Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vLbxwuvmHk5R6vpkn7_CSsTDJhA.roa
File: vLbxwuvmHk5R6vpkn7_CSsTDJhA.roa (raw, json)
Hash identifier: RaSPf//NiqIwdOAHB1d3ypIytuqCLjmDO6YuvwkyRCU=
Subject key identifier: BC:B6:F1:C2:EB:E6:1E:4E:51:EA:FA:64:9F:BF:C2:4A:C4:C3:26:10
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018EA20B7DE707BDFCE3B1E6384DBEA156A9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vLbxwuvmHk5R6vpkn7_CSsTDJhA.roa
Signing time: Wed 03 Apr 2024 03:40:45 +0000
ROA not before: Wed 03 Apr 2024 03:40:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400905
IP address blocks: 2a06:de06:383::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a2:0b:7d:e7:07:bd:fc:e3:b1:e6:38:4d:be:a1:56:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 3 03:40:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcb6f1c2ebe61e4e51eafa649fbfc24ac4c32610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:db:92:e5:be:8e:a6:44:c0:a3:74:c3:55:
cf:cf:dd:e2:ff:33:08:09:e6:48:5e:22:6f:bc:5d:
cb:14:f4:25:7e:b2:80:33:80:e0:b1:c4:88:d6:61:
d2:88:d4:47:c1:42:5d:36:66:ba:79:9e:4f:48:30:
1c:0b:c9:b7:09:ff:e8:86:cf:d4:a3:be:01:b8:81:
3a:05:68:33:8e:5e:06:75:8f:b7:b9:66:cc:a8:40:
91:ac:e6:7a:de:1d:40:38:32:ce:a9:5f:93:7f:3c:
ff:67:86:28:f1:37:00:8f:6e:2e:d7:ac:a9:9d:e9:
b4:d9:ef:8f:bd:95:8b:c3:30:b4:67:5b:32:80:4f:
14:4e:0a:3a:bb:ba:ee:d1:32:d8:de:83:3c:d7:63:
a3:31:d2:3c:49:9c:03:75:b0:a7:9f:8b:95:07:0f:
0a:ee:47:5c:fb:62:6b:62:76:92:94:4d:0a:4e:19:
02:e1:11:f3:2c:b5:52:7f:47:19:07:9e:cf:d6:9a:
c6:dd:cf:78:dd:35:bb:0b:6b:af:a7:4c:9c:b7:16:
4f:07:a1:cf:cf:b6:c5:45:24:89:ca:73:76:6f:04:
d8:2c:34:68:fe:8b:cd:70:7e:e6:32:ae:72:6f:5f:
68:9d:15:6a:a1:f9:cd:82:a2:e0:3e:c1:27:e3:fb:
8c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B6:F1:C2:EB:E6:1E:4E:51:EA:FA:64:9F:BF:C2:4A:C4:C3:26:10
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vLbxwuvmHk5R6vpkn7_CSsTDJhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de06:383::/48
Signature Algorithm: sha256WithRSAEncryption
29:42:45:00:16:44:c0:60:66:8c:41:d3:e6:9a:3f:05:93:2c:
54:47:89:6a:ea:61:30:5c:65:68:43:22:d5:c6:ba:fc:f5:ef:
58:ef:f6:9a:17:f9:9f:69:a8:22:53:46:cc:01:f6:64:6d:b5:
46:51:06:a5:8c:83:7f:cc:33:db:f8:6a:71:2a:45:c8:86:72:
67:55:5a:16:01:4f:85:84:fc:f3:26:98:5f:73:43:7d:10:c3:
c9:a0:0f:76:ec:39:48:53:ca:61:83:cb:ac:ce:4a:af:f8:0d:
ef:b1:69:db:08:c9:af:9f:2a:5e:76:59:35:50:96:c9:a1:ea:
b8:35:01:6a:ea:5a:06:28:1b:6d:1c:e7:da:c7:09:9e:7b:b0:
8c:3d:d1:8c:a8:50:aa:75:e4:ba:2a:24:19:d6:96:16:6a:b2:
b0:22:15:01:77:17:c0:84:90:46:04:bc:be:80:00:fd:d6:3c:
f3:de:5e:49:2d:b4:b6:5c:7b:ce:cb:50:f4:3c:bd:a2:b4:ac:
6c:63:03:53:98:07:f8:d3:b7:cf:e9:1e:a9:55:83:c4:87:59:
81:60:28:83:f9:c1:0a:26:d1:9a:12:11:01:d6:4e:1c:7a:a9:
70:7b:5e:d5:e6:1b:b2:55:6e:02:f7:71:50:92:37:0c:27:42:
5f:ea:63:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:17:53 2024 by rpki-client on console-ams.rpki-client.org