Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pReegV6tV1lmzGjytT1YlJbFlQU.roa
File: pReegV6tV1lmzGjytT1YlJbFlQU.roa (raw, json)
Hash identifier: TYFEi2/QYlqseywtCKjE4q7g9gWtz3tfBT0bLSnZq7M=
Subject key identifier: A5:17:9E:81:5E:AD:57:59:66:CC:68:F2:B5:3D:58:94:96:C5:95:05
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCF5914386BEF33FE80DB07500C1BC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pReegV6tV1lmzGjytT1YlJbFlQU.roa
Signing time: Tue 02 Jan 2024 10:34:13 +0000
ROA not before: Tue 02 Jan 2024 10:34:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200581
IP address blocks: 2a0e:b107:1d90::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f5:91:43:86:be:f3:3f:e8:0d:b0:75:00:c1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5179e815ead575966cc68f2b53d589496c59505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:10:94:06:60:3a:a8:f6:3d:bc:56:fe:d1:82:
0c:6c:c7:12:a3:7c:4e:57:7c:8a:3a:41:98:e4:99:
22:1a:5d:9f:8f:fa:30:30:3a:e0:6c:77:c7:35:74:
8d:d1:7d:68:84:06:89:16:d3:46:da:8e:86:9f:81:
30:94:cf:67:e7:f0:e5:9a:6f:b9:ed:db:42:91:14:
bf:5b:a0:c9:2e:69:9f:f9:64:d3:00:fe:13:8b:33:
03:7b:81:e3:9c:87:1f:11:64:7f:a4:51:4c:0b:17:
33:b6:25:0e:0d:06:1c:79:de:1a:aa:26:c5:6e:f7:
5f:a3:1c:e2:a1:5e:6d:22:5d:e6:62:46:51:bb:6c:
13:31:d6:45:57:36:52:de:51:19:37:33:b7:e7:65:
f7:70:94:1e:23:a6:2f:9d:f6:d4:f2:ca:86:32:ac:
18:46:4a:f9:11:85:de:48:30:72:f1:b1:a3:3e:ac:
16:d4:28:48:6f:12:d8:cd:3d:f3:12:1f:03:71:8c:
46:97:2a:fb:a2:0d:0e:ae:fc:82:27:3b:4d:85:6f:
d4:a7:d5:64:2c:27:70:55:97:32:dc:09:6f:bd:e0:
a1:3e:b6:49:a8:a6:9f:dc:d7:bc:2e:25:59:f6:fb:
2b:68:9a:16:1f:e6:e5:71:d7:61:7d:a6:b7:27:f7:
1c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:17:9E:81:5E:AD:57:59:66:CC:68:F2:B5:3D:58:94:96:C5:95:05
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pReegV6tV1lmzGjytT1YlJbFlQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1d90::/48
Signature Algorithm: sha256WithRSAEncryption
af:ed:55:16:c6:e0:de:2d:22:c9:b5:4c:8a:ff:7b:a4:6b:7a:
f5:a3:52:97:c7:72:0d:47:fa:ee:d6:06:8d:2b:a2:3a:36:94:
64:cd:6b:77:9a:f4:0f:29:6d:55:09:3a:56:dc:a6:8c:66:0a:
0a:2d:97:ef:3f:04:88:d9:91:0e:9e:47:22:55:3c:db:9f:19:
ab:55:24:e2:a3:5a:51:83:90:bd:47:e2:cd:93:c3:70:f1:c2:
0c:96:40:f9:75:c2:96:5b:a5:c8:84:51:26:41:01:f6:26:a6:
48:4d:0c:c4:c1:dd:41:c9:39:f8:13:94:92:ca:89:69:a3:8b:
5f:89:27:a5:b3:14:c5:4b:d0:0f:5f:20:d3:70:44:83:8c:b2:
be:26:d5:50:0e:55:92:7d:a0:ed:06:f8:3b:a0:12:94:06:90:
68:a7:66:da:df:a9:ad:d7:aa:2b:d6:a9:b9:71:e6:ff:4d:da:
aa:bc:d1:ef:7c:ab:7d:82:0a:88:99:fa:25:07:90:a0:aa:1a:
eb:03:02:6b:43:bb:cc:b1:aa:11:1d:c7:ee:76:f8:9e:11:af:
03:ad:53:9a:a6:1a:a1:ef:c1:8b:0b:0f:6c:ac:74:48:41:38:
e4:6b:01:39:5a:aa:c9:64:fc:3c:4f:58:b4:06:dd:75:ef:80:
8c:61:66:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:58 2024 by rpki-client on console-ams.rpki-client.org