Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wCbVdrQUWdv27X3bDTIZhHDDYSo.roa
File: wCbVdrQUWdv27X3bDTIZhHDDYSo.roa (raw, json)
Hash identifier: jHRxC7pHutcrHPeXt/loLy6MU/0VHm97QlTqNeb7XuU=
Subject key identifier: C0:26:D5:76:B4:14:59:DB:F6:ED:7D:DB:0D:32:19:84:70:C3:61:2A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCFC4A976935A15137FAA3CAA50256
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wCbVdrQUWdv27X3bDTIZhHDDYSo.roa
Signing time: Tue 02 Jan 2024 10:34:14 +0000
ROA not before: Tue 02 Jan 2024 10:34:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202000
IP address blocks: 2a0e:b107:1ca0::/44 maxlen: 48
2a0e:b107:1c20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:fc:4a:97:69:35:a1:51:37:fa:a3:ca:a5:02:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c026d576b41459dbf6ed7ddb0d32198470c3612a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:ca:f9:52:cd:58:90:be:2e:0b:65:5f:53:
81:0e:59:05:ab:f9:ae:f9:cc:56:e1:66:e6:e2:b2:
0e:4a:39:ed:5d:53:12:39:6d:cf:a1:7f:c0:b2:a9:
6f:cd:05:b5:9f:3f:8e:41:e5:20:bf:f9:10:e3:d9:
05:8d:ec:ee:26:e9:96:48:90:8d:31:9b:7c:e8:b7:
e0:fe:61:d3:d0:14:7a:89:ce:ed:01:3f:53:41:6a:
48:04:c6:11:0b:3e:da:6b:82:47:e2:c1:c2:6a:75:
7e:bd:8f:5a:d8:a4:94:3f:ce:a0:af:ce:ed:49:e9:
e3:51:40:9d:f7:84:63:72:5e:4a:9c:19:46:2b:87:
5d:09:f0:bc:e2:2a:ee:25:e9:64:be:34:9f:1f:f0:
4b:0a:1d:e0:db:bc:ce:e5:83:51:9e:d2:3d:e4:db:
33:0e:dd:46:b3:9e:cd:ab:7e:96:18:ee:33:f8:81:
6d:7f:ec:69:93:41:49:27:9f:23:93:4b:2a:5e:4d:
cd:69:bc:ff:3d:da:58:42:a9:e6:68:9f:1b:f5:49:
38:64:54:3a:fd:fd:07:5d:b1:72:cc:20:31:e8:21:
06:17:0b:10:06:c8:08:8e:ae:18:01:db:73:13:d0:
da:76:68:07:c2:80:27:24:94:c9:a9:32:ba:51:f7:
da:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:26:D5:76:B4:14:59:DB:F6:ED:7D:DB:0D:32:19:84:70:C3:61:2A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wCbVdrQUWdv27X3bDTIZhHDDYSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1c20::/44
2a0e:b107:1ca0::/44
Signature Algorithm: sha256WithRSAEncryption
4b:d1:1c:fc:30:d2:aa:a8:d6:ce:aa:b6:79:66:0b:14:b4:c1:
22:13:7e:8f:01:1c:58:81:35:a5:bc:51:5b:14:68:8a:c6:fd:
3b:35:93:6b:3a:c0:79:24:d7:e5:c5:29:29:81:92:50:41:0e:
0d:17:1f:c2:fd:bb:b6:e4:b9:93:9a:7b:9a:52:8c:3f:31:b6:
7c:b0:e7:a9:9a:01:39:57:27:0a:1b:40:68:ba:10:7c:3c:5d:
7b:52:9b:fc:21:72:8d:64:c4:60:54:34:f4:38:8e:3e:3f:9b:
a1:5f:68:95:11:4a:6a:fd:ee:60:36:d8:87:5b:57:e7:87:d4:
48:82:e0:af:e7:72:88:48:bc:5c:12:f6:1e:a6:fb:52:cd:e8:
bb:da:06:3b:31:b9:09:25:2a:2a:f2:49:d0:77:0b:60:1d:97:
21:f7:19:d7:36:e0:76:64:44:87:e1:67:ee:c0:6f:d6:1e:31:
b2:af:84:4a:17:7d:8a:6a:1b:32:ee:6f:e3:e9:a3:a5:6a:d3:
e3:6f:ec:c1:61:07:7b:a8:d7:7f:f8:70:4a:41:e5:7d:47:9d:
5a:44:bd:ba:4d:1f:82:0c:21:78:9d:73:bb:64:c1:d2:24:23:
ad:7b:3b:d2:19:d3:5f:81:8e:70:ac:38:aa:91:b4:82:3f:13:
4e:3c:ea:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:42 2024 by rpki-client on console-fra.rpki-client.org