Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/r5n7AYPigIue2xEzUzO4PpDT__U.roa
File: r5n7AYPigIue2xEzUzO4PpDT__U.roa (raw, json)
Hash identifier: 4a1iMqHf/BVBvEfZ9+TbT3hCRm+tBBJuP77imOVO1RA=
Subject key identifier: AF:99:FB:01:83:E2:80:8B:9E:DB:11:33:53:33:B8:3E:90:D3:FF:F5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCC42E58CE8F446EEA1C4F17E5CC0E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/r5n7AYPigIue2xEzUzO4PpDT__U.roa
Signing time: Tue 02 Jan 2024 10:34:00 +0000
ROA not before: Tue 02 Jan 2024 10:34:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 2a0e:97c0:a80::/44 maxlen: 48
2a0e:97c0:300::/44 maxlen: 48
2a0e:97c0:650::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c4:2e:58:ce:8f:44:6e:ea:1c:4f:17:e5:cc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af99fb0183e2808b9edb11335333b83e90d3fff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:48:5d:a3:b3:8c:35:bc:40:fe:f2:25:e2:
80:05:ef:3e:bb:54:da:1c:17:bf:14:1e:50:b8:0e:
bf:79:3e:d7:72:ca:b1:0f:d6:e8:e6:b5:97:38:56:
9a:af:c5:c9:c0:6c:71:a8:21:cb:5d:eb:31:9e:fe:
41:b1:de:e4:a4:2d:82:74:75:ae:e4:2c:49:81:34:
b5:ce:e2:d4:6d:55:fc:dc:48:b1:23:81:0d:a3:d4:
bc:7c:fd:5b:40:82:88:ca:7c:b7:b3:38:1f:3e:f1:
37:fd:ac:1f:78:65:98:93:7d:8e:b8:7f:03:af:a2:
54:dd:d0:1a:6b:85:c6:10:46:3b:68:77:57:4c:13:
7d:48:ac:40:aa:d4:80:8e:9b:77:7d:a8:ce:02:0f:
cb:23:e2:3d:77:1b:57:72:d5:ac:07:02:ba:bd:89:
cf:8d:f0:11:11:1b:02:cb:2b:09:bd:aa:19:af:79:
79:51:ce:15:d0:67:58:0b:c0:9e:04:46:dd:1e:15:
a1:05:ac:44:be:be:da:65:76:83:f3:6f:c0:8a:7d:
b5:38:15:4d:b4:0f:ea:81:a7:5f:0d:6e:a1:a6:8c:
11:8e:35:6d:86:6b:69:16:ae:ca:2d:f8:e8:57:96:
52:7b:25:dc:64:c0:dc:68:49:ee:e1:b3:e3:48:f8:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:99:FB:01:83:E2:80:8B:9E:DB:11:33:53:33:B8:3E:90:D3:FF:F5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/r5n7AYPigIue2xEzUzO4PpDT__U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:300::/44
2a0e:97c0:650::/44
2a0e:97c0:a80::/44
Signature Algorithm: sha256WithRSAEncryption
61:f9:78:83:57:e6:23:45:34:e0:fc:23:0b:0d:02:a3:8c:a5:
a1:23:39:98:bb:21:1e:33:49:ad:e4:26:b8:0e:6b:ca:21:39:
06:46:49:bc:13:92:d7:81:17:49:f0:eb:4b:6a:b4:6e:16:47:
d5:c5:64:d5:1f:ab:2e:13:43:04:78:d4:4c:c5:af:88:01:3c:
31:45:1a:1d:d2:89:35:c0:f0:23:70:90:e7:91:9d:46:f5:eb:
9d:5f:a4:ee:79:d5:4e:0c:ef:76:34:03:78:c4:1a:59:dd:6a:
1c:b4:35:95:24:c2:9e:6a:d3:7f:b0:89:32:fb:a0:97:6a:90:
b4:81:9e:ae:ca:cd:be:60:bc:3c:24:8b:d2:1b:1a:e1:51:51:
dc:68:53:2b:ce:e3:c1:bb:f0:f4:89:7f:fa:b8:c1:6a:36:67:
43:80:51:81:51:c8:bf:20:fb:c7:9b:9a:63:a1:d8:0c:06:de:
f3:0d:2e:c4:48:cc:9c:36:99:10:98:1c:0a:c9:9f:dd:57:cc:
ff:76:86:00:ce:e7:6c:03:64:53:79:c8:86:91:97:da:ed:b3:
72:a2:18:7d:53:15:60:4e:1e:fe:b0:8b:4f:6e:03:c3:d3:97:
46:e4:13:da:9c:79:a9:a9:c8:70:f6:4a:0a:0e:7d:19:52:62:
7b:d4:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:09 2024 by rpki-client on console-fra.rpki-client.org