Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x_tNXYHK-GeKGMdAAfSy29Yksv4.roa
File: x_tNXYHK-GeKGMdAAfSy29Yksv4.roa (raw, json)
Hash identifier: A4o96jjRuegkb7y5A9YK5hPOjigAoqtKVd8nL1Ok1tw=
Subject key identifier: C7:FB:4D:5D:81:CA:F8:67:8A:18:C7:40:01:F4:B2:DB:D6:24:B2:FE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018F0C7731DAC54A957E732402BC9D028CAD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x_tNXYHK-GeKGMdAAfSy29Yksv4.roa
Signing time: Tue 23 Apr 2024 19:38:09 +0000
ROA not before: Tue 23 Apr 2024 19:38:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 2a0e:b107:7f7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0c:77:31:da:c5:4a:95:7e:73:24:02:bc:9d:02:8c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 23 19:38:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7fb4d5d81caf8678a18c74001f4b2dbd624b2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4f:5a:d0:53:17:8f:76:99:d5:4f:1c:d0:51:
36:5c:5c:f6:4d:41:13:cc:47:a9:65:91:d4:12:f7:
00:01:74:11:e3:c5:63:61:1a:84:4b:9f:f3:c9:69:
a1:f7:bf:98:a6:52:d0:e1:eb:19:20:66:43:3f:ed:
67:d9:94:33:fd:7b:06:bb:16:2e:b2:69:2d:a0:e1:
76:ad:fc:ca:be:d6:88:4a:84:86:c3:8e:b3:bc:30:
68:d4:f5:99:80:be:a2:36:fd:2e:35:c0:d3:a6:07:
39:cd:cc:95:5c:67:6c:8b:54:76:60:31:20:fd:06:
48:2f:c5:3f:29:8e:43:69:9e:7f:9a:88:98:90:86:
45:6e:f4:45:b6:ea:f9:73:71:e8:6c:16:82:21:3b:
de:db:1b:97:76:78:28:52:96:fd:a6:3c:8c:37:1a:
61:49:cf:cf:b4:9c:b9:aa:3b:9c:de:e8:8f:2f:09:
7e:f5:b0:0f:1e:df:6e:77:1e:69:d1:22:96:bf:cb:
a2:ae:63:11:79:73:32:fa:15:2c:d9:21:ad:82:e4:
00:35:85:ef:a6:48:cc:9b:c5:c3:34:b2:5e:af:b9:
d4:c5:d3:49:7d:c3:f7:38:2f:3c:c4:43:24:9d:1a:
c8:33:aa:88:b0:4d:e5:f3:a2:ce:cd:62:20:dd:20:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FB:4D:5D:81:CA:F8:67:8A:18:C7:40:01:F4:B2:DB:D6:24:B2:FE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x_tNXYHK-GeKGMdAAfSy29Yksv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:7f7::/48
Signature Algorithm: sha256WithRSAEncryption
04:f6:f7:66:3f:b9:12:1c:3f:10:24:16:a7:78:83:9f:b4:14:
84:92:80:48:ee:a1:b8:53:68:77:26:33:b2:f5:43:20:fa:ce:
b9:3c:8b:1a:f1:1b:9d:d2:9a:a4:50:84:42:02:a0:ca:64:62:
fb:dd:25:18:88:c2:b3:72:45:8c:99:2e:55:b6:09:4c:fc:99:
d6:25:24:b1:6c:86:89:b7:04:c4:18:3d:ea:ed:9d:e4:8e:a8:
50:7b:83:5f:76:fa:13:da:30:22:09:d2:c2:c1:2b:ba:ef:84:
b8:ab:a5:bd:75:7d:c8:d3:77:1d:74:5c:b8:cb:0c:07:04:9d:
b2:46:21:9c:5a:f0:a6:9d:ab:10:d1:f3:01:ee:e2:70:47:ff:
6c:a8:ab:9b:29:3c:1b:96:f5:df:66:90:cc:de:8e:9f:9e:71:
c7:f4:a4:e1:51:29:93:b0:ef:14:32:c4:6f:4d:89:08:be:7a:
be:96:02:de:6b:0d:e3:03:79:0f:d0:9e:65:d3:57:c5:c4:4b:
30:30:a7:19:dc:7b:d5:10:50:91:2b:47:87:e4:07:2b:75:9e:
29:1d:bb:69:9a:14:40:0c:c0:ce:6f:a2:09:d3:e8:00:e4:bf:
46:e6:e3:ab:43:c7:3a:e7:6b:af:d8:7f:c3:f8:c8:48:ba:61:
0a:dd:83:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:27:00 2024 by rpki-client on console-ams.rpki-client.org