Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/58cbMhZF_MWf15E828NPkAxZYNE.roa
File: 58cbMhZF_MWf15E828NPkAxZYNE.roa (raw, json)
Hash identifier: 50pd5SfYMLJUBJMG8kJcGT6TWGmymYu2xLH4OrqSmE0=
Subject key identifier: E7:C7:1B:32:16:45:FC:C5:9F:D7:91:3C:DB:C3:4F:90:0C:59:60:D1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018EA20C66C52C7A09B8470D6B15AE854FD3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/58cbMhZF_MWf15E828NPkAxZYNE.roa
Signing time: Wed 03 Apr 2024 03:41:45 +0000
ROA not before: Wed 03 Apr 2024 03:41:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142648
IP address blocks: 2a10:ccc1:106::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a2:0c:66:c5:2c:7a:09:b8:47:0d:6b:15:ae:85:4f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 3 03:41:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7c71b321645fcc59fd7913cdbc34f900c5960d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:2f:1c:b2:d2:4f:65:2b:5c:38:8c:e0:10:
61:5d:e8:e6:36:ed:ff:ac:f3:ca:da:e3:17:f1:a3:
86:67:1b:1e:24:39:22:8a:4f:d9:d6:41:94:46:ae:
50:ea:17:97:fc:25:19:17:bf:67:4a:5e:fc:49:b8:
36:d7:36:74:c8:5f:f3:ba:1b:2c:08:1c:3f:47:95:
d2:ef:65:16:37:46:0f:94:a5:71:67:ed:f9:3e:1a:
46:59:d9:2b:ae:1a:fb:59:00:ea:02:e4:fb:06:2d:
b0:7a:48:23:f9:3b:50:f8:c9:dc:9c:86:26:5c:9d:
e1:a0:e7:82:ae:c2:87:93:e6:b7:79:dc:63:4c:90:
b8:eb:2c:46:cd:40:92:1e:e9:b5:5c:90:6a:4a:07:
7c:f5:6f:b6:0c:13:14:76:72:45:86:e3:9d:84:22:
d5:43:6d:69:fb:60:60:b4:5a:23:3b:fd:15:e2:18:
4c:ee:76:58:63:d1:e1:39:38:d0:46:ad:e4:0e:de:
40:78:9a:57:da:5f:8b:3f:e2:61:3d:75:a9:ca:f8:
2f:4f:98:b2:c6:a1:b5:5c:5b:09:1f:99:45:96:6c:
a3:3d:1d:69:02:13:9a:e7:e1:3b:93:52:2d:5f:be:
98:d4:d3:73:15:60:7f:b9:05:54:49:3f:7d:d9:59:
7f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C7:1B:32:16:45:FC:C5:9F:D7:91:3C:DB:C3:4F:90:0C:59:60:D1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/58cbMhZF_MWf15E828NPkAxZYNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc1:106::/48
Signature Algorithm: sha256WithRSAEncryption
16:7c:68:42:33:9f:17:46:bf:08:5c:30:5c:ae:3a:62:c6:f4:
40:d4:36:eb:bc:21:4d:09:09:10:cb:e7:19:24:45:39:5a:58:
48:73:7e:a4:e3:5e:c8:bd:42:b2:8b:65:19:ab:a3:7c:49:03:
91:28:b7:2a:bc:98:89:5b:8e:26:55:6c:bf:55:6a:79:42:6e:
8b:78:1f:b0:80:fd:bb:d8:e2:af:16:92:62:56:2d:57:cd:ed:
b2:1a:ee:6e:39:cc:c4:ce:93:ec:9f:93:3e:85:ef:27:45:6b:
75:c8:4e:d4:70:dc:30:35:0c:9a:e8:65:15:57:a9:ef:c5:89:
d1:47:81:b8:a1:e8:2c:c5:88:1c:81:bc:19:99:f7:bc:c1:3d:
03:5b:82:f9:94:4f:d4:54:56:26:77:f9:21:78:b5:f9:d3:8e:
04:a1:c2:86:83:d8:62:91:65:52:f1:3e:ef:30:c0:a7:50:be:
c4:7b:31:bc:aa:1b:0d:d5:31:18:73:de:8f:a6:87:dc:07:3f:
22:bb:da:07:3b:55:a1:34:bb:8b:ea:5a:ef:9d:bd:23:48:08:
89:d2:21:60:fc:21:4a:28:2e:34:54:e6:86:90:7d:0e:27:7c:
2f:72:67:f9:cb:1d:6d:f1:1f:10:01:eb:90:60:53:4b:57:f5:
74:54:8b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:39:02 2024 by rpki-client on console-fra.rpki-client.org