79:86:
8f:88:9e:42:f9:a0:11:38:37:d8:45:fe:f0:d7:87:
a0:85:33:fd:7f:4c:3f:c0:99:12:d4:f4:9e:94:02:
56:fb:d9:8a:5c:21:34:76:59:7d:95:2e:66:c1:b8:
49:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:30:1B:A3:EE:02:53:62:7E:38:87:34:80:23:D9:F9:3C:01:C0:BF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hTAbo-4CU2J-OIc0gCPZ-TwBwL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:740::/44
Signature Algorithm: sha256WithRSAEncryption
2b:4b:c8:20:98:28:dc:72:69:1c:ab:1f:03:fb:75:92:90:4f:
2f:d0:4e:0c:2d:6a:47:3b:2b:c7:da:b7:91:8d:7f:ba:23:e4:
10:bd:a8:d6:8a:98:32:fd:4d:53:44:79:b5:20:db:26:0e:5b:
08:a6:91:6c:46:79:a6:7e:20:8d:f1:89:e3:68:f5:c8:61:16:
3a:95:24:70:5e:67:2e:a3:88:8d:31:9c:3d:67:78:77:fc:66:
1d:6b:a9:02:b5:b9:a5:1d:ef:ca:b6:2f:7e:15:af:2f:d6:d5:
33:11:11:27:b6:ac:db:06:b2:31:ad:e7:7d:f5:d4:e4:32:0f:
1b:82:65:87:02:45:f0:c9:7d:26:64:43:e3:30:d1:97:49:ea:
f3:d2:84:c4:03:91:c9:26:41:d3:53:1e:5e:92:d9:fc:6c:08:
65:ed:e9:b3:9c:e4:90:8f:9c:52:3f:cb:d0:30:01:6c:52:9c:
5e:2e:50:5a:ed:d6:e4:11:46:24:02:81:06:f1:76:9d:10:97:
a5:4d:03:73:d8:12:0f:af:de:bf:d0:87:91:3d:bd:c4:49:38:
8f:9f:9b:b3:e0:5a:84:01:08:6b:67:3b:c9:f0:69:9c:ce:6b:
70:6b:e6:de:cd:92:96:b1:4e:f2:43:94:1f:44:a8:80:a4:42:
69:5d:36:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:58:34 2024 by rpki-client on console-ams.rpki-client.org