Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yGv-Lo-R3uj0VMNuyt_qDXPzfqs.roa
File: yGv-Lo-R3uj0VMNuyt_qDXPzfqs.roa (raw, json)
Hash identifier: MIUvK4rpwRrX+sCb5CnoF7uz25XC4jV4x5km6Wx0qBM=
Subject key identifier: C8:6B:FE:2E:8F:91:DE:E8:F4:54:C3:6E:CA:DF:EA:0D:73:F3:7E:AB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018DFBC41803A0529654E0EB7C9ECEC98351
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yGv-Lo-R3uj0VMNuyt_qDXPzfqs.roa
Signing time: Fri 01 Mar 2024 20:45:48 +0000
ROA not before: Fri 01 Mar 2024 20:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215392
IP address blocks: 2a0e:97c0:f30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fb:c4:18:03:a0:52:96:54:e0:eb:7c:9e:ce:c9:83:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 1 20:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c86bfe2e8f91dee8f454c36ecadfea0d73f37eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c5:5c:be:49:85:d0:bd:ef:8a:aa:60:7d:8e:
72:66:d3:e9:9c:fd:41:81:d8:0a:e4:0f:ef:60:df:
52:4a:91:6c:8c:a1:bd:de:7c:aa:6d:6f:39:7f:1d:
d5:64:eb:16:21:d7:1d:9b:f9:58:09:70:23:75:93:
cd:9e:05:bd:e1:31:3b:f0:bd:61:02:d2:b6:d5:60:
b4:b4:a2:23:75:bf:4b:6f:e3:78:7d:6e:a1:05:2d:
9b:d4:08:c1:ba:5c:0f:eb:6a:cb:e3:80:44:37:91:
24:ad:21:12:7a:08:5c:ef:40:80:fe:cb:16:de:ed:
44:70:04:57:7c:57:52:f2:7b:32:04:03:0d:29:81:
cb:3d:95:fa:74:1e:81:5d:8d:04:98:da:c2:c6:8a:
46:0c:8f:ce:21:20:5d:6a:40:4f:bd:a5:70:fc:b2:
7e:b2:ea:5d:14:f3:0a:60:d9:32:e7:62:e0:92:f9:
41:0f:4a:10:98:6d:2c:e7:db:61:9e:e6:fd:68:a3:
01:ba:14:88:ba:e4:67:26:a8:0c:cc:ae:de:78:ec:
e2:c5:05:b2:85:c1:a0:3d:c2:6b:6e:04:ba:d1:15:
3b:52:fa:12:5a:58:7b:2b:b5:c7:6f:e6:08:c8:bf:
4b:95:54:36:16:22:9e:cc:3a:63:a6:bb:0e:8c:ce:
22:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6B:FE:2E:8F:91:DE:E8:F4:54:C3:6E:CA:DF:EA:0D:73:F3:7E:AB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yGv-Lo-R3uj0VMNuyt_qDXPzfqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:f30::/44
Signature Algorithm: sha256WithRSAEncryption
34:78:e4:9f:07:d4:d1:61:db:1b:32:30:88:01:72:bd:90:87:
b6:07:87:1c:f2:18:60:5e:3b:50:d3:25:09:1e:28:d6:56:3a:
ae:3e:68:9c:46:1f:ca:38:f2:c6:2e:2d:26:97:68:c6:0c:cc:
d9:17:6a:cb:67:62:45:0c:cf:8e:69:55:7c:ff:7b:ed:5f:f9:
88:00:49:b2:f9:70:b4:b5:3c:83:d9:10:4d:f2:84:d3:9a:c1:
c0:7b:b5:ab:a1:1b:75:45:57:e5:f9:1c:49:e1:55:9d:9e:c7:
be:9e:7d:ab:a9:34:44:c7:1a:85:f3:b5:71:27:ce:79:d0:3e:
bb:7f:7a:77:e1:cf:79:df:47:9f:44:78:9b:ac:ab:79:8b:63:
1f:c7:8f:43:f7:ee:94:9c:50:7e:b1:82:46:84:ce:dc:9e:cc:
3e:8d:27:a9:9a:f2:91:0a:75:bf:47:27:63:52:00:6f:16:3c:
71:6c:da:ab:f3:e6:3f:bb:31:73:67:21:72:9a:47:3b:18:7d:
0f:65:96:56:07:b4:9b:36:1d:cb:dc:40:25:d7:c8:a0:a7:08:
af:b8:bc:9a:87:d6:61:ac:b7:5f:e6:ea:6b:53:a0:98:4f:a7:
e5:e1:ff:02:f2:10:4a:37:6a:ef:6e:da:e5:0c:2a:a9:f4:14:
ec:11:c6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:09 2024 by rpki-client on console-fra.rpki-client.org