Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oVGvy0p8NWEJPwJ7Of8ZLRV2QaU.roa
File: oVGvy0p8NWEJPwJ7Of8ZLRV2QaU.roa (raw, json)
Hash identifier: PGgIZbx8aoWWlNUuQ960rQ8YymSRv+8VasRET30DtKE=
Subject key identifier: A1:51:AF:CB:4A:7C:35:61:09:3F:02:7B:39:FF:19:2D:15:76:41:A5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018DE236A80E9BA4888F4A9C82EED095E332
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oVGvy0p8NWEJPwJ7Of8ZLRV2QaU.roa
Signing time: Sun 25 Feb 2024 21:40:49 +0000
ROA not before: Sun 25 Feb 2024 21:40:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210490
IP address blocks: 2a0e:b107:17b0::/48 maxlen: 48
2a0e:b107:17b1::/48 maxlen: 48
2a0e:b107:17b2::/48 maxlen: 48
2a0e:b107:17b3::/48 maxlen: 48
2a0e:b107:17b4::/48 maxlen: 48
2a0e:b107:17b5::/48 maxlen: 48
2a0e:b107:17b6::/48 maxlen: 48
2a0e:b107:17b7::/48 maxlen: 48
2a0e:b107:17b8::/48 maxlen: 48
2a0e:b107:17b9::/48 maxlen: 48
2a0e:b107:17ba::/48 maxlen: 48
2a0e:b107:17bb::/48 maxlen: 48
2a0e:b107:17bc::/48 maxlen: 48
2a0e:b107:17bd::/48 maxlen: 48
2a0e:b107:17be::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e2:36:a8:0e:9b:a4:88:8f:4a:9c:82:ee:d0:95:e3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 25 21:40:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a151afcb4a7c3561093f027b39ff192d157641a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:66:22:94:de:05:63:b8:c2:c2:fd:4b:40:e3:
ae:c5:63:1d:1d:4a:4e:3e:81:47:31:7b:8c:aa:a1:
b0:06:93:fb:1b:24:40:e5:32:08:f3:52:39:c0:25:
0e:e4:b2:d9:3e:ae:25:a9:f3:18:ae:d6:40:13:f0:
27:ab:26:df:69:e4:1f:76:1b:a7:92:c0:fb:92:2e:
06:94:b5:4c:5b:de:3b:a6:a0:46:8a:72:1a:b7:a2:
6c:d7:b0:49:93:55:4c:8e:68:88:35:f5:85:89:68:
ab:ee:73:e9:88:2d:00:53:61:ac:7c:b2:39:aa:18:
0e:0e:af:75:a3:f5:c1:a0:e2:2c:c1:a4:8c:46:9d:
41:40:1a:d5:a1:fc:29:44:fd:ac:15:38:6b:5e:dd:
b3:7d:b8:87:00:df:29:05:b3:0f:28:de:5c:e0:0e:
c6:c4:3c:fe:24:3b:3a:df:54:00:c9:20:0f:b6:05:
df:6e:36:36:9b:5e:d5:00:8a:0a:82:49:12:25:f6:
b5:ef:b5:d9:20:82:d9:d8:20:63:25:7c:62:8a:62:
4a:15:94:cc:90:e0:eb:29:6a:da:b1:a7:44:ec:5d:
f8:53:52:de:24:2d:60:e4:3e:da:5f:ba:87:b9:81:
e9:f4:e9:de:90:2c:45:55:5f:6a:c7:69:4f:fc:03:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:51:AF:CB:4A:7C:35:61:09:3F:02:7B:39:FF:19:2D:15:76:41:A5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oVGvy0p8NWEJPwJ7Of8ZLRV2QaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:17b0::-2a0e:b107:17be:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
af:f3:3e:30:9c:09:46:8d:b5:9b:ab:ca:6b:e1:30:73:a9:2e:
ae:d1:39:40:86:ca:3b:06:c3:85:de:39:13:bd:5e:a2:0c:f5:
45:a2:a8:d6:3c:b0:6f:0c:0f:21:35:ed:70:8e:45:9a:0b:1d:
7d:ca:66:41:96:62:54:5e:95:12:65:e4:56:b7:c1:a3:ef:38:
de:b7:f6:4c:75:bf:8d:2a:18:8b:a6:e2:34:7e:03:34:7b:c9:
80:94:3f:0d:d4:f0:b8:79:57:12:a0:03:51:5b:2b:bf:19:40:
9b:50:c8:59:08:c3:5b:b2:fc:ec:68:c2:ec:e5:3d:e8:de:4e:
b0:f0:3e:29:b2:bc:86:6b:ed:cd:ee:08:ed:3f:e9:d6:d3:7b:
3c:96:62:dd:2e:65:01:6d:ba:7a:fe:50:fc:c0:75:c4:bc:07:
03:3f:e8:ee:62:81:7f:2d:49:27:11:ce:a9:68:1d:01:0c:29:
1b:ad:bf:13:c6:93:4d:17:30:79:bc:07:ae:98:22:e9:9f:5d:
df:f2:71:48:f3:4e:48:b0:a0:76:18:ae:37:d3:81:69:4b:62:
27:59:f6:04:8f:03:39:64:6d:bb:9e:3d:e0:19:83:03:86:ff:
79:83:8e:24:39:26:46:16:24:16:5e:c3:f1:cc:78:fb:3a:51:
40:cd:3f:ac
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 3 11:06:43 2024 by rpki-client on console-ams.rpki-client.org