Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jMIzJ_oZ8aLSFP8wTEmJA3slRvQ.roa
File: jMIzJ_oZ8aLSFP8wTEmJA3slRvQ.roa (raw, json)
Hash identifier: n1GOuFv+8/L/G2ig+kVTvdLGYPjmnckl/vIDQQakHIw=
Subject key identifier: 8C:C2:33:27:FA:19:F1:A2:D2:14:FF:30:4C:49:89:03:7B:25:46:F4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D2552AE6542A8CEA3460D5E038A904CFF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jMIzJ_oZ8aLSFP8wTEmJA3slRvQ.roa
Signing time: Sat 20 Jan 2024 05:23:11 +0000
ROA not before: Sat 20 Jan 2024 05:23:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198082
IP address blocks: 2a0e:97c1:8a23::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:25:52:ae:65:42:a8:ce:a3:46:0d:5e:03:8a:90:4c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 20 05:23:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cc23327fa19f1a2d214ff304c4989037b2546f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:98:4b:45:4a:6a:25:1a:c7:f2:c8:08:69:63:
58:1a:09:18:9e:58:14:73:d0:14:98:44:47:25:ba:
d8:6b:f2:63:2e:cb:a7:5f:3d:e8:32:df:30:78:99:
39:2e:12:93:e1:24:4c:38:4c:e4:c6:98:40:9e:99:
ad:c1:50:55:4c:99:68:18:a4:66:f1:2a:75:a5:0f:
21:bd:aa:c8:0f:ff:f9:51:22:7b:cf:4d:4d:1d:e4:
4c:01:81:2c:fb:f0:25:a6:a2:2d:28:c4:a8:46:08:
dc:2f:82:a9:59:21:8a:a7:f1:35:af:21:28:03:69:
f2:31:00:2e:e5:71:a9:3e:6b:1b:1f:49:1b:00:19:
85:f1:68:2a:7c:c0:e1:59:06:cb:09:1b:cb:81:55:
c6:b4:c5:fb:d3:f6:ff:95:fd:df:4d:b3:c2:eb:e4:
22:5a:80:61:5f:b0:32:ca:c7:27:b2:8e:0a:0f:5d:
ab:71:1b:90:61:1e:a3:0b:3b:71:f1:1e:75:86:0e:
22:63:17:63:72:c2:50:86:e5:06:5c:42:18:8d:fe:
d0:31:16:be:49:4f:58:14:dd:86:0a:8a:97:3e:f3:
f6:a0:5b:cf:15:5b:ac:7f:c5:f8:e7:9b:16:e7:5b:
f8:c5:96:fa:a2:8b:54:5f:12:8b:80:66:23:b1:cd:
ff:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C2:33:27:FA:19:F1:A2:D2:14:FF:30:4C:49:89:03:7B:25:46:F4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jMIzJ_oZ8aLSFP8wTEmJA3slRvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c1:8a23::/48
Signature Algorithm: sha256WithRSAEncryption
a8:2a:97:5f:bf:0b:22:c9:76:77:ac:b0:80:92:53:2f:ce:70:
a5:11:a7:64:31:a7:d7:3b:04:de:51:e6:07:59:d0:08:64:3d:
09:ee:69:ee:49:25:a0:9c:94:78:86:c5:c4:fe:51:04:31:8c:
20:53:2a:a9:ac:e4:a0:2c:97:0c:5f:0e:4c:3c:9e:e3:d8:f7:
4a:3b:7f:90:53:08:da:e3:08:be:1e:1d:2f:ab:a7:5a:6a:41:
5a:98:7e:b5:ff:7f:4d:21:d1:5a:9a:3b:38:3b:13:30:dd:0f:
49:e5:a6:4c:15:bc:3c:c6:f7:8d:e3:cc:a1:1a:0e:40:0b:42:
42:50:39:22:d5:ac:a7:72:91:d9:b4:b2:2a:2e:19:14:87:4f:
b6:da:7c:21:e9:67:cb:e0:26:cc:ca:47:55:88:fb:dd:8a:45:
7d:81:4b:37:b2:90:fa:0b:c1:3e:cb:f2:57:20:d4:08:09:3e:
a5:e0:ba:e7:ea:e3:7e:c1:aa:74:f9:33:91:53:48:ed:4d:92:
d6:7d:23:5e:c1:4a:15:27:35:f1:2a:c9:59:18:10:89:6c:08:
46:91:a1:4b:cf:0f:c8:c1:46:a0:e6:fb:b2:4b:c0:26:85:9c:
ac:e2:7e:a0:ab:9b:dc:40:d1:ac:85:b2:3f:02:df:c7:78:20:
ce:86:c6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:35 2024 by rpki-client on console-fra.rpki-client.org