Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ju5W9-97CK5DaCmLGHchni8yJnw.roa
File: ju5W9-97CK5DaCmLGHchni8yJnw.roa (raw, json)
Hash identifier: j/bk5vzn6lZDLtnibNQFjRH2eAzQM/ZYINKy9M+ZqN0=
Subject key identifier: 8E:EE:56:F7:EF:7B:08:AE:43:68:29:8B:18:77:21:9E:2F:32:26:7C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD2DB4ECB94396823EC22329F8F907
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ju5W9-97CK5DaCmLGHchni8yJnw.roa
Signing time: Tue 02 Jan 2024 10:34:27 +0000
ROA not before: Tue 02 Jan 2024 10:34:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210956
IP address blocks: 2a0e:b107:158f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:2d:b4:ec:b9:43:96:82:3e:c2:23:29:f8:f9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8eee56f7ef7b08ae4368298b1877219e2f32267c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:00:cd:08:2b:cb:53:c5:97:bf:da:f8:48:90:
f1:67:91:a9:23:0a:61:09:13:e9:a8:82:97:0b:ef:
28:ce:6e:22:67:13:30:f4:c7:52:d2:19:12:c0:da:
a5:e1:24:0c:ad:57:21:5e:be:67:2e:6a:16:3e:b4:
c2:80:3e:9c:be:ac:a4:3b:01:a7:cf:f2:50:53:24:
71:98:d5:9e:1a:ff:ef:60:8b:b7:fe:c5:79:8c:03:
20:40:ae:ac:21:b0:86:46:27:62:f6:39:0a:d4:bf:
66:f6:a7:e3:89:6d:dc:a8:86:1d:1a:00:06:b4:8d:
d9:5c:11:0e:7a:b8:6f:98:d7:1d:e0:7e:be:5c:44:
38:6d:f7:30:6b:2e:98:68:6a:36:7d:a1:50:6d:4b:
cb:f8:fa:d1:e1:5d:62:32:0f:a0:9c:62:2b:e7:77:
0b:56:8e:31:46:d6:d0:0d:9b:c3:8f:16:b5:92:bd:
d3:14:d9:35:29:12:cd:49:28:15:9e:5a:6a:37:f7:
18:0c:65:af:3a:a4:64:fa:76:65:6f:2c:0a:95:cf:
59:aa:4e:8c:ad:d3:8d:28:26:b4:80:56:54:23:3e:
bb:98:2b:56:83:3f:1b:6a:6d:51:1b:f3:a0:d6:94:
28:31:ed:96:9a:1e:21:19:f7:8e:fd:26:94:a3:dd:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EE:56:F7:EF:7B:08:AE:43:68:29:8B:18:77:21:9E:2F:32:26:7C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ju5W9-97CK5DaCmLGHchni8yJnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:158f::/48
Signature Algorithm: sha256WithRSAEncryption
05:a0:36:df:b0:86:b3:80:e6:76:42:54:dc:ea:35:39:1e:bc:
60:34:ad:f8:a2:29:7e:b7:d7:7d:a5:cd:64:db:36:75:65:a1:
2a:b0:74:34:7b:f9:e5:d3:dd:61:0b:47:ec:94:a2:97:99:d9:
c6:ce:4f:5d:0f:c1:b2:7a:a3:a2:6a:66:51:54:17:21:cf:10:
ac:1b:d5:31:18:4f:80:6b:56:1b:94:78:ec:3c:60:cf:f7:7c:
6c:a5:68:25:c9:bc:cd:e5:b7:88:92:49:6a:74:af:05:a0:70:
a5:d0:1c:75:8b:a4:c9:ae:ae:da:46:0f:17:08:fd:15:40:1e:
c4:62:81:ca:bb:d8:17:2f:bb:3d:62:3d:5e:15:67:db:65:77:
a5:bd:7f:03:28:b9:33:26:67:f3:15:00:7f:cf:8b:7c:58:bf:
25:00:6c:1e:38:33:04:3c:2f:8f:60:d6:9f:dd:ca:46:37:fc:
47:61:85:26:6b:98:08:d1:01:94:74:83:c7:98:c7:79:b2:1d:
90:f8:53:8a:cd:76:b7:8a:62:80:91:d7:17:e5:62:3b:50:7f:
9c:d8:92:4a:a9:5e:4a:f7:4c:3c:3f:50:15:2e:f3:81:8b:4a:
7f:b2:d6:4c:16:0c:78:28:19:e2:b8:21:7c:7d:93:eb:60:3f:
14:f9:fd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:31 2024 by rpki-client on console-fra.rpki-client.org