Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nKyCmN-0h1u3ofc6wsp_avh1IEQ.roa
File: nKyCmN-0h1u3ofc6wsp_avh1IEQ.roa (raw, json)
Hash identifier: eBio9Q8EsXoS8vCk1bbUcnjs1FzEy1xxMyByhNpZCUA=
Subject key identifier: 9C:AC:82:98:DF:B4:87:5B:B7:A1:F7:3A:C2:CA:7F:6A:F8:75:20:44
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD2253BDA150CC766BFA2AAF3F2CD4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nKyCmN-0h1u3ofc6wsp_avh1IEQ.roa
Signing time: Tue 02 Jan 2024 10:34:24 +0000
ROA not before: Tue 02 Jan 2024 10:34:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210076
IP address blocks: 2a0e:97c0:6b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:22:53:bd:a1:50:cc:76:6b:fa:2a:af:3f:2c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cac8298dfb4875bb7a1f73ac2ca7f6af8752044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:42:4d:04:ee:fe:5d:b6:81:a9:c9:ef:bb:
96:aa:82:3c:12:03:6b:0b:48:80:dc:19:24:c4:61:
74:af:5f:82:38:22:33:5f:2e:63:ad:48:85:b4:e2:
7f:05:ef:47:cb:bf:50:bc:2c:e1:47:c1:93:b8:33:
bf:6f:c3:31:f8:d3:4f:2d:34:6d:4c:d0:bc:62:92:
fc:eb:83:63:1b:57:b2:fc:6c:80:1b:51:f3:14:f7:
56:d9:e9:5d:2c:78:21:86:37:cf:f0:eb:5d:34:5c:
e3:34:d2:a9:48:0a:ac:f4:6a:02:1a:2b:73:4b:60:
cb:c0:0f:8c:f1:59:21:d6:37:3d:5f:47:de:86:e8:
ca:90:84:83:29:c8:07:67:f2:02:49:c9:0a:ee:b4:
56:80:49:56:dc:e4:98:bc:6a:62:ed:41:bf:2c:66:
19:bc:6f:ac:43:c9:fc:95:82:76:4c:84:a4:d5:2e:
96:ef:64:ac:f5:a0:f2:e1:c4:2f:7e:3c:47:89:25:
d8:5c:37:8b:81:59:f6:df:67:58:8a:5a:9c:40:c2:
71:ab:2b:19:df:08:3a:e6:ee:25:a0:5b:bf:2e:bc:
a5:04:bf:d6:4a:25:6e:31:48:be:bc:0d:57:9e:b4:
d6:aa:9e:02:f6:2b:f8:96:b4:13:cd:09:61:5c:87:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AC:82:98:DF:B4:87:5B:B7:A1:F7:3A:C2:CA:7F:6A:F8:75:20:44
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nKyCmN-0h1u3ofc6wsp_avh1IEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:6b0::/44
Signature Algorithm: sha256WithRSAEncryption
8d:21:05:8d:30:a6:68:c5:68:fa:19:3a:7c:f8:72:06:ce:be:
34:45:1c:c1:4d:33:ed:36:8d:de:49:ed:ac:8f:bb:fa:44:22:
d4:f4:d9:0e:1c:4e:98:8d:c0:ff:c4:94:77:ca:28:21:66:9f:
a7:35:6a:ef:cf:a2:31:58:f0:80:0b:23:2e:b0:1e:61:4d:28:
eb:fc:ff:cd:53:2f:7c:56:47:0b:a4:0a:5f:ff:3d:9a:98:18:
8d:e0:6f:40:53:c1:a4:ae:38:b3:cb:01:d6:0b:0a:60:d7:ac:
c9:a8:04:46:62:3d:1c:87:d7:03:b3:3f:ee:d0:3d:09:29:b3:
d2:23:94:cc:04:67:da:01:91:47:01:0b:12:ad:0b:4a:9d:ee:
c4:3b:64:a9:e2:ab:32:16:f3:af:3c:20:33:8a:6c:d5:51:b1:
b0:fb:b3:5d:4a:6c:a2:d1:51:c1:5f:78:3d:68:81:da:e0:19:
f7:31:c3:f5:a3:b3:0d:d5:97:18:45:d4:36:dc:5c:19:08:bb:
92:d2:1c:1e:e0:40:21:7a:45:0e:c0:36:c8:47:9c:64:6a:11:
f5:30:ea:4a:15:80:da:0e:2a:3f:02:a9:a2:c8:93:5e:35:00:
a5:e7:a9:ac:9b:0c:f4:99:44:e6:a8:e5:51:d3:00:e5:39:72:
bd:c2:14:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:41 2024 by rpki-client on console-fra.rpki-client.org