Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/to2UZKLoeFmjA-Cs-gF1RnM60Vk.roa
File: to2UZKLoeFmjA-Cs-gF1RnM60Vk.roa (raw, json)
Hash identifier: KJ1aSK2Xp+Zklg5pv22FMsMiDvnK14HL4GlKqCMIKjE=
Subject key identifier: B6:8D:94:64:A2:E8:78:59:A3:03:E0:AC:FA:01:75:46:73:3A:D1:59
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD2027C67C858239598EAFDD30F357
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/to2UZKLoeFmjA-Cs-gF1RnM60Vk.roa
Signing time: Tue 02 Jan 2024 10:34:24 +0000
ROA not before: Tue 02 Jan 2024 10:34:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209861
IP address blocks: 2a0e:b107:f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:20:27:c6:7c:85:82:39:59:8e:af:dd:30:f3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b68d9464a2e87859a303e0acfa017546733ad159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:f7:21:a0:2e:bd:e9:0a:39:e1:a5:c7:8a:
8f:43:78:d9:b8:af:2a:2f:71:24:da:24:2f:70:64:
4d:e6:8b:9e:d2:a2:14:1f:aa:8e:fc:5c:f0:9e:9c:
81:27:04:5f:dc:b0:86:65:44:23:b5:8c:d8:c5:20:
64:94:23:bb:2c:e0:48:17:1d:21:2a:73:36:d4:4f:
e8:38:fe:b3:40:db:83:84:eb:9d:e9:1c:70:cb:60:
1c:9c:7c:11:3d:e8:de:93:82:fb:c3:36:c7:fa:5d:
25:50:2f:09:d3:aa:6d:51:21:c2:73:01:ec:26:d7:
5b:ee:81:86:f3:af:e3:bd:96:2e:2a:79:b8:03:43:
21:13:3e:f0:54:dd:81:07:ff:bc:f4:86:96:3f:5a:
de:55:63:c3:85:a2:13:9f:75:21:14:eb:39:2d:ad:
d8:11:f0:38:3f:a5:15:70:b0:02:6a:98:3c:94:4b:
e0:29:bb:8c:a9:cc:8b:53:fb:08:28:6a:d3:b2:a8:
1f:88:9c:8b:be:00:47:30:fd:90:64:af:c6:e7:b6:
fa:4e:ff:68:e4:90:05:ea:40:39:8c:52:4d:2c:db:
80:74:1e:c2:58:c3:49:41:4e:a3:09:30:6f:b0:76:
bc:7d:ec:03:f3:c9:88:42:25:23:c9:ce:cb:31:42:
45:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8D:94:64:A2:E8:78:59:A3:03:E0:AC:FA:01:75:46:73:3A:D1:59
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/to2UZKLoeFmjA-Cs-gF1RnM60Vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:f0::/44
Signature Algorithm: sha256WithRSAEncryption
b0:1e:2e:4c:61:f8:fd:63:f3:76:e6:df:33:5e:43:4b:04:0c:
fa:a6:0b:70:84:f7:c3:ee:b8:f5:9d:f9:9e:b9:0d:a4:16:d8:
90:5b:0e:b7:ae:1e:0e:5d:84:87:85:f8:c2:00:80:e2:b0:c5:
06:cd:e1:75:02:e2:27:04:89:14:e3:0f:ce:40:9a:91:ea:03:
de:58:e0:ac:ba:3d:ee:76:65:94:88:e9:b2:6f:c8:1d:03:52:
00:58:06:a8:c3:c3:fa:ca:b1:25:4f:bd:60:bb:0e:f8:de:54:
82:a1:83:f9:70:bf:de:60:c4:7b:23:bb:bd:a6:00:c8:06:85:
84:0e:e6:74:cf:28:a2:52:e3:db:01:8a:58:f3:43:79:fb:e3:
01:85:6d:cc:67:85:01:ec:10:b9:7b:3f:23:4e:1e:18:d0:87:
34:3f:2c:c7:95:26:df:7f:f9:ac:8a:c4:ff:85:75:e6:32:58:
07:66:45:40:4a:87:bf:1a:30:70:57:a5:ce:16:25:8b:37:dc:
fd:cc:01:33:d6:e6:df:cd:76:fe:21:61:65:a0:40:35:c9:54:
67:c5:84:f0:fa:67:f8:1a:d4:f9:22:d4:2b:a1:8d:5f:a0:42:
5a:ab:be:b3:9d:66:85:90:68:c4:ed:e4:e6:1f:e3:87:07:8a:
08:4d:f4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:09 2024 by rpki-client on console-fra.rpki-client.org