Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pb9YGoHI88PpTmhk9j16vnI5VAA.roa
File: pb9YGoHI88PpTmhk9j16vnI5VAA.roa (raw, json)
Hash identifier: NiGCz6w3lVKtLo7Lt+Y8yjc+um1ffMcCo6mYqmA06BI=
Subject key identifier: A5:BF:58:1A:81:C8:F3:C3:E9:4E:68:64:F6:3D:7A:BE:72:39:54:00
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0191FF6622574D2D5426E909A53D0C5A3939
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pb9YGoHI88PpTmhk9j16vnI5VAA.roa
Signing time: Tue 17 Sep 2024 09:52:49 +0000
ROA not before: Tue 17 Sep 2024 09:52:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206290
IP address blocks: 2a0e:97c0:a20::/48 maxlen: 48
2a0e:97c0:a21::/48 maxlen: 48
2a0e:97c0:a22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ff:66:22:57:4d:2d:54:26:e9:09:a5:3d:0c:5a:39:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 17 09:52:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5bf581a81c8f3c3e94e6864f63d7abe72395400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:64:fb:f4:38:0c:37:4e:97:88:8e:4b:ab:
33:0a:67:0d:ea:e6:d4:3a:ad:a7:3e:df:72:7a:4a:
5a:f6:9f:54:ab:d9:3d:49:48:78:98:8c:e5:70:61:
5b:e5:24:ab:c8:5f:f0:1e:81:b5:4c:ac:d0:8b:07:
79:fd:a6:af:cf:fb:17:79:b0:bf:ed:7a:bf:b5:20:
3c:54:97:20:83:7e:9b:c1:57:b7:c3:25:89:a4:1b:
ad:82:f6:42:f5:2d:2c:2b:77:07:83:14:38:ba:1e:
af:66:96:6c:71:3b:cf:8d:96:34:c7:ac:44:6b:33:
3c:f4:92:c3:0e:8d:67:46:08:24:ca:3f:83:ba:22:
e8:3d:0a:1c:b7:ff:b4:5c:a3:3c:12:47:7e:d9:bc:
1e:42:16:4c:d0:25:00:dd:cf:97:e2:ca:fb:82:20:
2e:7f:a2:32:75:4e:57:9c:c9:9b:35:1b:16:f1:f4:
b2:f4:d2:de:52:df:a6:9a:04:56:3e:b7:fd:8b:52:
9d:88:84:2c:77:ba:4a:9c:2f:a0:5d:ad:7d:87:43:
93:c4:88:68:49:2f:b2:1a:36:29:a6:b6:fb:50:5f:
5a:76:0f:f1:59:02:e5:73:c2:ae:1d:d4:12:5c:b3:
c3:ad:85:ed:a3:7f:8f:4f:22:47:85:08:f7:4b:da:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BF:58:1A:81:C8:F3:C3:E9:4E:68:64:F6:3D:7A:BE:72:39:54:00
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pb9YGoHI88PpTmhk9j16vnI5VAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:a20::-2a0e:97c0:a22:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4b:15:b6:f6:b6:44:d7:a8:f3:2f:06:07:1e:27:84:d5:46:43:
b4:54:b9:d8:4a:bb:c2:9d:c0:7f:02:3e:41:95:da:1f:6c:99:
73:38:da:f3:b7:c7:96:17:fc:92:0b:1f:7c:ac:ef:10:03:6b:
cf:4e:a5:27:b3:29:df:30:54:98:c6:90:92:12:66:94:11:fe:
8a:fb:18:ee:43:60:e3:49:56:c2:15:96:17:4a:3c:4b:98:d3:
c7:f1:e2:33:40:df:e9:3c:72:2b:17:a9:64:50:bd:8a:28:7c:
0d:40:da:98:62:74:f8:3e:01:d5:47:17:ae:30:79:3a:c9:3f:
7e:14:5f:a5:ad:3c:e5:2e:16:62:74:53:05:12:0d:0c:f5:93:
0e:4c:49:ad:3d:ad:84:2d:48:93:00:c9:94:f6:84:b2:92:cb:
a6:fe:cf:6f:1c:f5:73:43:be:b9:f6:3a:28:ba:0b:ae:65:21:
3a:53:f9:49:7b:79:40:ac:e7:a2:a9:d6:22:e3:be:17:35:80:
16:8c:b7:62:2a:b9:ef:f7:02:74:88:05:89:19:35:8f:55:e4:
cc:9e:f2:db:b1:78:90:3b:81:a2:e9:b1:86:50:c1:25:31:8b:
b0:7e:10:80:54:be:3f:59:d6:95:5c:54:46:e9:f0:f2:1c:70:
d7:8b:d8:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:58 2024 by rpki-client on console-ams.rpki-client.org