Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xv0IupJMqrBUjW80leNJvoOgaPY.roa
File: xv0IupJMqrBUjW80leNJvoOgaPY.roa (raw, json)
Hash identifier: OCZTgPdDLi3R19m8ZcNcyeFb3Z77dB8WX4gaR/ruHKU=
Subject key identifier: C6:FD:08:BA:92:4C:AA:B0:54:8D:6F:34:95:E3:49:BE:83:A0:68:F6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCF9D330FD73EC308766805783A168
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xv0IupJMqrBUjW80leNJvoOgaPY.roa
Signing time: Tue 02 Jan 2024 10:34:14 +0000
ROA not before: Tue 02 Jan 2024 10:34:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200885
IP address blocks: 2a0e:b107:178a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f9:d3:30:fd:73:ec:30:87:66:80:57:83:a1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6fd08ba924caab0548d6f3495e349be83a068f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:ce:62:ac:10:ff:cb:9d:17:01:79:c8:3c:
0e:b6:c1:16:52:84:0d:8e:e8:fb:87:4c:9f:e9:52:
5f:8a:79:30:13:fc:4d:61:75:10:14:0a:31:c3:fe:
63:34:4e:a1:a7:91:46:81:43:3d:e3:9e:08:7f:e0:
f2:b7:cf:20:b3:a9:d9:e0:ce:50:6b:e2:c2:6d:3b:
9e:cd:14:3e:18:0f:48:c2:39:4b:e7:5c:d0:77:d7:
cb:c5:93:39:a3:a2:e4:dc:db:c7:7e:2e:01:9f:dd:
df:00:1b:02:05:bc:8d:19:24:b4:62:73:3e:6b:df:
98:53:70:ec:20:f4:09:59:a4:54:ac:cc:05:40:f4:
dd:57:4e:44:16:e8:f9:20:86:f9:80:14:28:c6:b9:
b0:dc:8b:27:36:8c:9f:a9:41:e6:e5:eb:45:c9:59:
be:67:e5:ef:78:a0:98:44:da:67:64:69:9d:13:cf:
78:51:32:39:21:be:88:30:8c:ae:da:9b:c4:7a:54:
8d:99:14:a1:0f:67:2b:a5:81:70:79:c5:c1:e3:9f:
fb:3b:2f:7e:18:12:54:e8:e5:48:1d:14:be:11:55:
0e:dd:97:d4:69:5a:ba:37:6b:b8:b8:76:ad:cd:0a:
64:33:af:f9:cd:64:f1:ea:cd:5c:4a:f7:bb:31:2c:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FD:08:BA:92:4C:AA:B0:54:8D:6F:34:95:E3:49:BE:83:A0:68:F6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xv0IupJMqrBUjW80leNJvoOgaPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:178a::/48
Signature Algorithm: sha256WithRSAEncryption
02:18:b4:8d:43:c8:49:e1:ae:d2:24:2e:73:38:40:00:6e:f7:
55:5e:fc:ef:26:f1:43:88:43:1a:56:53:a5:7d:47:a9:8f:b9:
53:5d:21:a8:af:82:37:03:2e:31:fc:6a:a0:73:14:dd:36:34:
61:8e:93:a1:20:07:6b:cb:0f:85:62:16:f1:16:99:c3:48:c1:
f8:08:0a:e3:38:26:cc:7f:e3:d8:71:8a:9c:06:42:a4:9b:3c:
de:6d:ab:ea:0a:04:b0:4b:71:fd:a8:6f:c3:77:b9:10:5d:4a:
34:a2:7f:8a:71:f4:ac:d0:d7:c9:db:7c:63:b8:31:fb:fe:fe:
8f:3a:76:30:c5:e1:2e:2e:24:ef:6e:64:a3:2f:c2:7f:39:33:
b5:a2:8c:ee:43:a7:35:69:34:25:b3:03:e8:43:05:cf:10:e9:
54:85:77:32:60:7e:87:ab:e9:5a:86:de:6a:c8:d4:d7:0a:ef:
78:93:30:64:0a:d6:68:c7:aa:60:c4:13:bb:dd:85:0c:92:8f:
9f:ec:92:c2:c1:cc:43:4c:55:4f:2e:67:64:bd:b2:8e:af:3d:
b2:0e:0f:49:a1:56:39:08:51:e6:6f:20:fc:6f:ab:34:a4:04:
06:4a:a6:91:0e:a2:84:9c:3f:20:a1:18:78:da:5a:da:c0:f5:
46:0b:36:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:36 2024 by rpki-client on console-fra.rpki-client.org