Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/plb2tZ_L2T_mkex8CwxbVsDOVQk.roa
File: plb2tZ_L2T_mkex8CwxbVsDOVQk.roa (raw, json)
Hash identifier: gsF6xNQqlOlibPa3G96JHmH0p5PizkzRMmEUBfEwkiw=
Subject key identifier: A6:56:F6:B5:9F:CB:D9:3F:E6:91:EC:7C:0B:0C:5B:56:C0:CE:55:09
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018F195F666D53D3669087D46A2D58547722
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/plb2tZ_L2T_mkex8CwxbVsDOVQk.roa
Signing time: Fri 26 Apr 2024 07:47:13 +0000
ROA not before: Fri 26 Apr 2024 07:47:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215035
IP address blocks: 2a0e:97c0:290::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:5f:66:6d:53:d3:66:90:87:d4:6a:2d:58:54:77:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 26 07:47:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a656f6b59fcbd93fe691ec7c0b0c5b56c0ce5509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:07:81:62:97:07:83:76:77:39:8f:9c:f2:
35:78:56:a6:20:51:6a:1b:80:b6:f6:1a:14:29:fa:
67:0b:ba:b0:d3:56:6c:b6:7d:e4:a0:2b:0f:54:43:
eb:38:8c:fb:59:37:ea:0d:aa:d7:3b:6f:7a:4e:28:
08:4f:bf:63:f2:63:ad:e0:c6:14:28:cb:77:d8:1b:
86:34:f3:c0:ba:74:6b:c2:ef:e5:9c:b8:7b:2a:a2:
ef:0e:da:0b:b8:61:ce:ab:58:8d:e2:52:a7:f7:8d:
17:b8:c5:22:68:f6:c4:b3:63:00:1b:7e:55:b8:4b:
76:76:8b:21:02:a9:81:34:b9:1c:51:91:f4:de:c1:
c5:99:33:7a:a3:f3:b7:68:12:a0:95:98:38:31:cd:
3f:d1:d3:f6:6a:fc:5e:9f:d1:2f:fc:ee:8a:61:57:
32:d6:08:d9:31:d3:a0:a5:ea:cb:e1:28:b5:d8:14:
ca:a6:6d:0e:2b:70:93:39:a2:78:96:59:73:33:25:
bc:41:94:43:e2:00:d2:4b:9e:29:11:6f:7a:ae:46:
78:24:e7:68:d4:46:70:1d:1b:cc:53:97:63:88:8b:
70:c8:f1:16:fa:66:a5:e6:99:c2:c5:9d:2f:b4:6c:
8f:48:6b:b9:51:ca:34:67:67:ba:0c:ec:15:cf:0b:
8b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:56:F6:B5:9F:CB:D9:3F:E6:91:EC:7C:0B:0C:5B:56:C0:CE:55:09
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/plb2tZ_L2T_mkex8CwxbVsDOVQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:290::/44
Signature Algorithm: sha256WithRSAEncryption
39:82:84:53:53:2e:7f:e6:30:c7:d3:28:f1:95:39:ff:82:f8:
d6:f1:12:5c:fb:20:12:c0:98:af:e8:4b:7a:af:9b:5e:12:45:
80:db:b0:c6:9c:27:86:c0:03:56:cc:14:70:e4:6c:1c:43:6a:
a3:b5:46:85:19:d9:e9:91:1e:86:b6:c7:f8:cc:c7:98:bd:42:
e3:39:9b:de:ad:53:ba:6d:0d:88:13:6a:6d:60:aa:71:7b:73:
2d:76:61:ff:c6:b4:2b:e5:93:fb:f5:bd:7f:6f:9e:2f:5f:15:
7c:47:44:42:f7:5e:2c:d6:10:cc:ec:1b:03:c4:08:7f:2e:19:
37:5c:03:34:a3:e4:cc:d8:08:92:96:36:c0:b0:e7:ac:6c:15:
3c:7a:1a:ea:81:53:13:ea:61:82:dd:19:ee:e3:f4:a5:a9:b5:
6a:23:ab:32:b4:d5:b0:1c:cd:43:17:61:80:19:e9:f4:63:71:
65:de:5c:8f:e6:0e:b6:6b:1c:56:43:37:42:f8:78:9d:a8:8c:
6e:ff:03:1f:46:c3:18:92:7b:33:55:52:4f:61:df:a7:3d:ac:
40:9b:51:55:dd:37:7b:a6:ce:e4:e1:75:90:5c:7a:3c:5b:6a:
d6:64:c3:fa:27:c4:22:ca:cb:3e:1b:b2:17:b8:88:91:17:97:
51:fc:3f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:37:21 2024 by rpki-client on console-ams.rpki-client.org