Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/n7mQlRsES_iv6EqTE6P24vJyKkk.roa
File: n7mQlRsES_iv6EqTE6P24vJyKkk.roa (raw, json)
Hash identifier: crVr+uzFwtdMKXhf77GRuNH3x7LVN8SvXcuumzqMw8o=
Subject key identifier: 9F:B9:90:95:1B:04:4B:F8:AF:E8:4A:93:13:A3:F6:E2:F2:72:2A:49
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD0FE7C64721B937A587E9A7C1D73E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/n7mQlRsES_iv6EqTE6P24vJyKkk.roa
Signing time: Tue 02 Jan 2024 10:34:19 +0000
ROA not before: Tue 02 Jan 2024 10:34:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206569
IP address blocks: 2a0e:b107:19b0::/48 maxlen: 48
2a0e:b107:19b1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:0f:e7:c6:47:21:b9:37:a5:87:e9:a7:c1:d7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fb990951b044bf8afe84a9313a3f6e2f2722a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:d1:45:d8:da:e9:37:a1:4d:5d:b8:58:ca:
f6:62:63:b6:93:ee:73:1e:44:c9:5f:bf:91:ed:77:
a6:cc:4a:dc:0d:12:d2:28:61:44:46:da:29:4c:3d:
02:a4:8c:4a:71:3a:d9:f0:9b:6f:ca:09:55:94:82:
64:bf:98:f5:7c:e7:82:ab:3f:0d:81:80:c9:c0:b4:
0d:61:f4:b0:cb:4b:9c:df:25:b5:bb:96:f8:4e:72:
2f:f5:e1:eb:76:57:7f:c5:31:1a:34:3c:3b:00:7a:
ee:ef:c9:66:82:51:90:22:ed:b0:d3:10:d3:9a:c7:
ad:0f:ab:3d:b7:63:7d:b0:08:08:a8:9a:5e:7c:5c:
ac:07:67:16:fc:38:6b:9c:a5:99:1b:0e:76:a2:c4:
dd:50:cd:de:a1:14:ff:57:66:95:70:39:f6:95:d9:
4a:82:51:9d:ec:07:9d:b4:c6:f4:0b:c2:15:93:65:
ca:e4:50:bb:b4:79:2d:59:25:0b:a8:ac:d4:9d:5c:
43:a4:81:55:1f:5d:fc:27:d4:d8:1b:5d:fb:95:1e:
e0:e6:3b:59:96:37:bb:c7:5f:96:45:b3:82:4b:84:
20:e3:4c:3d:d1:ef:79:b3:26:37:ba:e7:a4:6d:71:
d8:8d:94:c9:d7:cb:4b:2e:46:7e:6e:82:75:2b:3b:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B9:90:95:1B:04:4B:F8:AF:E8:4A:93:13:A3:F6:E2:F2:72:2A:49
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/n7mQlRsES_iv6EqTE6P24vJyKkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:19b0::/47
Signature Algorithm: sha256WithRSAEncryption
37:18:5e:b8:6f:cc:0d:dd:f3:71:f0:67:f5:86:dd:6b:b3:b6:
8e:a4:d8:e8:e2:71:37:7e:0b:b4:3c:a9:7b:28:a1:c7:00:fc:
cd:d3:4f:2c:70:c6:98:0f:7a:27:bd:21:20:81:84:2a:20:2f:
3b:c5:82:4c:a8:d8:da:9a:70:94:6b:1c:ae:6d:d9:c0:99:e6:
14:4f:1b:c3:b9:cb:f0:b6:cb:8a:5e:f4:72:cf:f7:66:05:09:
ad:85:54:c3:ef:1a:54:f2:85:1d:28:69:62:39:4b:48:e2:a2:
81:85:28:87:e9:4c:8c:f9:07:9a:60:f9:92:c2:ac:58:92:43:
c4:19:f5:a5:ab:a8:d0:9d:06:bb:67:78:1c:cd:65:1f:81:53:
37:2d:ef:0d:38:0b:db:f3:e2:99:f7:14:ba:4a:94:e2:b8:3a:
c1:d3:b1:1c:1a:ca:d3:46:68:8a:37:1e:cb:d8:0b:94:ea:9a:
97:54:07:88:51:a5:a4:ee:be:31:7a:a6:74:3c:24:3f:93:af:
e9:7b:10:31:24:88:3b:c4:b3:1b:a4:42:69:49:de:e9:f3:32:
47:f6:c8:b9:d5:cb:d8:0d:85:61:3c:ae:1e:d8:6c:43:63:7b:
7a:03:15:5e:19:10:5f:9e:af:17:f0:0c:68:e7:8c:26:c8:03:
76:1f:b3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:22:04 2024 by rpki-client on console-fra.rpki-client.org