Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vE_qHTWK5ALTQ16bSTG-l9zAURM.roa
File: vE_qHTWK5ALTQ16bSTG-l9zAURM.roa (raw, json)
Hash identifier: dY6HwIbsqKy9Cs+c1nqW9huYwbuBs0Bweq4lYwNoq50=
Subject key identifier: BC:4F:EA:1D:35:8A:E4:02:D3:43:5E:9B:49:31:BE:97:DC:C0:51:13
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD092FD5F969379BDBC5C938314C42
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vE_qHTWK5ALTQ16bSTG-l9zAURM.roa
Signing time: Tue 02 Jan 2024 10:34:18 +0000
ROA not before: Tue 02 Jan 2024 10:34:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204611
IP address blocks: 2a0e:b107:19cd::/48 maxlen: 48
2a0e:b107:1b9b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:09:2f:d5:f9:69:37:9b:db:c5:c9:38:31:4c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc4fea1d358ae402d3435e9b4931be97dcc05113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:bf:c6:ea:44:20:9d:1b:81:3b:0e:41:d5:
0f:be:4c:95:e9:fe:7b:cb:20:22:43:69:e8:a5:fd:
f4:74:90:b7:6d:2e:e0:07:16:0c:3a:42:c1:fb:e8:
c1:39:20:35:f1:f6:b9:5b:38:25:f3:ff:c5:d7:51:
ea:16:76:ae:a4:64:fb:2f:ec:40:2c:56:be:f7:c3:
3e:1d:7d:8b:a0:6f:3d:b8:29:3c:c6:a8:61:dd:8d:
38:45:3e:3b:2f:7d:ca:d6:ae:c7:32:6c:54:1f:1a:
dd:db:56:f1:ca:f4:20:c1:43:ae:7f:99:a3:7f:bd:
da:e3:e3:54:07:36:6e:b5:4e:04:9b:ba:63:2d:06:
ca:7f:52:2b:17:81:ff:f0:c7:38:5b:f3:47:b3:b3:
d3:58:f4:60:df:a4:40:ad:54:4e:b0:11:30:00:66:
ec:b7:34:ca:92:59:56:8c:53:62:4d:c3:fd:6c:0a:
3f:5b:a5:bd:02:93:a3:94:ae:b2:99:99:48:ae:60:
d4:d2:e4:60:97:ff:75:01:c4:c9:10:ea:56:15:b8:
00:5e:96:a2:2d:e1:40:31:b6:54:b4:f8:77:c4:8e:
f8:dd:51:42:15:60:68:4a:cf:1b:c0:49:b1:36:1a:
e9:fd:0d:0b:55:5c:57:87:04:75:8b:6d:a6:09:c0:
d1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4F:EA:1D:35:8A:E4:02:D3:43:5E:9B:49:31:BE:97:DC:C0:51:13
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vE_qHTWK5ALTQ16bSTG-l9zAURM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:19cd::/48
2a0e:b107:1b9b::/48
Signature Algorithm: sha256WithRSAEncryption
74:6c:d3:84:c1:d0:94:8c:aa:62:92:bb:82:d6:0c:30:d3:75:
2e:a1:04:41:83:8d:d8:db:29:e7:98:8f:32:90:1e:c9:c1:82:
fb:dc:88:e5:f9:1b:b3:eb:16:20:cd:39:4c:06:98:9f:ff:87:
77:8f:cf:7b:99:bf:b7:23:58:d6:f1:52:5c:c3:6b:61:39:cf:
64:3b:2c:c2:dc:96:3b:4a:8c:41:30:9f:29:64:01:aa:a1:d0:
86:9f:22:e9:c0:ea:2d:fe:51:32:55:3a:b1:03:53:38:1e:8b:
54:22:fe:b2:69:18:a7:37:13:99:b8:14:e2:08:07:87:bf:73:
48:50:e0:34:83:ab:ca:e2:08:13:6c:00:54:dc:59:9f:33:de:
e9:75:85:05:e0:06:89:5a:14:0d:b1:ce:5b:87:f9:00:f5:fe:
f3:1d:2a:d6:19:07:10:a1:a5:41:08:5c:3a:2e:74:46:12:12:
7a:cd:6e:d0:17:f0:5e:c4:83:57:78:da:ac:19:d9:bc:21:1a:
32:2d:7d:de:6d:86:82:e5:3e:1a:20:4d:e0:b3:6e:3a:0c:0f:
8c:12:b4:93:54:91:9d:2a:85:bd:23:c6:9f:da:11:6f:03:79:
ec:2e:6c:6b:4e:c5:89:f1:68:02:e1:22:93:87:1c:fc:62:d7:
87:84:0d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:36 2024 by rpki-client on console-fra.rpki-client.org