Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2oqN6BtrZo8iJcC7sFAF0VLGzj4.roa
File: 2oqN6BtrZo8iJcC7sFAF0VLGzj4.roa (raw, json)
Hash identifier: fKfgWxknx6SYlmrbepv1UAbvrrpcCtBn4VKuXRA1o3w=
Subject key identifier: DA:8A:8D:E8:1B:6B:66:8F:22:25:C0:BB:B0:50:05:D1:52:C6:CE:3E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD2823CD5D28A5D67937D0DB8E85D7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2oqN6BtrZo8iJcC7sFAF0VLGzj4.roa
Signing time: Tue 02 Jan 2024 10:34:26 +0000
ROA not before: Tue 02 Jan 2024 10:34:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210662
IP address blocks: 2a10:cc47:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:28:23:cd:5d:28:a5:d6:79:37:d0:db:8e:85:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da8a8de81b6b668f2225c0bbb05005d152c6ce3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:65:ca:b9:b4:a5:0d:38:71:3c:16:bb:d5:
91:0a:5c:5a:7a:ec:8c:32:67:67:2c:c4:2e:76:71:
7d:b6:e9:06:ba:06:41:8b:66:a7:66:a1:5f:c9:7e:
03:9f:77:7b:e1:50:0a:a7:9f:eb:52:a0:59:e6:aa:
be:80:94:cd:77:3d:36:41:15:05:7d:72:7f:dd:57:
39:74:02:bd:d4:48:88:38:e1:08:37:55:25:e2:22:
b3:37:c5:1e:f8:e3:dd:67:b7:d2:50:b3:0e:b0:03:
69:a3:a0:dd:37:39:ef:f3:8f:60:10:ea:8a:11:a3:
37:d7:d1:a0:80:65:dc:2e:12:4f:e3:8c:7d:48:26:
a6:b6:83:d6:3f:13:03:98:a6:f4:2a:49:31:4a:53:
d6:3f:38:81:32:2f:7c:d8:05:32:e3:bb:60:ef:6e:
47:a2:da:61:26:6c:dc:a6:56:d9:75:ef:70:d5:1c:
17:1d:67:e1:99:0c:80:0d:ad:6f:96:47:c3:64:dc:
d7:3c:5a:e7:27:da:40:89:41:67:1f:20:4a:77:b1:
cb:25:9c:9d:2f:f2:94:1b:15:0a:e4:89:75:7c:d0:
50:b1:ce:6d:a3:3f:26:87:f2:47:4a:16:24:fc:56:
9c:19:f9:3f:92:bc:33:67:c3:67:09:26:19:fa:8b:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8A:8D:E8:1B:6B:66:8F:22:25:C0:BB:B0:50:05:D1:52:C6:CE:3E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2oqN6BtrZo8iJcC7sFAF0VLGzj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc47:1000::/36
Signature Algorithm: sha256WithRSAEncryption
2b:e8:5f:5b:f2:6b:b1:3d:5b:a5:25:a9:2f:19:6e:ba:0c:cc:
21:89:e2:a8:48:03:72:a9:4a:c1:0f:df:af:8d:78:e7:87:92:
e4:fe:87:9a:c5:20:ec:a0:b7:0a:16:eb:ed:c8:69:cf:71:77:
3f:33:b1:96:41:5f:9b:ed:33:02:a2:76:6e:27:32:46:7a:c9:
cd:5d:a4:e2:0e:04:ae:eb:19:e7:98:f1:c8:5a:6c:df:d3:f4:
96:f7:a9:ec:e4:3c:c3:ac:3d:3d:7d:b3:47:9a:9d:ec:b9:17:
a2:fa:b7:fb:db:0b:25:11:86:84:e0:0f:fd:aa:87:e6:f6:d2:
8f:63:03:8f:e1:48:9c:b3:6d:92:4c:05:a8:50:82:89:7d:5c:
f3:86:0a:18:3d:c6:1b:10:27:3a:c2:0e:0c:57:a3:86:e6:0a:
6b:07:07:aa:71:1b:b7:1c:69:45:24:36:97:c5:4f:36:3b:2b:
78:5d:5b:24:ce:33:da:9f:6e:11:a6:80:88:a6:cc:d9:82:32:
bc:09:97:55:18:39:03:27:fb:d7:e5:73:9e:ce:25:98:d1:a7:
8d:9c:dd:0e:74:e1:f0:ed:1e:d9:a6:9e:f4:5a:86:e9:c6:c7:
70:83:3a:d1:bd:08:7a:cc:07:e4:82:73:6d:35:0d:dc:1b:1d:
ef:bf:94:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:39:02 2024 by rpki-client on console-fra.rpki-client.org