Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hm6ylKhttWjIsE9spsoSa7xe78E.roa
File: hm6ylKhttWjIsE9spsoSa7xe78E.roa (raw, json)
Hash identifier: c7tgUzQUlKd0km6EunLecNyBnEMfaeZHrALUGqyKpOc=
Subject key identifier: 86:6E:B2:94:A8:6D:B5:68:C8:B0:4F:6C:A6:CA:12:6B:BC:5E:EF:C1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCEAF51BBB789EE2A99F5B84F1DCDE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hm6ylKhttWjIsE9spsoSa7xe78E.roa
Signing time: Tue 02 Jan 2024 10:34:10 +0000
ROA not before: Tue 02 Jan 2024 10:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198747
IP address blocks: 2a0e:97c0:38f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ea:f5:1b:bb:78:9e:e2:a9:9f:5b:84:f1:dc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=866eb294a86db568c8b04f6ca6ca126bbc5eefc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:1a:74:0c:58:8d:84:71:57:17:20:1c:a5:
96:74:6f:d2:07:ac:8b:39:2f:fb:5b:ec:76:5a:eb:
92:b6:75:b1:f8:ab:b6:69:2e:f8:96:a6:ca:a4:ed:
86:c6:ee:32:a3:4d:87:b9:15:94:ca:12:64:f7:66:
6e:49:40:0c:11:75:af:1d:1e:30:e3:a0:e9:3f:e5:
d7:b9:bc:66:bd:c6:b1:97:da:f8:60:33:31:a4:0b:
55:2f:41:ae:30:11:a5:dd:83:bc:3b:a5:0b:17:93:
62:b5:02:7a:ff:86:f4:93:25:5d:bb:1e:cf:4c:1e:
cd:8b:cd:1d:3e:e7:7e:2c:ee:f5:95:57:ff:0a:a9:
86:af:af:60:5f:b0:2b:53:46:ff:1c:d1:33:ae:37:
95:3d:e8:c1:75:74:2a:65:62:b4:96:51:77:60:72:
cb:cd:a7:1c:47:29:42:88:fd:7e:b5:10:85:b4:e4:
82:2a:75:41:2c:a6:ac:26:99:66:e8:03:19:ad:89:
2d:26:9e:9d:cf:3c:00:e2:d9:02:8c:a2:f8:df:40:
4c:16:a9:2b:8c:3c:30:4e:c8:80:ad:19:e8:08:c3:
2c:d2:b7:a7:f1:40:e0:a0:02:e3:a9:9c:e5:31:5e:
94:84:04:18:aa:c8:73:74:de:e3:54:f6:1f:22:d1:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6E:B2:94:A8:6D:B5:68:C8:B0:4F:6C:A6:CA:12:6B:BC:5E:EF:C1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hm6ylKhttWjIsE9spsoSa7xe78E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:38f::/48
Signature Algorithm: sha256WithRSAEncryption
9e:4b:2e:f6:45:9e:e2:0f:d5:43:9c:59:01:c7:5b:07:7a:fd:
4a:5d:01:c5:82:01:5c:90:ab:d2:88:99:8d:ed:48:2c:47:9f:
a1:5f:fd:2d:de:18:c7:b0:1e:dd:8b:b3:2a:37:7b:43:76:74:
b3:ea:eb:9f:7f:5a:12:83:04:9e:52:b7:55:14:25:4d:4b:3e:
24:b3:56:21:ce:e5:23:46:4a:71:25:d1:73:53:fa:0e:61:a4:
df:f2:52:34:fd:15:77:64:92:92:d4:39:6b:7e:34:25:5f:f9:
2b:c6:de:fb:53:69:a2:07:95:e3:11:6e:27:26:cf:0e:4b:ed:
4d:2b:59:62:16:cf:31:4a:1f:63:e0:20:70:93:e7:b7:00:ea:
cb:00:2d:f2:c5:a2:62:3c:b5:65:ed:64:77:ab:a0:f4:5c:3b:
64:e1:f5:bd:38:4a:c7:af:fe:60:94:dd:43:c8:a2:d2:c1:1d:
70:1a:2e:7e:c7:88:7f:eb:ba:cf:85:31:61:76:3f:ba:5b:da:
54:99:a9:1d:12:db:18:99:5e:6b:d3:e9:cc:88:ba:60:32:93:
c2:cc:66:27:f0:6f:a8:38:71:6a:54:59:78:97:48:df:98:16:
ca:07:81:7a:d6:1e:73:60:ef:3f:c2:02:27:b6:e7:80:ad:c6:
a5:3a:8b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:17:52 2024 by rpki-client on console-ams.rpki-client.org