Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zIPWCzPsbLLGD3VTJB2b9Z19jkM.roa
File: zIPWCzPsbLLGD3VTJB2b9Z19jkM.roa (raw, json)
Hash identifier: 4PZ4D5Mks3HALBErUYlIApvBa9uxxhh2q3nfLQccOsY=
Subject key identifier: CC:83:D6:0B:33:EC:6C:B2:C6:0F:75:53:24:1D:9B:F5:9D:7D:8E:43
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD3662755BCDEEC4FD68BFED11974D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zIPWCzPsbLLGD3VTJB2b9Z19jkM.roa
Signing time: Tue 02 Jan 2024 10:34:29 +0000
ROA not before: Tue 02 Jan 2024 10:34:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211486
IP address blocks: 2a0e:b107:dc6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:36:62:75:5b:cd:ee:c4:fd:68:bf:ed:11:97:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc83d60b33ec6cb2c60f7553241d9bf59d7d8e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:17:73:fb:c3:58:84:74:4f:c9:68:89:12:
0b:da:4a:99:88:54:9f:31:66:3b:87:1e:d9:a9:8a:
b2:92:8b:ce:7f:03:fa:6e:7e:c3:78:58:e8:23:40:
62:bb:e9:e3:71:58:25:1f:a6:12:b7:f6:47:6d:b8:
e9:28:d8:e6:ff:c7:b5:e8:21:29:74:8d:5d:9d:6b:
12:e3:9e:04:da:ca:67:75:a7:0d:f5:d6:48:c8:95:
9c:5e:c1:d0:90:38:9c:12:47:f7:9c:58:de:45:75:
1c:8e:3f:42:7d:dd:df:2e:bd:53:54:85:67:a8:3e:
17:26:06:07:3b:b5:f9:7b:af:88:c5:4e:66:f2:88:
e9:94:81:8f:55:1e:b7:c9:0a:ee:6f:84:4e:0b:02:
73:f7:6f:b9:2a:30:57:cb:73:31:22:4f:8e:e9:0d:
ab:95:45:ef:34:59:47:b0:cd:d8:58:8d:2f:a8:e2:
83:fc:5d:4a:36:3d:99:c3:4b:b3:42:f7:0e:35:e5:
50:06:48:5f:0d:99:82:f6:b0:b5:ae:d8:0d:94:54:
76:c0:7b:58:38:23:76:6f:3a:64:01:c6:da:c2:4e:
c0:eb:7d:93:10:0b:46:34:a7:a1:07:46:6f:02:64:
b2:2e:db:fe:1a:eb:ea:c2:5f:84:c6:28:b7:b8:39:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:83:D6:0B:33:EC:6C:B2:C6:0F:75:53:24:1D:9B:F5:9D:7D:8E:43
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zIPWCzPsbLLGD3VTJB2b9Z19jkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:dc6::/48
Signature Algorithm: sha256WithRSAEncryption
bf:48:61:3c:2d:f2:b2:9a:60:b0:f4:4e:a0:c0:be:7b:4c:ba:
0a:70:81:93:e3:e7:3c:83:72:07:87:7e:41:3e:9c:3b:a0:aa:
a0:15:38:8f:7d:91:d9:91:2e:cd:6a:2e:42:f3:71:da:d6:1b:
65:68:de:ab:b1:4a:a9:f6:56:84:51:b6:d5:a1:15:9b:c6:49:
4b:de:d7:93:57:e7:62:15:70:21:cc:b3:27:84:7e:32:cc:c1:
76:48:f5:2d:69:d0:5a:ab:0d:ff:f1:5e:10:25:66:56:f3:f7:
45:6a:bf:93:55:0b:11:c1:28:1d:ee:30:b3:e9:d5:06:bf:09:
da:68:53:36:23:a1:63:90:ae:52:a8:28:13:65:b0:c3:26:85:
60:c7:4d:12:10:1f:b9:55:24:4c:d9:0e:48:89:1d:ef:84:13:
4a:82:82:46:fa:4f:30:cc:fd:e2:bc:98:52:20:18:9b:b1:8e:
d6:71:a6:b2:d2:33:d5:cc:fe:39:61:f1:a2:88:ed:63:f0:96:
58:27:6f:40:a2:8f:4e:0a:43:27:42:99:79:7c:aa:7c:f4:02:
34:65:74:a4:fc:77:44:73:74:ed:c5:00:09:98:de:0e:b4:61:
60:ae:fd:25:12:8d:97:29:d9:7c:39:91:af:a5:71:db:b0:a5:
64:4a:e0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:39:07 2024 by rpki-client on console-fra.rpki-client.org