Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jXEBxIJFgCDWJtKSXbTywFtFlTM.roa
File: jXEBxIJFgCDWJtKSXbTywFtFlTM.roa (raw, json)
Hash identifier: 9ud6286MhoLbghN50oEQrXWBXbkWeMAZVAWGTlzFyz0=
Subject key identifier: 8D:71:01:C4:82:45:80:20:D6:26:D2:92:5D:B4:F2:C0:5B:45:95:33
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018E09BC5718DE9AB3AACDC4F71323195DD7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jXEBxIJFgCDWJtKSXbTywFtFlTM.roa
Signing time: Mon 04 Mar 2024 13:52:01 +0000
ROA not before: Mon 04 Mar 2024 13:52:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58087
IP address blocks: 2a0e:97c0:710::/48 maxlen: 48
2a0e:97c0:711::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:09:bc:57:18:de:9a:b3:aa:cd:c4:f7:13:23:19:5d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 4 13:52:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d7101c482458020d626d2925db4f2c05b459533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:a0:a8:a9:d5:7d:62:23:a0:44:9b:cf:52:
6d:52:82:e4:b4:0f:c0:89:4c:65:d5:d0:d7:60:47:
f6:16:cd:d5:32:f7:c0:9b:09:22:2c:b7:63:7d:9f:
26:34:fa:11:91:56:7e:e9:9e:09:c2:4b:37:9c:26:
a6:ba:08:95:bf:f0:18:4e:b5:2e:57:d7:fd:b9:d1:
2b:8b:d6:85:9d:27:17:c2:11:79:30:bb:2b:55:e5:
6d:20:33:8b:2a:38:79:0d:f5:59:bd:4e:ca:bd:86:
66:a7:1e:d6:38:9f:4a:52:93:31:c8:ee:ed:09:33:
23:03:1b:be:d5:e4:f1:2f:cb:8c:de:29:d8:a3:c9:
6c:a7:86:11:d5:00:e8:1e:58:f1:83:b9:e5:ac:c2:
9f:6f:4e:7a:30:c6:e1:85:e2:43:86:17:2f:be:3c:
3c:f1:2a:d5:c8:90:67:0c:72:df:71:36:5c:29:79:
92:b3:39:c6:90:4c:76:70:fa:b3:57:a1:8f:2f:75:
5a:8b:43:a8:99:9d:4a:4d:68:91:b0:87:61:d4:e5:
bf:55:48:c1:63:af:27:fc:1b:0d:bd:50:cf:d8:e2:
c7:72:53:aa:38:d9:c7:9b:af:6b:ee:2b:a2:d4:b3:
1b:e9:ec:78:13:26:92:48:7a:ae:84:8c:31:5f:28:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:71:01:C4:82:45:80:20:D6:26:D2:92:5D:B4:F2:C0:5B:45:95:33
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jXEBxIJFgCDWJtKSXbTywFtFlTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:710::/47
Signature Algorithm: sha256WithRSAEncryption
0f:76:74:5a:32:06:05:ed:11:fa:0d:90:a1:ae:1f:f7:8c:df:
4b:e4:bd:70:99:5a:95:56:5f:19:18:d1:b8:a5:6b:95:0d:ef:
98:ab:a8:50:55:2a:d7:34:a2:30:5e:bd:ea:ff:d1:19:97:53:
fb:9b:6f:a5:54:b8:a4:b6:1a:49:16:42:25:3b:07:9f:db:36:
28:56:b7:c1:36:6c:6a:34:d7:d1:f4:7f:ac:08:8a:87:10:e2:
e9:63:df:3a:67:fd:f4:33:be:2b:11:66:df:a4:86:f3:6c:4b:
04:fe:e5:42:5d:1d:89:22:c7:e7:92:12:2d:9a:a3:b2:e5:b8:
8f:7d:e7:2d:22:3e:b2:e1:d0:4d:71:c2:e7:f0:8f:b2:c0:06:
74:8d:d5:69:26:7c:8c:12:ee:02:a3:a8:ba:8c:fb:45:99:d7:
c8:4f:00:8b:36:75:b9:b7:cd:af:3b:db:76:55:2a:e6:59:3b:
67:e0:1c:62:47:2e:3b:85:6d:cc:dc:a2:d4:38:07:dc:b3:3a:
ba:06:f1:cf:cc:6c:e0:4d:aa:e4:7f:c9:7c:f9:33:89:0e:cb:
74:21:b0:31:ce:c0:e9:ce:9b:8b:6a:95:f3:07:25:95:a5:5a:
3a:e4:22:90:fa:6a:c6:41:fd:2e:f3:c2:f7:06:03:66:2c:9e:
b1:0b:32:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:17:52 2024 by rpki-client on console-ams.rpki-client.org