Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iDr5kQAFvHf1ifDi27uCf9rgUc0.roa
File: iDr5kQAFvHf1ifDi27uCf9rgUc0.roa (raw, json)
Hash identifier: djNvCBJklBRjowff8NaZXZOK7yHYpNuCZbq+cgBk0MU=
Subject key identifier: 88:3A:F9:91:00:05:BC:77:F5:89:F0:E2:DB:BB:82:7F:DA:E0:51:CD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD184AF99D6FAD9BF7799F9DE735E5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iDr5kQAFvHf1ifDi27uCf9rgUc0.roa
Signing time: Tue 02 Jan 2024 10:34:22 +0000
ROA not before: Tue 02 Jan 2024 10:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208680
IP address blocks: 2a0e:b107:790::/48 maxlen: 48
2a0e:b107:795::/48 maxlen: 48
2a0e:b107:79a::/48 maxlen: 48
2a0e:b107:794::/48 maxlen: 48
2a0e:b107:799::/48 maxlen: 48
2a0e:b107:793::/48 maxlen: 48
2a0e:b107:798::/48 maxlen: 48
2a0e:b107:79d::/48 maxlen: 48
2a0e:b107:792::/48 maxlen: 48
2a0e:b107:797::/48 maxlen: 48
2a0e:b107:79c::/48 maxlen: 48
2a0e:b107:791::/48 maxlen: 48
2a0e:b107:796::/48 maxlen: 48
2a0e:b107:79b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:18:4a:f9:9d:6f:ad:9b:f7:79:9f:9d:e7:35:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=883af9910005bc77f589f0e2dbbb827fdae051cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c0:2f:54:87:a4:58:7f:6d:2e:f2:bf:50:bd:
1a:9b:6e:b8:94:4a:95:14:d5:4a:27:f3:f0:62:a6:
30:8d:1a:ce:f0:ce:de:fe:59:dc:d7:bd:dc:88:3e:
70:bf:82:82:37:4f:79:ac:c3:e7:df:35:9f:f3:70:
82:06:86:8c:7e:1a:28:f6:cb:80:41:59:da:0f:bf:
ad:88:66:26:b7:ef:aa:29:fe:60:95:fa:ed:bb:9c:
e8:69:7a:ae:5b:66:5e:d9:80:0c:60:92:43:be:5c:
4b:5f:5e:c3:93:19:3f:7b:a5:f0:93:b3:67:fb:d8:
95:60:e2:36:29:02:cd:2b:f5:58:cc:e0:73:5e:27:
a2:7a:97:5e:c5:0a:9a:64:d3:ec:44:72:36:3b:a6:
4c:aa:bd:29:a8:c5:7f:69:ec:cc:5f:be:00:16:18:
23:da:fb:43:4b:d6:72:cd:cc:ee:a9:4d:ea:6c:21:
5d:34:5d:c1:43:c0:95:77:c5:7f:b9:69:fa:53:6d:
ec:ce:31:5f:d1:cc:ee:14:81:77:08:6b:dd:32:af:
38:1b:d8:c4:c6:19:8c:12:ba:8e:4d:7b:dd:35:78:
05:e0:76:5c:61:d4:98:6a:bf:e6:eb:d2:af:75:55:
24:4c:86:1f:a9:52:68:07:bb:28:0f:7c:6d:d3:0d:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3A:F9:91:00:05:BC:77:F5:89:F0:E2:DB:BB:82:7F:DA:E0:51:CD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iDr5kQAFvHf1ifDi27uCf9rgUc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:790::-2a0e:b107:79d:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3e:9f:b0:84:e0:25:32:56:6f:04:4c:cf:f9:87:48:6c:bb:8c:
fc:8f:7e:1c:4f:d0:2d:bf:a5:97:9d:1b:11:58:88:6d:b7:41:
56:c9:eb:a8:e6:fe:f3:c0:94:53:c8:c0:81:c2:7b:33:b7:60:
1a:9d:b6:5d:d3:36:69:5e:f6:a5:bb:7a:e4:4a:e8:3b:26:64:
61:d8:16:b0:9e:f4:af:e4:15:f0:11:34:40:d3:6d:d5:66:b5:
13:87:7f:00:1d:5a:62:09:c6:7d:2b:a9:ec:d8:5e:75:a6:ae:
09:9f:1e:30:5a:0e:39:f2:70:56:78:ee:86:c5:36:91:d4:2e:
60:1d:91:4b:39:44:5b:95:e3:6d:58:60:a9:98:88:58:c6:0d:
11:11:17:14:e1:bb:f2:c4:6b:64:e4:09:b1:fe:7b:24:8f:d9:
25:2a:d3:74:f8:c3:47:3f:b8:88:07:4a:b8:e2:02:77:59:5b:
3e:95:03:a0:e2:2f:ca:f8:55:d0:84:52:d5:47:25:d0:c1:50:
b8:d8:8d:e1:f9:23:bc:71:d4:5e:77:fc:8e:b6:1c:c9:b2:3b:
e0:1c:41:0a:36:29:cd:2c:53:af:64:86:2d:ec:b0:28:ac:1e:
e1:06:8c:b7:98:03:73:ac:80:5f:65:27:fe:93:eb:68:88:e9:
2e:1d:98:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 3 06:35:01 2024 by rpki-client on console-ams.rpki-client.org