Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oWPlchcMGu8_KEAs53iJdwLBBZc.roa
File: oWPlchcMGu8_KEAs53iJdwLBBZc.roa (raw, json)
Hash identifier: GcRtNteHx6ZOCDYj6rh2dT+JpLpj1E/ijb+GBLlxhL8=
Subject key identifier: A1:63:E5:72:17:0C:1A:EF:3F:28:40:2C:E7:78:89:77:02:C1:05:97
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019111183743C099CE53D62478F9A39A874D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oWPlchcMGu8_KEAs53iJdwLBBZc.roa
Signing time: Fri 02 Aug 2024 03:18:05 +0000
ROA not before: Fri 02 Aug 2024 03:18:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141221
IP address blocks: 2a0e:b107:e11::/48 maxlen: 48
2a0e:b107:e12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:11:18:37:43:c0:99:ce:53:d6:24:78:f9:a3:9a:87:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 2 03:18:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a163e572170c1aef3f28402ce778897702c10597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d9:61:ac:57:d3:2e:58:e4:a9:76:20:05:cf:
f3:65:67:10:55:b8:8c:0f:e2:e8:46:7c:d1:a4:7e:
7c:90:48:a6:c9:01:d8:0b:54:a1:58:e1:25:e5:25:
b0:f8:3e:2b:2e:9b:32:61:42:c2:59:ce:a5:f6:36:
90:d1:fa:e6:ae:43:eb:e0:79:12:1c:56:a7:b7:5a:
17:1a:34:67:ba:b3:57:f1:a8:e3:fd:ba:2a:a3:03:
8a:af:14:ec:65:27:e2:04:9c:91:05:36:02:f8:f2:
d3:aa:6c:56:f4:27:69:5a:72:ec:2e:09:b5:e2:6c:
0a:bb:23:60:6f:d7:29:ec:5d:04:21:82:38:40:41:
2d:e6:d0:6d:88:65:f9:a4:ae:a3:6e:ae:6b:6f:15:
67:79:5f:13:c4:56:c7:e3:d6:c3:fe:64:3f:3c:41:
9b:ed:2f:c1:0f:9c:f8:14:75:ed:3d:ba:05:97:d7:
af:6c:41:62:e3:98:0c:a7:ca:56:81:c0:05:26:67:
41:8d:c4:39:a5:cb:19:38:b6:b7:48:0f:fe:d5:8f:
fb:16:29:ff:9c:63:75:b8:a5:58:d4:06:80:f9:83:
b0:47:0f:91:09:47:9d:91:21:32:58:c2:fc:11:31:
ea:14:71:7b:08:59:d8:f2:f0:24:22:12:a6:51:f7:
76:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:63:E5:72:17:0C:1A:EF:3F:28:40:2C:E7:78:89:77:02:C1:05:97
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oWPlchcMGu8_KEAs53iJdwLBBZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:e11::-2a0e:b107:e12:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ab:80:79:65:01:9b:ce:6f:09:12:5c:89:49:a1:a0:6e:9b:1a:
42:db:ee:99:b7:32:c2:3d:0e:0a:73:2b:d4:aa:2c:d1:12:2d:
cf:aa:30:7e:23:29:48:a6:cf:d6:c7:36:0c:6b:44:d2:ea:e1:
32:84:ac:20:08:4d:62:45:03:7e:dc:a5:bb:d7:4e:40:bc:0f:
23:4e:10:d5:4f:c1:da:27:95:43:b3:d2:60:fd:25:a3:8e:ff:
2c:43:41:46:67:be:a7:f6:10:67:e8:0e:12:04:d4:c2:73:c0:
e3:cd:0b:fe:f5:0e:6c:68:91:e6:6a:d9:32:18:05:34:1e:c1:
e5:8f:b9:80:da:8d:43:36:3b:5d:bb:90:88:0f:85:5f:63:40:
9b:aa:47:76:ef:6a:5f:28:b4:5c:81:c7:1b:0c:10:c1:32:b2:
a2:cf:f3:5c:79:75:f6:eb:60:b6:6f:7f:df:3f:77:6f:dc:62:
87:66:f0:27:15:27:82:39:81:39:db:93:2c:f6:56:7e:c8:1d:
12:86:b3:21:52:09:f7:09:d4:98:b2:06:e0:3b:c0:73:e0:72:
a8:1b:f6:9e:ff:0a:fd:fc:b6:c3:54:8f:3a:6c:18:f0:d0:63:
73:b1:62:bd:a7:74:28:bb:56:e8:aa:74:e2:b4:fb:89:e6:09:
09:54:86:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:58 2024 by rpki-client on console-ams.rpki-client.org