Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oqK6JLG01fgsELiy1z_JajEEZz0.roa
File: oqK6JLG01fgsELiy1z_JajEEZz0.roa (raw, json)
Hash identifier: A60mt25FWncOrf/3/ef1Z8hUPTNHZAhbEw75XGghIR8=
Subject key identifier: A2:A2:BA:24:B1:B4:D5:F8:2C:10:B8:B2:D7:3F:C9:6A:31:04:67:3D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD1CD0623F5217AF59E6AD8EB862F7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oqK6JLG01fgsELiy1z_JajEEZz0.roa
Signing time: Tue 02 Jan 2024 10:34:23 +0000
ROA not before: Tue 02 Jan 2024 10:34:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209391
IP address blocks: 2a0e:b107:1c90::/48 maxlen: 48
2a0e:b107:1c95::/48 maxlen: 48
2a0e:b107:1c9a::/48 maxlen: 48
2a0e:b107:1c9f::/48 maxlen: 48
2a0e:b107:1c94::/48 maxlen: 48
2a0e:b107:1c99::/48 maxlen: 48
2a0e:b107:1c9e::/48 maxlen: 48
2a0e:b107:1c93::/48 maxlen: 48
2a0e:b107:1c98::/48 maxlen: 48
2a0e:b107:1c9d::/48 maxlen: 48
2a0e:b107:1c92::/48 maxlen: 48
2a0e:b107:1c97::/48 maxlen: 48
2a0e:b107:1c9c::/48 maxlen: 48
2a0e:b107:1c91::/48 maxlen: 48
2a0e:b107:1c96::/48 maxlen: 48
2a0e:b107:1c9b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:1c:d0:62:3f:52:17:af:59:e6:ad:8e:b8:62:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2a2ba24b1b4d5f82c10b8b2d73fc96a3104673d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:64:6e:ed:dd:cf:08:51:ba:5b:8b:db:c5:cb:
22:b9:ef:9b:2e:7a:ba:7f:c9:2c:4f:4c:6a:81:31:
7c:1d:60:28:f8:fc:da:a0:94:fc:21:69:4f:d4:2d:
16:88:8a:a3:42:77:11:9c:37:b2:0c:f4:99:09:ed:
39:ad:8d:7c:24:f0:18:f9:a6:79:e0:1c:e1:97:6a:
fe:22:20:97:10:b0:fd:38:45:65:4e:97:fb:fd:c7:
38:db:0c:0b:47:77:a8:9d:c1:8d:0d:0a:27:dc:23:
07:9e:f3:4b:be:b7:19:64:d9:98:4a:9b:cc:f9:e4:
c4:9e:28:01:3b:d2:01:00:6a:08:fc:de:91:ce:9a:
49:19:6f:67:f0:21:07:5c:c0:c9:3e:27:06:f7:63:
20:59:52:c4:a7:d9:ca:53:bd:af:a5:1c:90:c5:2c:
e9:26:84:f3:2f:ca:84:fc:12:4d:0e:48:8b:1e:bd:
3c:7a:92:c9:35:ff:cc:1b:18:6b:fb:de:66:70:36:
e2:81:df:da:fe:7e:c7:89:8a:17:1e:9c:5a:be:55:
71:cd:8f:b0:a1:c5:eb:4a:3d:70:41:77:7f:cc:ba:
b9:da:aa:44:7d:f7:ea:95:35:38:af:75:c4:80:8c:
95:0f:5a:7e:54:a9:86:05:b1:d1:f8:66:72:76:ad:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A2:BA:24:B1:B4:D5:F8:2C:10:B8:B2:D7:3F:C9:6A:31:04:67:3D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oqK6JLG01fgsELiy1z_JajEEZz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1c90::/44
Signature Algorithm: sha256WithRSAEncryption
7e:06:3f:ae:ee:35:57:ac:1e:02:ce:99:1f:4d:ff:ea:ea:1c:
f5:ac:b6:49:fc:29:12:7f:41:42:4f:2a:24:04:ed:db:10:0b:
ae:e8:ab:32:78:36:7d:a3:e0:b1:b4:08:13:87:23:af:47:68:
66:2e:e5:3d:9a:df:ad:48:85:15:cb:ef:1e:01:ff:c6:ac:ce:
09:11:30:82:9c:da:3f:de:54:60:e8:67:a4:63:dd:2a:5a:de:
99:74:51:11:11:c6:30:69:92:47:e0:ea:3a:71:32:d2:30:47:
22:47:d8:eb:0f:82:69:cf:cf:f8:83:83:c2:5a:55:96:0a:2a:
ad:19:33:81:9a:41:d8:7c:55:b0:66:9e:7b:fd:11:41:35:a0:
da:3e:f5:b5:61:9e:95:56:02:d0:46:96:41:97:1a:58:12:ea:
f6:b0:a8:c2:7d:39:c1:d0:01:1c:4c:46:48:e9:1d:9b:eb:db:
73:19:3e:e8:f2:04:0c:15:cc:d7:e5:ce:6a:68:41:0e:47:6f:
4a:cd:be:f3:e7:01:93:42:cc:5d:c1:25:87:c3:70:7e:0f:9c:
43:ee:a8:6d:44:10:66:d5:8b:77:3b:e9:f0:70:04:e4:dd:a8:
d8:d7:12:97:36:f0:16:9e:a9:52:ff:93:aa:71:06:91:90:2f:
6f:c8:e9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:31 2024 by rpki-client on console-fra.rpki-client.org