Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ti_azxRVdEe79-12-5xrQqokGmE.roa
File: ti_azxRVdEe79-12-5xrQqokGmE.roa (raw, json)
Hash identifier: x26pMQr9zsPc71AIYZbWbfbH703ylBxZ5LjyqB6BHAQ=
Subject key identifier: B6:2F:DA:CF:14:55:74:47:BB:F7:ED:76:FB:9C:6B:42:AA:24:1A:61
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD363265A929134C6062D779FFB042
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ti_azxRVdEe79-12-5xrQqokGmE.roa
Signing time: Tue 02 Jan 2024 10:34:29 +0000
ROA not before: Tue 02 Jan 2024 10:34:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211484
IP address blocks: 2a0e:97c0:360::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:36:32:65:a9:29:13:4c:60:62:d7:79:ff:b0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b62fdacf14557447bbf7ed76fb9c6b42aa241a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:af:00:f8:5e:3d:8b:57:a7:c9:9c:95:59:5b:
c0:21:86:bd:18:2e:92:bb:0b:13:e9:b7:26:45:ba:
45:5c:fa:16:12:12:f2:fd:71:d8:b2:c8:98:24:bc:
21:f9:68:86:94:f5:aa:8d:23:e8:03:59:08:2d:12:
30:eb:2f:8f:11:73:a2:57:62:0a:85:18:52:4e:34:
d4:ef:41:e3:c6:9c:69:10:a2:67:c9:e2:b5:8e:e5:
c3:f4:44:f3:51:59:60:5c:3f:28:f6:60:17:92:51:
06:f2:a2:f4:0b:f7:7e:68:8f:b6:b3:9c:a0:1c:83:
6a:b0:e2:c7:4b:c9:ef:c5:e8:d9:0e:66:1b:7b:fa:
de:d6:61:4a:d5:3f:c3:da:19:60:a1:54:e5:3c:97:
ce:34:1f:bb:45:dc:3f:7b:f5:c1:f4:65:04:7d:59:
9d:f1:4b:3d:7d:b5:ca:35:38:06:37:32:89:2a:df:
88:d7:26:76:9d:06:6c:be:1e:7f:67:57:46:d4:b4:
dc:a3:41:73:89:2c:5d:c8:9a:15:45:80:91:f6:be:
ab:9e:60:5d:db:ab:24:4a:60:05:2b:eb:4a:42:8d:
d2:85:5a:26:f5:6d:6a:a7:d8:e4:d8:ae:7a:ae:19:
9f:8f:b1:d7:b4:f5:9e:85:08:f0:68:65:02:ab:2b:
97:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2F:DA:CF:14:55:74:47:BB:F7:ED:76:FB:9C:6B:42:AA:24:1A:61
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ti_azxRVdEe79-12-5xrQqokGmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:360::/48
Signature Algorithm: sha256WithRSAEncryption
9a:35:d7:6c:af:01:26:bb:c0:19:83:0a:2f:45:61:37:d3:eb:
d2:a3:79:30:17:a0:0b:7b:4f:7c:c1:54:c0:af:0d:61:cf:1a:
83:7d:07:c0:1f:57:61:97:25:89:e1:62:aa:f5:dc:1e:aa:15:
46:d5:3f:90:a3:0b:a6:57:be:d3:52:51:c2:be:2a:a7:07:2b:
6f:63:bc:c3:7b:11:5e:d4:9a:c4:83:34:4d:9d:25:80:dc:f6:
a5:77:32:f0:15:d0:01:77:a5:8f:bb:36:ff:5f:7b:3b:4d:5b:
2e:62:f2:2b:ec:6c:06:ea:17:80:66:be:bf:3a:2e:29:fa:30:
13:38:25:19:46:6c:b5:4b:cc:d9:89:4b:d4:01:57:b6:79:f7:
72:39:5d:a8:88:94:b8:0f:c5:0c:f1:dc:6c:b5:bb:ab:c2:8e:
e9:ed:f6:ff:c7:78:1f:7a:5d:c6:87:60:09:a3:79:56:73:28:
8a:29:af:38:19:50:6e:0d:39:20:21:8a:15:9f:53:52:90:97:
76:f1:cc:4d:b8:2e:4b:af:62:3a:4e:f3:95:2f:1c:88:54:de:
1d:9b:3a:7e:d5:42:56:b0:70:7f:3d:f7:25:33:9d:72:e2:b4:
4e:e0:10:6d:3a:21:20:9e:6b:21:df:34:29:c5:8e:eb:dd:28:
fb:84:2d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:33:18 2024 by rpki-client on console-ams.rpki-client.org