Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lGDf8kO-DI8qstDtCuOzQvprZsg.roa
File: lGDf8kO-DI8qstDtCuOzQvprZsg.roa (raw, json)
Hash identifier: 3SeCxwmiAoZ7fix+PGuHP9Q+SDN4QIZ/YbO2Yk7X4go=
Subject key identifier: 94:60:DF:F2:43:BE:0C:8F:2A:B2:D0:ED:0A:E3:B3:42:FA:6B:66:C8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01902811D32BB806C56A3CFBB3F439208532
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lGDf8kO-DI8qstDtCuOzQvprZsg.roa
Signing time: Mon 17 Jun 2024 21:19:34 +0000
ROA not before: Mon 17 Jun 2024 21:19:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211358
IP address blocks: 2a0e:b107:12d1::/48 maxlen: 48
2a0e:b107:12d2::/48 maxlen: 48
2a0e:b107:12d3::/48 maxlen: 48
2a0e:b107:12d4::/48 maxlen: 48
2a0e:b107:12d5::/48 maxlen: 48
2a0e:b107:12d7::/48 maxlen: 48
2a0e:b107:12dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:28:11:d3:2b:b8:06:c5:6a:3c:fb:b3:f4:39:20:85:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 17 21:19:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9460dff243be0c8f2ab2d0ed0ae3b342fa6b66c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:e0:6d:70:8a:22:f1:39:0a:0c:a4:05:70:
48:b3:5b:b1:e2:62:fd:db:fb:58:5a:95:46:92:a1:
05:74:dd:f9:b8:7c:62:61:da:9c:48:7f:17:20:f1:
a2:66:2a:b1:02:a2:ab:b3:c7:5d:f0:ed:5f:8c:1d:
bf:c4:ab:4c:58:98:f2:ef:3b:a6:a6:7a:1e:f9:21:
06:01:fc:21:b8:45:1f:a4:ff:e7:ea:8c:90:b2:98:
60:fe:51:60:db:b6:be:ec:20:63:59:36:14:cb:ec:
67:62:cc:5c:41:40:d0:74:5c:01:51:55:d5:f2:38:
1c:7f:cb:2e:57:0e:9e:ca:6b:f9:83:22:50:09:c1:
49:96:5c:64:94:4a:10:5b:5d:1f:7a:15:e9:3d:59:
0c:72:51:df:13:dd:84:74:a5:c8:11:fc:41:91:73:
79:e6:98:31:c0:ab:99:a8:10:f9:f9:35:75:b2:34:
49:c7:72:56:2c:e0:de:48:a1:76:65:10:29:3d:9f:
c0:c0:60:5f:bc:e0:7b:ab:ca:02:96:25:97:35:00:
8b:06:7e:cd:92:75:2c:0b:63:eb:5e:25:b4:64:ac:
a6:76:5f:20:df:c5:ec:b8:14:fc:30:81:29:b4:6a:
ca:d4:66:87:67:50:49:0b:fa:7f:49:e7:c7:8a:ce:
67:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:60:DF:F2:43:BE:0C:8F:2A:B2:D0:ED:0A:E3:B3:42:FA:6B:66:C8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lGDf8kO-DI8qstDtCuOzQvprZsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:12d1::-2a0e:b107:12d5:ffff:ffff:ffff:ffff:ffff
2a0e:b107:12d7::/48
2a0e:b107:12dc::/48
Signature Algorithm: sha256WithRSAEncryption
b2:05:26:58:59:dc:5c:7c:f5:06:92:04:22:84:1d:78:67:e1:
78:55:69:f1:16:24:da:44:2f:c9:c2:d8:2e:85:74:1e:32:d4:
55:1a:07:a8:04:1f:9b:f4:d3:a3:57:48:f7:d6:b5:b1:df:1f:
f4:61:e1:43:8a:fc:58:45:8e:f9:16:7b:ad:8e:e9:d0:fb:d2:
34:f3:ad:8d:11:92:92:21:25:13:2e:15:b0:25:6e:b3:bb:82:
cd:1b:08:a7:25:85:da:f8:d5:92:2f:f0:b3:33:e0:75:77:86:
e3:3e:12:c4:2b:62:c7:21:f3:e6:74:5e:e9:c3:8b:5b:32:0c:
15:8b:42:1c:47:cd:4c:f5:3a:06:f2:a4:15:2a:c4:1a:8b:be:
de:3f:c8:af:19:2d:43:2c:c8:43:9f:5e:21:da:9a:a5:75:f0:
d0:f0:a5:c2:cd:b8:cb:02:22:6a:31:4f:62:11:b6:7e:b5:a3:
22:63:68:89:c0:1c:d2:6c:b6:39:72:45:d4:48:47:9e:0f:f0:
8b:41:69:a0:65:eb:dc:5a:96:1f:c0:50:88:25:a3:f5:89:5b:
0a:93:a8:a9:71:29:ee:38:ec:7b:da:19:29:75:83:de:84:ac:
4e:0a:0d:37:57:03:34:54:ac:ca:2e:41:0a:74:94:48:6f:12:
67:72:c1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:31 2024 by rpki-client on console-fra.rpki-client.org