Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/opBO6w8gqXfuHeKaj7U5629DkBA.roa
File: opBO6w8gqXfuHeKaj7U5629DkBA.roa (raw, json)
Hash identifier: Wa31Md4Izgh0TQzqWkjBM4zCZLAbaOR/9/7NlfgxlhI=
Subject key identifier: A2:90:4E:EB:0F:20:A9:77:EE:1D:E2:9A:8F:B5:39:EB:6F:43:90:10
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCCC24509FF3CCB2216E51D8CCD63C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/opBO6w8gqXfuHeKaj7U5629DkBA.roa
Signing time: Tue 02 Jan 2024 10:34:02 +0000
ROA not before: Tue 02 Jan 2024 10:34:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44592
IP address blocks: 2a0e:97c0:3e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:cc:24:50:9f:f3:cc:b2:21:6e:51:d8:cc:d6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2904eeb0f20a977ee1de29a8fb539eb6f439010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:0f:bf:e9:df:12:32:38:e2:b6:4f:1b:37:
06:a1:6c:5b:12:b3:06:e9:92:17:1b:eb:66:dd:0b:
9c:da:05:ac:0d:5a:ef:14:dc:b3:ae:24:d7:24:09:
50:59:84:94:34:c4:9d:07:fd:c5:e9:d8:9e:cb:cc:
a6:08:c8:8b:2c:6b:d8:6e:e6:be:93:fa:ba:97:ea:
3d:3f:23:65:29:95:4c:ed:45:b3:99:32:92:bc:0e:
ec:28:0b:f0:fd:91:d3:19:e7:c0:9f:6f:07:6f:9c:
7d:27:00:ad:ea:14:0e:37:40:f8:b7:9b:e4:74:b7:
8b:bb:09:ff:67:56:f7:1f:20:43:9c:02:b8:40:31:
cb:a2:e4:3f:2f:83:44:04:7e:02:6e:51:86:76:9a:
de:da:77:66:e0:70:97:50:21:f7:8e:fb:f5:cc:52:
62:78:ee:74:b2:93:b6:39:a7:86:a4:5f:4b:ff:fb:
6c:44:6d:5c:bb:46:cc:5d:9e:6c:5c:1f:a7:08:a7:
05:bb:41:9a:33:d2:63:6d:02:d6:2f:54:c2:1f:c0:
22:27:4a:fe:ae:90:5a:67:e9:06:73:7f:16:a6:25:
4d:b3:27:92:8b:a1:07:37:cb:01:89:3b:76:67:05:
31:11:c3:bd:da:09:a9:87:d6:4c:58:97:ae:25:8b:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:90:4E:EB:0F:20:A9:77:EE:1D:E2:9A:8F:B5:39:EB:6F:43:90:10
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/opBO6w8gqXfuHeKaj7U5629DkBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3e0::/48
Signature Algorithm: sha256WithRSAEncryption
a5:42:d9:0c:c8:93:38:f0:1a:c7:52:ba:89:50:24:c6:e9:4a:
03:e8:15:e7:a7:87:de:e7:88:95:41:99:5d:03:5f:4f:c9:4e:
18:c3:ea:cf:23:99:93:8a:2d:65:a3:19:72:24:61:4c:78:78:
ef:2f:5b:d3:25:92:62:ab:95:72:e8:88:b8:e1:ba:f9:13:75:
f6:55:86:ac:84:78:83:40:7b:5f:ca:5b:5f:98:bb:88:63:33:
2b:46:d6:27:4f:a6:84:69:be:62:3a:4e:f5:d7:a0:0b:b0:5e:
25:9f:a5:ae:b5:1c:03:5d:5c:d9:60:0c:0a:fb:59:e5:86:e5:
80:20:e9:05:99:5e:45:70:94:6f:7f:a6:3e:14:bf:09:f3:10:
ce:c0:5b:60:cb:86:d9:af:02:02:88:7f:f0:2a:38:2f:ca:e0:
0f:60:aa:9b:ff:39:4e:4a:6f:16:ae:4b:07:c9:5f:c1:60:bd:
9d:37:9b:48:03:64:ee:2c:ae:6a:bf:35:e3:64:56:21:2b:1f:
eb:be:2c:23:67:73:d1:52:24:23:83:aa:80:1c:94:81:4e:06:
92:c4:3b:15:a6:cc:07:57:e3:f4:51:32:dc:d1:91:1c:b8:3f:
0f:4c:4c:e9:da:08:51:b7:52:a8:90:56:28:fb:24:4e:c8:95:
2b:a2:22:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:17:53 2024 by rpki-client on console-ams.rpki-client.org