Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wv9MSZ5gvnWTDA0dB_1Dwb7YuPE.roa
File: wv9MSZ5gvnWTDA0dB_1Dwb7YuPE.roa (raw, json)
Hash identifier: p+L/dfQjs5U1AcQivh4+mHuUCsO833YiDVjbDScIkJc=
Subject key identifier: C2:FF:4C:49:9E:60:BE:75:93:0C:0D:1D:07:FD:43:C1:BE:D8:B8:F1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD3FB817E103E4E95F0C933656AF36
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wv9MSZ5gvnWTDA0dB_1Dwb7YuPE.roa
Signing time: Tue 02 Jan 2024 10:34:32 +0000
ROA not before: Tue 02 Jan 2024 10:34:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212120
IP address blocks: 2a0e:b107:eb0::/48 maxlen: 48
2a0e:b107:ebf::/48 maxlen: 48
2a0e:b107:eb1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:3f:b8:17:e1:03:e4:e9:5f:0c:93:36:56:af:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2ff4c499e60be75930c0d1d07fd43c1bed8b8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:49:85:b9:49:c1:4b:cd:e5:00:68:08:fe:
f9:a3:d4:f3:0b:66:d8:0d:93:15:36:db:34:96:d2:
85:ec:7f:a5:e4:05:7b:71:7c:2f:2d:59:8b:dd:21:
63:5b:99:36:7c:b1:2c:04:ce:ea:ce:9a:07:9f:63:
39:e4:63:f6:54:4f:4a:5a:2b:52:89:b2:59:5a:12:
ce:ce:56:54:92:cd:f8:0f:2f:ec:6b:6a:ae:ff:1e:
75:c1:7c:11:c1:fc:e2:14:41:4a:30:2d:60:8c:c3:
5f:9a:c0:46:6a:db:5e:9d:17:b9:82:59:3e:74:6d:
e1:0b:fa:2f:de:96:c2:ad:20:92:0d:7d:b4:12:65:
52:ad:47:dc:47:5f:74:03:0b:b6:87:c2:8b:f8:12:
20:33:19:ab:f8:d6:8c:6c:19:97:de:90:ab:82:39:
d9:cc:ae:d7:58:29:71:7f:dd:0b:50:3f:64:51:79:
bb:d3:11:38:e2:c6:4b:84:e7:ab:ca:12:2f:a5:30:
11:65:d0:d0:3b:b2:e6:03:33:eb:46:ac:5e:10:7e:
12:2b:1a:2b:8e:89:a5:24:e4:73:7a:7c:07:b9:02:
89:49:42:45:3e:ab:6d:34:45:ea:9f:d7:29:5b:cb:
60:18:f6:d2:ae:d6:9a:54:60:ca:b4:1f:bf:ce:35:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FF:4C:49:9E:60:BE:75:93:0C:0D:1D:07:FD:43:C1:BE:D8:B8:F1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wv9MSZ5gvnWTDA0dB_1Dwb7YuPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:eb0::/47
2a0e:b107:ebf::/48
Signature Algorithm: sha256WithRSAEncryption
46:a0:86:08:73:c1:d7:24:dd:66:58:59:f2:d0:da:dd:69:4e:
66:17:80:c1:9d:47:fa:c0:e0:59:52:45:4e:c4:1f:f4:a0:79:
81:50:d7:7c:f5:f6:94:ba:07:8d:49:4e:79:52:51:f2:51:e7:
d7:87:4b:65:7a:3a:33:2b:d9:2f:c7:7b:e7:ca:2f:14:aa:f9:
db:33:1e:0a:43:aa:f3:8a:f2:04:de:5f:14:b9:ef:3e:f8:38:
46:a4:e5:17:96:6a:85:73:d7:bd:3a:8c:92:8e:70:e9:b9:e3:
04:70:34:44:e8:3d:ea:54:d9:5d:ba:fe:e0:4b:f8:d1:c4:87:
e2:25:c9:2d:3c:0d:e1:1c:07:ab:f5:bd:33:0a:2a:ef:04:7e:
88:1e:62:f7:62:f6:da:81:1c:55:71:d4:74:cb:6e:ef:73:20:
39:43:78:f1:0a:93:4b:45:a6:2e:4d:00:c0:2c:d8:b7:95:5e:
c4:13:a8:d6:04:f2:e1:a5:cb:3c:30:08:de:57:51:15:9d:4c:
d0:08:f6:f6:71:5d:49:ea:03:88:eb:f0:a9:d7:0b:ee:98:25:
ec:62:06:4c:25:ce:a9:fb:d7:51:d8:27:20:0e:ac:2a:0e:1d:
44:b9:18:ad:a5:58:e8:e5:45:14:ff:e7:49:12:9d:eb:e4:4b:
56:03:3b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:33:18 2024 by rpki-client on console-ams.rpki-client.org