Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iNAHLJb7L6SkIVKlzoAwNqIrUl4.roa
File: iNAHLJb7L6SkIVKlzoAwNqIrUl4.roa (raw, json)
Hash identifier: 86xp5zABHHwNMsbe6vFpru8vVQdQV+UZDoKlolKOeug=
Subject key identifier: 88:D0:07:2C:96:FB:2F:A4:A4:21:52:A5:CE:80:30:36:A2:2B:52:5E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD00E37F8E245120A43661EB2A556D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iNAHLJb7L6SkIVKlzoAwNqIrUl4.roa
Signing time: Tue 02 Jan 2024 10:34:16 +0000
ROA not before: Tue 02 Jan 2024 10:34:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202827
IP address blocks: 2a0e:b107:1ce1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:00:e3:7f:8e:24:51:20:a4:36:61:eb:2a:55:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88d0072c96fb2fa4a42152a5ce803036a22b525e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cb:ce:3e:41:2b:2b:1a:09:f6:9e:fa:0d:c5:
da:bb:ae:b9:6a:da:22:30:4c:b4:9a:74:1b:d7:5a:
39:58:cd:47:68:07:f1:9f:90:ea:a7:c8:84:d1:f4:
33:36:f5:0a:99:94:8a:33:4b:0a:2d:23:23:3a:9e:
68:93:e1:c0:44:7f:49:7b:18:03:a2:d7:8d:fc:8e:
3f:11:67:43:a4:a3:0a:22:9d:c0:a1:99:d2:81:80:
b1:39:a8:74:ce:3f:17:c0:7f:1e:02:61:40:da:48:
59:d5:ad:86:a4:5a:06:93:c4:aa:0d:14:8e:05:98:
9d:f4:2a:e1:5a:4d:f7:f5:1d:62:fa:5c:94:3a:55:
2a:30:cf:c0:44:2c:d0:5c:b0:ca:52:6d:8b:4f:16:
59:23:d6:ba:ed:fe:9a:11:4d:ac:0d:fe:3b:ac:a0:
0b:85:d4:91:a5:b0:d2:04:ee:4a:f6:3a:5f:ae:2e:
b2:b2:85:77:38:13:78:71:bf:84:01:96:cd:d0:d4:
26:2d:88:59:53:a4:a6:45:e2:5b:66:5d:c3:4d:bf:
b6:b6:39:4c:88:08:c3:71:ac:d1:a0:6b:cd:aa:10:
55:07:82:b1:8b:76:23:e4:02:9c:85:b5:3e:df:db:
f7:31:b2:00:46:0e:1f:3b:bc:2a:ee:20:ed:69:87:
87:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D0:07:2C:96:FB:2F:A4:A4:21:52:A5:CE:80:30:36:A2:2B:52:5E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iNAHLJb7L6SkIVKlzoAwNqIrUl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1ce1::/48
Signature Algorithm: sha256WithRSAEncryption
b2:31:28:ea:8a:12:af:9b:fc:7c:e5:bd:94:f0:50:d5:6e:c8:
f7:2e:b6:92:a8:9e:4e:94:2f:57:5e:1f:8d:f3:46:83:a1:ee:
04:8e:50:e9:cd:f2:c1:bc:c6:c5:9c:f1:fe:65:56:e8:4a:39:
26:55:11:d0:93:d3:c4:7a:ed:55:64:5e:6c:0d:d6:63:96:d0:
f4:ce:e3:e9:75:03:52:11:bf:e2:87:8a:64:b1:c1:43:88:d6:
60:7b:fd:0c:9c:92:ef:8b:0d:cf:fd:57:f6:4f:8f:7d:4c:1f:
a1:b8:ba:26:ac:83:e3:c5:10:4f:ed:fd:dd:25:a4:8a:a2:17:
f3:ce:1d:5c:60:e0:59:18:0f:ea:d8:b0:b1:6b:a1:35:05:af:
65:79:b2:de:41:ad:4f:a4:96:45:cd:68:63:72:7b:69:f2:3c:
4f:16:a7:3c:ce:01:a1:8a:90:7b:5a:fb:d2:37:36:aa:83:25:
68:2e:2e:07:84:8c:5e:c7:22:ef:e1:a5:8f:a8:db:53:34:0a:
68:ca:62:51:27:2e:bd:b4:dc:fa:6c:86:6d:0f:d4:14:ef:1f:
9c:4e:d5:5c:3e:05:60:4e:87:c2:ca:15:45:82:a1:dc:3a:db:
91:00:1a:07:f5:00:fd:53:3c:6d:04:0d:2f:9f:de:da:2e:78:
5e:9d:8c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:58 2024 by rpki-client on console-ams.rpki-client.org