Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sZqOHwygqf9C7qGDtYmr9vbnaTg.roa
File: sZqOHwygqf9C7qGDtYmr9vbnaTg.roa (raw, json)
Hash identifier: 9zdFt6TS2Etia5JOqz7sinnX9De4uUmXt9s56Dz1cvk=
Subject key identifier: B1:9A:8E:1F:0C:A0:A9:FF:42:EE:A1:83:B5:89:AB:F6:F6:E7:69:38
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCF71D29C568A00A3718622C26690E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sZqOHwygqf9C7qGDtYmr9vbnaTg.roa
Signing time: Tue 02 Jan 2024 10:34:13 +0000
ROA not before: Tue 02 Jan 2024 10:34:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200625
IP address blocks: 2a0e:97c0:61d::/48 maxlen: 48
2a0e:97c0:610::/44 maxlen: 48
2a0e:97c0:618::/48 maxlen: 48
2a0e:97c0:613::/48 maxlen: 48
2a0e:97c0:61e::/48 maxlen: 48
2a0e:97c0:611::/48 maxlen: 48
2a0e:97c0:61c::/48 maxlen: 48
2a0e:97c0:617::/48 maxlen: 48
2a0e:97c0:612::/48 maxlen: 48
2a0e:97c0:615::/48 maxlen: 48
2a0e:97c0:610::/48 maxlen: 48
2a0e:97c0:61b::/48 maxlen: 48
2a0e:97c0:616::/48 maxlen: 48
2a0e:97c0:619::/48 maxlen: 48
2a0e:97c0:614::/48 maxlen: 48
2a0e:97c0:61f::/48 maxlen: 48
2a0e:97c0:61a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f7:1d:29:c5:68:a0:0a:37:18:62:2c:26:69:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b19a8e1f0ca0a9ff42eea183b589abf6f6e76938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:76:17:6f:9f:55:8e:f7:b9:c7:ee:24:6c:
4c:14:08:36:ad:fb:87:fc:d5:72:8b:f2:8f:41:41:
98:2e:75:d6:f2:bb:51:69:4c:14:94:75:6c:57:a8:
3a:8a:c5:04:26:9e:60:c0:0b:dc:c1:00:51:74:15:
02:72:7d:7e:47:7a:4b:15:f6:82:b0:f3:5c:85:9e:
bd:af:15:a1:a4:7f:e3:a6:a0:80:d2:68:e5:5c:49:
aa:83:fb:93:9d:4d:ff:de:1d:95:19:44:38:b9:14:
fc:29:6a:80:87:f1:23:8c:39:c8:83:d9:50:03:c6:
0c:ef:8e:26:d4:1e:c2:58:b0:e5:22:f8:93:90:77:
44:7a:83:7a:86:0a:71:b0:d0:fa:2e:12:ef:bd:e4:
d6:9a:59:b1:cc:c5:04:d0:a5:b9:ae:1b:1c:c5:72:
f8:03:54:67:15:2e:38:45:ae:d9:d0:c0:e0:4a:bc:
b6:a7:79:9f:ab:af:d4:4b:3b:11:23:fe:44:bc:ab:
5d:47:c8:6d:6b:94:56:1d:18:b8:b3:4e:46:1d:7f:
ac:78:c2:b7:bc:71:33:54:10:03:e9:15:61:8b:e5:
a2:25:42:eb:28:03:40:e5:eb:35:a8:7e:03:26:0c:
48:80:18:e8:55:a3:85:e5:11:c5:44:c7:4e:bd:b3:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9A:8E:1F:0C:A0:A9:FF:42:EE:A1:83:B5:89:AB:F6:F6:E7:69:38
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sZqOHwygqf9C7qGDtYmr9vbnaTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:610::/44
Signature Algorithm: sha256WithRSAEncryption
21:c5:2e:e2:9d:70:1e:fd:b1:2b:48:1b:ff:ac:6c:58:68:e4:
4a:44:68:1b:76:bb:f6:b3:14:e7:99:60:c2:3d:0c:f4:46:c1:
b7:ed:cf:c6:aa:66:e7:c5:44:c6:33:c3:73:42:1d:91:ba:3e:
00:c3:37:95:2c:94:4e:67:cc:c0:a7:61:22:6d:90:0b:09:9d:
f5:77:2a:b9:e6:84:2b:90:08:9a:0c:68:17:cd:7a:f9:df:20:
66:ed:8c:0b:61:ca:18:b9:cc:97:14:7b:d3:82:3b:de:fe:59:
4f:82:94:3b:25:10:4f:e4:6d:ec:b3:37:b1:b2:0a:32:45:2d:
22:a5:98:78:7d:c4:9a:20:0a:8f:9d:62:6f:09:3f:69:ff:c0:
8b:f4:5e:a8:17:2e:ad:51:12:8b:cf:f8:b2:b9:b1:4c:1a:39:
a4:93:4a:ce:3e:14:5b:c5:62:37:bc:54:fa:76:b7:17:67:a5:
cd:8e:e3:2f:d0:1a:a5:ab:3a:27:08:e2:29:09:b6:bc:c6:41:
80:4c:9c:af:08:2f:22:43:aa:83:64:cd:4d:88:97:32:53:fc:
6f:f0:29:16:c5:45:48:49:51:42:bd:cf:1d:0e:3e:27:7d:78:
3c:ce:d1:23:58:80:f4:5f:26:db:4b:24:01:39:10:a6:50:c8:
13:8e:3d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:42 2024 by rpki-client on console-fra.rpki-client.org