Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oU-0dYU4T9fDYk6ORGDtfJAKjTU.roa
File: oU-0dYU4T9fDYk6ORGDtfJAKjTU.roa (raw, json)
Hash identifier: TeDeXO57h1/44aTjJjqKRVn+oiBQPXrKHqLxzz81J68=
Subject key identifier: A1:4F:B4:75:85:38:4F:D7:C3:62:4E:8E:44:60:ED:7C:90:0A:8D:35
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCE0474D8EE7C25F433BC490C1B757
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oU-0dYU4T9fDYk6ORGDtfJAKjTU.roa
Signing time: Tue 02 Jan 2024 10:34:07 +0000
ROA not before: Tue 02 Jan 2024 10:34:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142289
IP address blocks: 2a0e:b107:15f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e0:47:4d:8e:e7:c2:5f:43:3b:c4:90:c1:b7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a14fb47585384fd7c3624e8e4460ed7c900a8d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:29:54:89:76:8c:5c:50:6a:45:f1:7a:33:15:
72:0c:ed:f1:93:6e:95:ba:8d:5c:cc:5e:9d:c7:40:
e3:e5:ed:1c:90:d3:ee:35:9b:b8:30:4b:00:43:78:
52:01:08:1e:3e:50:bd:86:d4:76:c4:be:a1:7d:d0:
d6:df:92:c8:6a:90:27:99:ea:07:56:9e:fe:75:05:
d2:66:ac:f9:2c:bb:31:62:ca:71:4a:77:19:e7:33:
50:42:9f:9e:bf:87:9a:86:e1:f8:f4:2e:67:df:27:
0b:08:4a:40:de:6c:db:f7:2a:7e:2a:a4:40:17:ab:
92:ea:f2:40:b8:26:df:01:0d:1e:b8:ca:a3:94:a8:
47:04:4e:19:7c:6b:85:9e:bd:8f:34:ac:22:7e:94:
c7:bd:e0:fd:47:8f:7b:94:31:64:a6:59:d6:6e:61:
cb:bf:e3:d3:3b:fb:d6:80:35:9e:b7:63:d2:f6:bf:
35:f4:5c:a9:7c:0f:e4:d0:95:92:d3:a8:4f:52:b0:
ab:bc:2f:5c:28:a8:d9:e2:df:39:1d:f2:0a:0f:00:
c9:1f:a7:9f:a6:c5:87:ad:f2:eb:0b:87:18:91:d0:
33:a5:6e:7b:12:05:fc:39:56:47:c1:cf:55:f3:e5:
66:9c:b8:7b:6a:17:55:30:d7:3e:63:58:35:10:fa:
73:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4F:B4:75:85:38:4F:D7:C3:62:4E:8E:44:60:ED:7C:90:0A:8D:35
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oU-0dYU4T9fDYk6ORGDtfJAKjTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:15f0::/44
Signature Algorithm: sha256WithRSAEncryption
66:31:51:61:f1:bc:2e:b1:81:23:55:42:e1:c6:9f:93:04:96:
5f:0b:45:9b:81:5c:93:91:e0:7d:16:4c:6e:31:0c:37:9f:2e:
6a:32:75:0b:13:15:d6:b9:ba:3d:12:98:f5:46:34:43:c3:03:
5c:67:9d:97:31:a2:7f:67:f4:5d:e6:8f:e0:89:d6:b2:e4:a6:
2d:69:11:27:c8:73:96:a9:4f:96:ef:4b:56:ce:6d:d7:8b:33:
32:3a:5a:e0:2f:5d:33:37:b0:e0:4d:cd:d3:cb:1b:a1:98:b2:
1f:6e:58:28:5b:f9:31:22:a4:12:88:aa:fe:77:e8:13:74:3e:
e3:e6:9e:9a:d4:e5:0c:75:30:f4:7d:c3:6f:3b:a7:6f:10:6e:
23:08:b6:f5:19:b5:d7:cf:8c:a6:67:2e:6b:e0:b0:49:fe:5f:
b7:4c:ed:d7:c3:13:b3:05:67:f9:f7:00:32:2e:fc:ed:9d:bf:
78:a8:2b:86:0d:d0:7a:34:3d:a0:e9:5f:9c:56:f7:67:9d:d8:
4a:64:21:3f:fb:05:8f:7c:92:83:04:62:53:3d:7d:ce:d6:cc:
22:a4:9e:dd:67:53:33:e9:7c:3a:0a:c9:b1:62:c5:61:d4:54:
d4:ed:3b:00:0a:cf:aa:8c:3f:79:db:8d:ec:af:77:4b:27:b0:
ba:51:59:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:33:18 2024 by rpki-client on console-ams.rpki-client.org