Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/63vK6OYDeVzCQYe13ErvJXu4ZzY.roa
File: 63vK6OYDeVzCQYe13ErvJXu4ZzY.roa (raw, json)
Hash identifier: yp/pUGunpq1hwC3DiuCsQHoWgmBByHqrTlX6tdoyeIg=
Subject key identifier: EB:7B:CA:E8:E6:03:79:5C:C2:41:87:B5:DC:4A:EF:25:7B:B8:67:36
Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial: 018E3E6BA3137158CE060A6E9C730C74BDFF
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/63vK6OYDeVzCQYe13ErvJXu4ZzY.roa
Signing time: Thu 14 Mar 2024 19:23:45 +0000
ROA not before: Thu 14 Mar 2024 19:23:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209990
IP address blocks: 2a0d:f9c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3e:6b:a3:13:71:58:ce:06:0a:6e:9c:73:0c:74:bd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Validity
Not Before: Mar 14 19:23:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb7bcae8e603795cc24187b5dc4aef257bb86736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ba:de:3c:c9:72:47:90:9e:b9:58:3d:68:3f:
1f:7c:cc:c9:41:51:4c:23:5a:9a:db:56:56:13:6e:
60:9f:46:d2:c3:21:af:a7:3b:4e:c7:8b:63:a4:fd:
9d:e4:8b:5b:ae:7d:bf:4d:f1:7b:95:f2:7e:b0:90:
c5:72:89:2f:4e:58:5a:d5:50:47:1a:00:4a:b5:eb:
8d:fb:fd:63:1f:af:15:c7:94:e6:51:db:12:6e:2d:
b0:6a:fd:bc:fc:88:c3:db:f2:94:40:d8:70:6d:0d:
00:6c:27:0f:5e:6f:34:e4:83:40:76:72:fa:51:3a:
3e:cf:d3:e3:fa:c1:5e:5d:69:3e:db:fa:d5:39:47:
39:f1:af:3e:46:3d:d4:f4:bd:33:82:2c:21:74:e1:
62:ee:54:f7:3a:82:72:aa:6e:9f:e0:25:85:62:69:
25:7a:cb:7e:0f:6e:79:38:4e:dc:69:a9:ab:a8:16:
72:bc:9a:2e:33:dc:ff:91:d0:6b:4b:7c:64:a9:dd:
fc:0b:1e:7d:58:d2:ea:60:78:3e:3a:be:63:11:ae:
ec:ed:31:c6:1a:90:5e:47:9c:8a:84:ca:bf:e1:cb:
4f:c8:5c:b2:85:34:c5:eb:d7:30:20:cd:9c:87:48:
22:21:24:19:82:a2:51:f7:d1:36:84:bf:b8:75:51:
bb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7B:CA:E8:E6:03:79:5C:C2:41:87:B5:DC:4A:EF:25:7B:B8:67:36
X509v3 Authority Key Identifier:
keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/63vK6OYDeVzCQYe13ErvJXu4ZzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f9c0::/29
Signature Algorithm: sha256WithRSAEncryption
08:0a:8f:db:9e:8a:f8:93:fe:0c:aa:d6:6a:d3:28:ad:7e:9e:
b1:be:42:a6:a5:c6:17:ac:49:91:b4:0c:5b:b7:21:e1:18:e9:
27:b1:78:7d:9d:cd:a1:bf:5b:0e:56:39:00:eb:7c:28:8a:39:
ee:ed:f9:b6:4d:62:3c:20:55:e3:fe:58:5d:8d:94:7f:03:b2:
9a:b3:09:87:5e:a8:26:12:01:a1:45:d8:9c:aa:34:69:eb:0f:
b6:91:f8:1c:d4:e4:4e:34:34:99:0c:a8:80:84:33:61:63:ff:
d6:fe:e1:8a:85:de:60:46:40:5c:68:e0:54:88:2b:d3:d1:0c:
69:30:fc:86:9c:4f:53:58:dc:ea:b7:ce:99:e3:33:a2:fc:e6:
e1:1f:23:8f:98:18:67:c2:8a:8b:40:eb:d1:07:58:85:98:f7:
b6:96:97:4b:93:37:66:f3:5e:b0:91:d0:63:9a:7b:10:d3:55:
50:02:7c:9f:1f:70:95:05:c2:5d:22:78:c1:f1:9a:4f:5e:5f:
c3:8a:ce:32:22:b6:70:c5:15:02:d3:e8:0f:e0:38:58:e4:f1:
32:71:b7:8a:a4:56:cd:1e:76:19:d9:1b:b4:4e:dd:92:9e:3b:
cd:f7:8a:ed:63:8e:00:6a:e1:7f:f4:54:c3:0c:8d:f8:f1:2f:
9a:a4:12:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 15:11:55 2024 by rpki-client on console-fra.rpki-client.org