Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/p1TdquPow7JX9zjpvrFG7j-OSpk.roa
File: p1TdquPow7JX9zjpvrFG7j-OSpk.roa (raw, json)
Hash identifier: /OePbpoq5Jx7a76qdo2g2d+J1FDHVlOBtoEpMP88g7A=
Subject key identifier: A7:54:DD:AA:E3:E8:C3:B2:57:F7:38:E9:BE:B1:46:EE:3F:8E:4A:99
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01929AC2E9898ADCDBA162AF46206049A8B4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/p1TdquPow7JX9zjpvrFG7j-OSpk.roa
Signing time: Thu 17 Oct 2024 13:55:17 +0000
ROA not before: Thu 17 Oct 2024 13:55:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215011
IP address blocks: 2a06:de00:50::/44 maxlen: 48
2a06:de01:d0::/44 maxlen: 48
2a0e:97c0:8a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9a:c2:e9:89:8a:dc:db:a1:62:af:46:20:60:49:a8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 17 13:55:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a754ddaae3e8c3b257f738e9beb146ee3f8e4a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:81:39:6d:d1:69:da:26:4b:11:39:b1:3e:
43:f0:e8:00:4c:ad:aa:97:ad:6e:cd:db:8a:6d:27:
b0:16:37:e7:a6:1e:a4:1d:cb:6f:fb:e8:46:78:68:
88:ba:7c:a7:1f:00:f5:de:76:d3:17:c5:c5:fd:6b:
9b:a1:57:3e:ce:be:8a:4f:ac:38:53:e2:0e:5c:95:
b4:0e:d3:bc:e1:02:96:2f:3c:2a:17:7c:78:7a:67:
a9:ba:49:5c:4c:dc:2d:95:00:6d:eb:b3:7f:8f:8c:
d6:0d:20:02:3c:ad:b6:bc:c5:76:8a:85:01:ec:59:
e7:68:17:0e:72:21:86:4e:b7:41:7a:c5:09:b9:07:
48:55:44:62:a0:95:4e:19:f4:02:7a:5f:7a:a7:39:
60:d7:ba:1b:99:ff:11:18:88:51:75:2f:91:0f:3d:
d9:af:dd:eb:cf:26:5c:2e:13:51:1e:d2:b2:53:1c:
10:b2:d2:79:4a:8e:ad:b2:e4:68:40:6d:fc:63:01:
9c:80:bb:11:53:62:63:6d:c9:54:31:f3:f9:3c:f9:
ed:ee:f8:c7:a5:d9:df:31:a5:12:9b:11:e9:25:3d:
e5:b5:6b:aa:fe:13:50:eb:46:03:fa:2d:5d:a4:af:
c8:30:eb:6e:c1:32:39:7c:ac:42:12:38:5a:f1:d8:
60:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:54:DD:AA:E3:E8:C3:B2:57:F7:38:E9:BE:B1:46:EE:3F:8E:4A:99
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/p1TdquPow7JX9zjpvrFG7j-OSpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:50::/44
2a06:de01:d0::/44
2a0e:97c0:8a0::/44
Signature Algorithm: sha256WithRSAEncryption
7d:82:06:7d:09:9a:67:29:ba:69:8a:92:61:20:fe:63:80:79:
11:93:b3:81:8a:cd:9a:82:4f:05:c1:c3:09:13:47:6e:f3:77:
35:93:a9:a3:66:5e:3c:87:4b:7f:6b:aa:8f:75:c7:17:83:92:
20:2f:94:52:f1:e8:b6:f9:c8:3e:ef:b6:83:dc:fc:6f:41:1b:
6a:dc:0c:76:3a:60:49:35:aa:d3:cf:f7:4e:03:2d:1a:a6:f1:
ce:c4:d4:82:a4:90:cf:f6:14:52:84:03:dc:1c:df:0e:81:0f:
94:14:24:99:34:c0:68:15:f2:98:2e:69:df:64:28:65:ce:24:
b6:80:93:f0:5b:c9:69:74:2f:f8:54:e2:05:1e:51:69:39:40:
73:d3:20:6c:67:b7:14:ec:85:2d:d6:3b:24:7d:04:99:9b:fa:
d4:42:79:d7:66:a3:1b:03:6d:23:5a:64:d8:00:db:85:be:6d:
d1:e5:c4:e2:be:d9:98:8c:eb:e5:63:45:f4:b3:d0:3b:1c:76:
ee:3a:fc:7c:a7:5d:bb:84:59:37:e4:6b:7e:db:e6:c1:74:64:
87:ed:ec:ae:0c:c6:08:d4:a0:cb:67:b2:b9:74:dc:9f:dd:2c:
c4:a5:20:ee:67:ee:77:4e:73:34:da:74:6d:6b:03:aa:c2:a0:
8f:a2:89:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:31 2024 by rpki-client on console-fra.rpki-client.org