Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yHnnfeVVT2Rf_anPGSQt7w6Y5o8.roa
File: yHnnfeVVT2Rf_anPGSQt7w6Y5o8.roa (raw, json)
Hash identifier: Qh5E3PudI5Pn6Aj+H09bP24D5LN+gFFko6RXQBzEis4=
Subject key identifier: C8:79:E7:7D:E5:55:4F:64:5F:FD:A9:CF:19:24:2D:EF:0E:98:E6:8F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018F18DE4F7B0853A0D7C530B1FBA5539601
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yHnnfeVVT2Rf_anPGSQt7w6Y5o8.roa
Signing time: Fri 26 Apr 2024 05:26:13 +0000
ROA not before: Fri 26 Apr 2024 05:26:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31898
IP address blocks: 2a0e:97c0:aba::/48 maxlen: 48
2a0e:b107:19::/48 maxlen: 48
2a0e:b107:360::/48 maxlen: 48
2a0e:b107:361::/48 maxlen: 48
2a0e:b107:362::/48 maxlen: 48
2a0e:b107:363::/48 maxlen: 48
2a0e:b107:364::/48 maxlen: 48
2a0e:b107:365::/48 maxlen: 48
2a0e:b107:367::/48 maxlen: 48
2a0e:b107:f50::/44 maxlen: 48
2a0e:b107:1d13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:18:de:4f:7b:08:53:a0:d7:c5:30:b1:fb:a5:53:96:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 26 05:26:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c879e77de5554f645ffda9cf19242def0e98e68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:52:4e:dc:ca:e2:ab:6f:90:ff:ac:11:cc:94:
8e:c1:7c:ec:9a:11:2f:80:26:b3:b3:43:c0:41:5e:
14:d2:5e:60:81:ec:b0:c6:bb:0b:f3:58:9d:3f:6b:
52:ec:93:10:a6:a0:29:91:fc:9b:37:de:a1:e4:02:
52:67:46:e2:1f:1a:0d:22:69:aa:bb:4e:e9:9d:d5:
b7:91:ba:7b:01:06:8e:4a:67:2c:fa:05:e7:76:fb:
c8:89:90:ad:0b:0f:06:b1:9d:87:fc:c4:0d:8a:0a:
00:e0:fc:99:a2:a1:e7:1d:22:1a:1d:cc:f2:3a:13:
1a:33:18:90:01:d2:56:28:43:c6:e0:0e:7e:2c:45:
ba:bb:0d:c3:ed:6c:16:ea:07:47:f4:91:f1:62:3c:
43:f3:b2:57:51:20:3c:d0:b4:fc:ef:c0:51:20:e6:
9b:0b:14:5b:2e:6a:1a:9a:24:a6:8d:88:90:37:64:
44:a1:e7:e6:37:e7:19:19:87:23:ab:7b:0c:8b:29:
bf:d6:70:39:fa:f7:a2:38:a8:6f:ae:3b:61:98:94:
20:47:b3:99:d8:16:cd:1f:9f:c1:f0:18:55:4c:eb:
4d:f6:ae:f3:0c:e8:85:33:12:13:65:cf:59:7a:e8:
0a:30:cc:31:3b:95:92:58:25:e3:cb:5d:75:e6:de:
1a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:79:E7:7D:E5:55:4F:64:5F:FD:A9:CF:19:24:2D:EF:0E:98:E6:8F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yHnnfeVVT2Rf_anPGSQt7w6Y5o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:aba::/48
2a0e:b107:19::/48
2a0e:b107:360::-2a0e:b107:365:ffff:ffff:ffff:ffff:ffff
2a0e:b107:367::/48
2a0e:b107:f50::/44
2a0e:b107:1d13::/48
Signature Algorithm: sha256WithRSAEncryption
47:6e:86:4d:ea:bd:49:b7:9e:5b:41:47:c3:ec:64:9a:7c:6e:
8c:7e:ec:34:85:c7:c2:e8:4e:9a:1b:74:db:45:c8:d7:9a:14:
49:c4:74:88:2b:91:27:da:8e:77:ca:33:29:6f:f5:dc:d4:ba:
e5:7a:37:38:d0:61:5c:ec:02:aa:81:ea:2b:e9:4f:c4:b7:f3:
b1:82:10:8e:6a:09:c1:84:45:a7:21:50:17:30:99:ba:4e:2a:
8d:e6:14:4e:82:b9:e4:c1:55:20:d3:47:9c:7e:d2:97:dd:43:
6d:a3:da:0c:e9:22:3c:22:d1:3f:9f:ac:de:5d:2d:50:72:2d:
f2:a1:b7:ae:eb:70:99:67:49:a2:98:c6:35:05:ee:4f:ea:a3:
5f:a0:81:92:07:3b:6a:d7:fa:c9:26:04:f5:c4:d8:ba:c8:3d:
e2:46:6d:12:eb:90:86:4c:f6:ba:e2:23:83:fd:d6:c0:89:a0:
5b:ec:90:6f:7c:9c:0d:41:b2:65:04:06:fb:1d:db:03:56:b9:
12:bd:a6:25:05:c7:a9:ce:05:28:50:70:41:20:51:8a:41:7c:
3d:77:64:e4:d1:00:a8:0a:0d:b6:17:2f:a1:72:d6:56:d0:2c:
e5:96:82:72:e1:3c:81:d7:e1:28:aa:de:6f:f0:71:3e:ee:5f:
55:3c:d2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:33:04 2024 by rpki-client on console-fra.rpki-client.org