Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ulkIQaEnc8UljZkCZw19D2XB3Cg.roa
File: ulkIQaEnc8UljZkCZw19D2XB3Cg.roa (raw, json)
Hash identifier: /y+nMVRPqbdf7ItjTEoRyBdzlBpBSumx/W+296l4jvA=
Subject key identifier: BA:59:08:41:A1:27:73:C5:25:8D:99:02:67:0D:7D:0F:65:C1:DC:28
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCC35310AA531570C2CF0BE417C7F9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ulkIQaEnc8UljZkCZw19D2XB3Cg.roa
Signing time: Tue 02 Jan 2024 10:34:00 +0000
ROA not before: Tue 02 Jan 2024 10:34:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24381
IP address blocks: 2a0e:b107:2228::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c3:53:10:aa:53:15:70:c2:cf:0b:e4:17:c7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba590841a12773c5258d9902670d7d0f65c1dc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:63:bb:7e:46:1a:18:14:cb:e1:d5:73:27:45:
2c:a8:89:60:04:aa:08:00:50:c1:99:de:e2:6c:41:
59:8e:53:c8:56:1e:a4:47:58:1c:23:d8:e6:df:2b:
18:91:83:69:4f:34:79:b9:ef:9e:3e:86:0c:d0:d2:
cf:33:98:7b:8a:85:75:46:e7:ce:49:b1:af:68:b8:
b2:6d:a8:f8:ea:c8:57:c0:a9:de:98:99:9d:ca:67:
01:2c:f1:44:4c:b3:b5:f7:2e:bb:5f:b9:33:4b:1d:
5c:38:61:3f:a9:82:08:2e:38:9a:7f:b9:1d:41:d1:
4d:ce:9f:7a:81:27:85:33:fb:f2:ff:02:6b:a9:91:
df:75:1c:0c:e1:72:4a:3b:5d:13:5a:da:e9:d1:f8:
3b:4b:00:5b:27:27:aa:c5:e0:57:c1:dc:72:8a:d7:
31:61:a4:d0:fc:6c:bf:d9:92:67:2b:42:18:a1:7e:
06:21:4b:5e:2f:bd:f0:9e:39:76:30:67:a4:03:64:
68:e2:1a:02:81:be:df:80:74:4f:4a:d1:b0:ea:ff:
51:d3:f3:ac:3f:6c:ed:5b:2d:6e:47:72:e8:70:08:
c0:0d:ea:7b:02:d8:07:58:70:a3:7d:bc:31:9c:f3:
db:4d:d5:b8:f2:93:16:a0:a4:dc:23:08:73:46:03:
eb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:59:08:41:A1:27:73:C5:25:8D:99:02:67:0D:7D:0F:65:C1:DC:28
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ulkIQaEnc8UljZkCZw19D2XB3Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2220::/44
Signature Algorithm: sha256WithRSAEncryption
51:6b:41:18:fe:86:75:dc:dc:c9:57:d0:48:30:dd:6f:e7:c4:
1e:af:57:78:1e:04:ab:a6:75:3f:53:79:99:4f:60:7b:d8:be:
09:ff:bd:e6:c8:ab:a9:fc:0c:40:b9:53:7f:73:af:ec:5a:21:
00:05:99:c7:be:75:ac:f5:6d:2a:72:05:b0:14:58:3d:70:bf:
28:46:f7:10:29:c6:e4:25:72:b3:bf:87:48:78:0c:fa:00:3d:
23:e8:4c:1c:23:0f:61:2b:27:96:a5:77:79:6d:3c:fe:00:50:
c0:58:32:a0:74:4e:13:3e:8b:49:a2:76:6a:fb:b6:65:b7:ab:
48:b1:8f:a4:a9:4b:6f:c1:be:fa:43:37:7d:52:f3:d7:c9:81:
4f:1c:9d:82:2d:22:ad:59:6b:50:9e:26:ef:dd:8f:2d:ff:3f:
0e:7f:ab:ac:c6:8f:ee:fd:42:fd:ea:25:43:27:cc:4e:8d:27:
1a:83:49:6d:07:5d:71:4b:e9:bf:ec:24:4d:20:9b:31:2e:ee:
84:90:46:8c:46:58:2f:ce:cf:02:1c:b7:47:33:a1:55:9e:6a:
4a:8e:bb:5e:e3:4f:eb:71:62:ca:d1:b2:4d:ec:dc:70:c8:4d:
ad:ff:b4:cd:75:b2:e0:d6:f4:41:26:70:a4:da:8b:13:00:a1:
8d:0d:f4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:39:07 2024 by rpki-client on console-fra.rpki-client.org