Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pu9R8CBGmCwYYtjplkkVUIBSH10.roa
File: pu9R8CBGmCwYYtjplkkVUIBSH10.roa (raw, json)
Hash identifier: YPuXctCVhQ58PoM1eopZHUqufKYpJOfb2pDngVanD34=
Subject key identifier: A6:EF:51:F0:20:46:98:2C:18:62:D8:E9:96:49:15:50:80:52:1F:5D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018E1A4DF9895CF1EC5767EC4D6DCA5CBDA0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pu9R8CBGmCwYYtjplkkVUIBSH10.roa
Signing time: Thu 07 Mar 2024 19:05:01 +0000
ROA not before: Thu 07 Mar 2024 19:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216427
IP address blocks: 2a06:de00:ad00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1a:4d:f9:89:5c:f1:ec:57:67:ec:4d:6d:ca:5c:bd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 7 19:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6ef51f02046982c1862d8e99649155080521f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:32:d7:25:c1:b2:45:a7:01:8c:54:de:fd:
0f:ae:bd:7e:4b:a0:3a:a9:bf:cc:8b:a1:14:5a:d1:
99:3e:95:67:ef:89:44:cd:19:7e:36:d4:f9:70:cd:
08:3f:b0:dd:64:df:ec:88:14:a5:16:df:2b:e6:0c:
b0:10:8d:27:5e:c4:6b:cb:47:c6:10:ff:dd:16:bc:
6c:09:d6:c5:ae:4a:17:7e:1b:02:a7:10:36:44:88:
1b:7f:7b:2b:71:00:ea:7d:05:26:81:27:6e:06:8a:
00:8f:41:79:ba:28:d1:4e:c3:b9:2b:b6:b2:fb:2d:
06:b9:de:cb:c6:10:56:66:72:5e:ca:a2:d5:b3:f4:
49:15:49:63:e8:eb:7f:1a:01:04:0a:4c:ac:56:02:
5d:cd:50:40:88:74:ee:1e:d6:7b:b3:49:93:7e:23:
02:04:dd:e0:24:67:e8:72:9f:2f:b9:8e:f3:9f:3b:
56:3a:ce:e6:b4:50:e6:83:4b:61:d3:03:68:36:5b:
94:50:f8:92:f4:92:96:28:81:16:f2:8f:bc:34:b1:
9e:17:68:84:7a:82:5c:4b:d6:5e:d7:df:75:51:bf:
8e:1f:cc:0b:73:87:3a:b1:3e:fc:72:60:3f:53:75:
28:72:74:6c:70:66:9c:3c:80:09:17:4e:48:24:e5:
90:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EF:51:F0:20:46:98:2C:18:62:D8:E9:96:49:15:50:80:52:1F:5D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pu9R8CBGmCwYYtjplkkVUIBSH10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:ad00::/44
Signature Algorithm: sha256WithRSAEncryption
29:c8:82:02:ec:d7:8e:ac:a6:ac:bb:22:a9:9e:37:37:4e:4a:
b7:2a:b9:af:5f:b2:85:df:59:2c:3d:f7:17:0e:3e:67:fb:68:
e5:5b:74:45:9d:ef:78:61:e7:b6:b3:bb:24:0f:79:12:d7:f6:
9a:49:7f:17:70:54:ce:d4:7a:f0:e8:ca:6c:f4:b4:a9:09:f5:
52:3d:08:63:87:db:33:41:31:12:26:fd:5a:ad:9a:2b:47:a8:
ae:86:c8:5b:2e:b0:da:76:a9:e5:85:cd:13:69:64:a9:c2:db:
94:b6:c4:1e:fe:80:15:f1:aa:2a:42:8c:ab:3b:5f:e2:4e:bf:
f2:f4:63:c5:81:30:62:52:36:ef:ae:47:ec:f4:30:6c:92:79:
d5:c1:1e:7a:f2:ba:65:a6:6c:85:d0:4b:89:f7:27:4e:b3:66:
c8:87:71:3f:6f:4d:0c:74:b8:9c:ae:38:3b:29:ce:2f:08:82:
18:69:59:40:85:67:14:14:f5:47:69:61:45:b9:ba:68:b5:82:
58:22:4b:9b:99:2a:25:de:46:de:34:86:b4:5a:18:66:55:36:
ef:92:1d:ab:33:6a:08:ba:da:a8:d4:e2:b0:67:c2:52:b8:03:
d5:65:31:85:bb:99:34:bb:c2:07:49:3b:9f:c1:b4:e4:b5:a3:
50:13:8a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:36 2024 by rpki-client on console-fra.rpki-client.org