Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vd4-4OiROGDXVkdEoQZOXP9PrDY.roa
File: vd4-4OiROGDXVkdEoQZOXP9PrDY.roa (raw, json)
Hash identifier: bkGC+e7D7D9kANveF9Iq/fyQ0F427ZxwSZE9fVXo8M8=
Subject key identifier: BD:DE:3E:E0:E8:91:38:60:D7:56:47:44:A1:06:4E:5C:FF:4F:AC:36
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018DF748064002E1472EB1E652FAE0DC7061
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vd4-4OiROGDXVkdEoQZOXP9PrDY.roa
Signing time: Thu 29 Feb 2024 23:51:48 +0000
ROA not before: Thu 29 Feb 2024 23:51:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200959
IP address blocks: 2a0e:b107:1a40::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f7:48:06:40:02:e1:47:2e:b1:e6:52:fa:e0:dc:70:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 29 23:51:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdde3ee0e8913860d7564744a1064e5cff4fac36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:8c:82:eb:ae:c8:f2:ca:25:c1:6c:59:38:
4a:94:1f:b4:6c:8a:29:3d:19:a9:b2:d3:c0:9d:f2:
89:df:40:ff:96:3c:0d:59:70:f3:d8:23:06:d2:21:
f1:37:df:4d:66:d5:7c:75:b9:f4:a6:00:11:ef:32:
86:3e:38:12:1f:39:21:d8:23:81:00:e2:85:c1:7a:
07:61:fc:bb:f6:44:af:ed:ab:a4:a0:0e:fc:35:50:
70:37:2d:db:2a:b8:00:d0:f6:61:e0:2f:3c:37:9d:
67:5c:dd:ef:24:02:87:bd:b1:d0:8e:c6:c5:db:81:
1e:96:26:28:de:11:bf:81:0e:9a:32:9f:79:3a:f7:
08:91:41:46:e2:6f:44:71:35:d8:fb:75:46:54:5f:
dc:85:43:9d:d9:d7:88:2b:1c:49:cb:6d:31:c9:42:
14:44:34:e3:55:c5:18:a6:ef:38:5b:e8:31:c8:e3:
a6:61:30:25:27:ad:c1:6c:6c:5a:ff:0b:9a:c5:67:
bb:6b:01:f9:dc:c4:e4:93:d5:2f:4a:27:c6:78:05:
95:a3:a7:c9:9b:3e:b1:4e:5e:d4:c5:96:0a:41:4f:
c6:b5:1f:51:ed:d2:cf:92:16:34:7f:e7:d1:28:bd:
b8:32:86:30:d6:3a:d0:3e:44:31:c1:7e:29:11:ab:
e1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DE:3E:E0:E8:91:38:60:D7:56:47:44:A1:06:4E:5C:FF:4F:AC:36
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vd4-4OiROGDXVkdEoQZOXP9PrDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1a40::/44
Signature Algorithm: sha256WithRSAEncryption
7c:48:10:04:c3:be:b0:2c:97:c9:b9:2e:ec:b7:ae:d8:e6:07:
2b:c5:36:d7:83:3b:0f:b2:d5:78:f6:94:92:a0:ad:b6:a5:b9:
a4:0c:58:f4:ce:55:8c:c2:fe:65:9e:2b:62:e3:65:b8:16:0f:
14:31:34:b3:08:2d:3b:fc:4e:fb:17:e5:d5:19:97:08:9e:1a:
38:61:ab:05:7b:8e:a7:3a:13:6a:92:e6:4a:e2:36:71:9c:8c:
63:84:98:a0:6d:01:20:9c:28:6e:3e:fa:e8:28:a6:52:11:c8:
0a:d4:6d:0a:fd:7e:65:f3:0f:26:23:69:36:ad:44:6d:4c:71:
06:98:d5:c1:98:1b:6e:09:7e:36:b3:22:43:a3:aa:d5:79:6c:
12:5f:76:f6:72:7f:74:a1:99:c8:75:40:3c:27:b6:1d:37:1f:
4a:e2:32:85:1b:c8:f0:d4:af:1d:b8:3f:de:4b:83:f9:71:27:
a9:5b:69:2c:d6:21:aa:99:30:b2:71:ec:b0:d5:61:e6:b7:55:
b8:ea:4c:45:cf:5b:a4:71:c2:c4:74:2d:0b:22:9c:87:89:38:
1a:54:bd:d8:7a:dc:7f:dd:73:5c:91:30:12:72:54:79:cf:68:
cc:92:78:83:bd:cd:62:85:d1:aa:18:4a:41:19:e1:e6:7a:8f:
25:9e:2d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:17:53 2024 by rpki-client on console-ams.rpki-client.org