Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3xwBH6ByFb2Qh3rBlBUUHwlG3oM.roa
File: 3xwBH6ByFb2Qh3rBlBUUHwlG3oM.roa (raw, json)
Hash identifier: yN9a/2M+Z/wzUKGYJRjDQPl2M6/ejXhMVgukVHP7wOw=
Subject key identifier: DF:1C:01:1F:A0:72:15:BD:90:87:7A:C1:94:15:14:1F:09:46:DE:83
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019152C2238819CBB6089F38743B1AA5A816
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3xwBH6ByFb2Qh3rBlBUUHwlG3oM.roa
Signing time: Wed 14 Aug 2024 21:19:00 +0000
ROA not before: Wed 14 Aug 2024 21:19:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197477
IP address blocks: 2a06:de01:70::/44 maxlen: 48
2a10:ccc2:10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:52:c2:23:88:19:cb:b6:08:9f:38:74:3b:1a:a5:a8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 14 21:19:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df1c011fa07215bd90877ac19415141f0946de83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:5e:f8:3f:7b:14:b6:54:47:f8:2a:27:93:
cf:f2:39:bd:e5:ce:72:4b:8c:d7:80:88:c7:59:4d:
39:40:2f:38:da:cd:75:bd:f6:0c:13:97:91:8a:36:
7e:96:65:a2:7e:72:b4:f8:04:77:7c:ec:80:c8:40:
0b:b3:3b:7d:52:9f:3d:ec:a1:07:52:ff:08:9c:98:
22:8c:64:d7:0b:9b:38:c3:ce:56:a5:c3:1d:02:04:
80:d9:20:32:ed:b9:dc:c1:86:08:1d:f5:a8:87:60:
e7:0e:4d:5a:56:8c:3e:58:c0:5a:fa:be:ce:10:ec:
dd:89:98:12:d9:39:56:ea:e6:c6:de:ab:44:8d:c4:
55:12:f8:4f:86:a4:fd:1b:af:ed:b4:7a:61:a9:8e:
7b:06:e4:c7:ff:ff:28:00:56:62:e6:96:51:3f:8d:
cd:91:d2:d9:17:f4:fe:bf:30:6b:17:a2:0c:40:b1:
e6:3e:dc:26:fd:04:c7:2a:d7:7c:3b:20:6f:aa:6f:
87:09:c3:2c:9a:98:87:88:d8:0b:24:12:47:55:8a:
61:09:5a:0c:f3:70:d7:8e:7a:cc:91:76:78:03:0a:
fd:a1:f7:15:47:c4:0b:0e:2d:3b:46:2c:78:1f:a6:
6d:f9:c0:e5:01:23:dc:47:63:a3:73:31:ec:0a:33:
d1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1C:01:1F:A0:72:15:BD:90:87:7A:C1:94:15:14:1F:09:46:DE:83
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3xwBH6ByFb2Qh3rBlBUUHwlG3oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:70::/44
2a10:ccc2:10::/44
Signature Algorithm: sha256WithRSAEncryption
ac:5d:39:49:fd:b0:d8:ea:dc:fd:0f:ce:0b:37:88:a5:d3:49:
00:04:e1:a4:6b:fc:e2:e4:ad:f9:8b:22:b4:5b:6e:fd:67:1b:
33:23:33:6d:d4:65:5c:7d:4e:3f:4a:cb:53:66:04:b1:17:27:
90:33:91:ee:e8:13:03:e2:ff:8c:2d:72:0d:d0:f2:1b:89:36:
5e:b5:62:bb:02:fc:d5:12:14:a8:e9:3d:28:81:4f:74:c2:7e:
d1:ab:0c:64:dc:a8:af:97:ec:e2:1d:95:db:d6:45:3b:df:dd:
9a:8b:0f:5c:f0:b0:62:9e:c8:85:1a:d2:ba:42:1f:25:2d:b0:
54:78:8e:26:57:90:44:9a:4f:71:c1:dc:09:84:a6:84:60:d0:
e1:0f:8e:1d:a3:4b:13:af:a4:c8:58:a4:33:71:27:c5:8f:f1:
01:ce:22:b5:2d:32:c2:08:4f:2e:65:84:2d:cd:33:94:20:7b:
d3:b5:3a:bf:a1:38:3f:b9:ce:81:5f:d9:88:55:89:1b:2f:51:
79:fe:82:7e:02:1e:24:0b:82:9b:0a:10:64:da:09:3b:6b:db:
85:82:6c:d2:2c:f8:f3:4d:30:ff:21:7b:93:53:ca:34:55:01:
38:c2:d4:a8:92:d6:2c:b2:28:0c:51:f3:ec:1f:54:7b:21:0b:
a0:58:6f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:53 2024 by rpki-client on console-ams.rpki-client.org