Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/neJiVeAK49BcPORBj58MBKEoE3Y.roa
File: neJiVeAK49BcPORBj58MBKEoE3Y.roa (raw, json)
Hash identifier: dEPSztYVEJelotZnUIclWyJeTE1gBpOKHvt95U7Lx/E=
Subject key identifier: 9D:E2:62:55:E0:0A:E3:D0:5C:3C:E4:41:8F:9F:0C:04:A1:28:13:76
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019372E109F81893ED38822DF779D8912D7C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/neJiVeAK49BcPORBj58MBKEoE3Y.roa
Signing time: Thu 28 Nov 2024 13:06:10 +0000
ROA not before: Thu 28 Nov 2024 13:06:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34927
IP address blocks: 2a06:de01:170::/44 maxlen: 48
2a06:de01:170::/48 maxlen: 48
2a06:de01:171::/48 maxlen: 48
2a06:de01:172::/48 maxlen: 48
2a06:de01:173::/48 maxlen: 48
2a06:de01:174::/48 maxlen: 48
2a06:de01:175::/48 maxlen: 48
2a06:de01:176::/48 maxlen: 48
2a06:de01:177::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:e1:09:f8:18:93:ed:38:82:2d:f7:79:d8:91:2d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 28 13:06:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9de26255e00ae3d05c3ce4418f9f0c04a1281376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:c8:b2:ce:77:f7:88:01:83:1e:08:20:d2:
75:fe:e6:d7:f4:2a:33:1d:e2:24:a3:39:fd:c0:ae:
0e:1f:b6:34:23:89:3d:dc:e4:50:c7:71:2a:e9:ba:
5a:e3:2a:d3:ba:46:f6:76:a7:16:1f:47:86:90:50:
6d:01:db:60:1c:c4:51:62:6b:4f:20:21:26:1d:6a:
7b:f9:41:5b:64:41:f7:44:9f:f2:3c:22:e9:6e:49:
4b:10:04:e9:65:6f:77:8e:0e:e6:57:b5:6b:66:4e:
10:e7:ca:75:91:2d:c0:66:c6:63:39:3f:46:a3:11:
23:ee:e5:7f:ea:a2:fd:b5:68:f9:ae:cc:31:d8:22:
b5:e1:67:7b:bb:77:7e:99:ce:94:be:5a:11:07:62:
bd:0d:77:bc:d9:35:b8:a7:a0:47:5c:6f:9b:83:01:
c4:7c:09:d0:c2:18:dd:f3:56:c7:0e:1c:bf:23:4b:
6c:77:e8:97:e7:1f:da:3a:94:12:05:65:31:d9:4c:
df:9f:26:a1:59:3b:94:f1:43:8c:a9:20:0b:bd:5b:
86:7c:67:ae:98:58:2c:bf:ff:c4:8b:eb:fb:35:94:
de:4b:44:98:5d:60:a2:bc:da:60:0d:6d:77:0b:ac:
a0:7d:31:25:c3:5e:67:c6:ce:93:b6:a7:99:19:86:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E2:62:55:E0:0A:E3:D0:5C:3C:E4:41:8F:9F:0C:04:A1:28:13:76
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/neJiVeAK49BcPORBj58MBKEoE3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:170::/44
Signature Algorithm: sha256WithRSAEncryption
94:8d:b0:40:8e:ea:2b:fa:7a:95:e8:a2:c0:22:a9:f7:1a:0b:
96:eb:f9:92:8a:5d:c3:e9:22:f2:34:8e:83:9e:03:6b:5d:a7:
da:da:af:90:a2:f2:65:c9:24:95:07:97:7f:96:7b:35:3c:e9:
0f:5f:7c:18:43:b5:67:5d:a4:f2:e7:be:57:1e:3e:79:30:8b:
2a:19:23:51:2e:f8:d2:51:4c:d7:af:6c:18:2b:13:71:1f:de:
d6:55:c6:03:91:da:59:b2:1b:6b:00:7d:d6:5f:f0:f6:b2:eb:
da:22:95:8d:84:95:6e:87:a5:75:d5:d4:35:9f:a1:d3:3a:4e:
cc:8a:3f:09:bd:ca:18:d5:21:f1:ce:84:97:da:10:3b:b5:1c:
91:42:5d:c2:e0:39:cd:b8:1b:9e:20:07:e0:86:34:e4:24:64:
f7:bc:26:5c:b7:d7:53:83:6a:68:bb:4f:18:12:50:9d:53:19:
23:cb:4f:81:5f:bc:0e:cf:de:df:48:7b:c7:69:dd:cd:50:fc:
b1:82:b7:f6:f0:d1:31:39:77:12:a6:7b:e2:56:0a:ab:6b:2d:
ef:48:70:11:cf:09:82:c6:70:92:ce:0d:2f:40:6a:6a:43:75:
fa:14:44:5d:3a:fa:5b:86:63:de:d4:6f:13:7c:e5:ee:01:70:
67:1e:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 20:36:26 2024 by rpki-client on console-fra.rpki-client.org