Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9_ns1owDwK9mYJi-t31-2ILzfW8.roa
File: 9_ns1owDwK9mYJi-t31-2ILzfW8.roa (raw, json)
Hash identifier: M42CP7kj+ipAatPw1aJr1VMemXQTaK0nIu0sZhS36+k=
Subject key identifier: F7:F9:EC:D6:8C:03:C0:AF:66:60:98:BE:B7:7D:7E:D8:82:F3:7D:6F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019208E27F64A0AC8C5E0E6DCCD8A632D6F9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9_ns1owDwK9mYJi-t31-2ILzfW8.roa
Signing time: Thu 19 Sep 2024 06:05:14 +0000
ROA not before: Thu 19 Sep 2024 06:05:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214223
IP address blocks: 2a10:ccc0:160::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:08:e2:7f:64:a0:ac:8c:5e:0e:6d:cc:d8:a6:32:d6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 19 06:05:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7f9ecd68c03c0af666098beb77d7ed882f37d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a1:05:0c:a7:e2:00:98:3b:31:50:b8:1d:3f:
e8:a2:2e:c4:14:3a:68:46:c4:b3:67:4b:df:3a:be:
9e:5d:34:94:6f:35:6b:32:5f:66:cb:eb:4d:98:65:
d0:66:49:0e:39:74:35:57:a9:a5:78:49:97:c5:e6:
88:02:79:ba:cc:80:7b:e9:b9:1c:80:75:46:27:4f:
50:0c:ac:4e:1b:d0:d9:5b:8f:ce:72:41:eb:15:4c:
01:cb:36:2f:3b:d4:86:de:cc:30:05:b4:3c:90:6d:
57:af:d0:78:83:72:c4:e7:15:97:2d:ac:5a:4f:30:
59:81:85:73:8b:52:d9:2a:52:66:10:40:05:5a:6c:
5e:eb:9a:81:c1:0a:a7:c7:3a:a3:2e:2b:fb:d2:57:
dd:d7:02:bf:a5:22:3d:97:1a:2b:15:d5:7f:58:5b:
10:dc:c6:4c:cf:74:d3:89:e9:8f:85:e8:b6:3f:eb:
6b:1b:87:42:96:2b:8d:42:0e:26:51:bf:a7:4c:c1:
92:45:73:5a:e8:36:09:c8:95:1f:08:84:fc:56:0a:
d5:03:7e:f9:ae:55:1c:9b:df:dc:a5:69:ab:80:03:
0c:8b:06:dd:5d:bb:bb:94:f4:76:fe:ec:9f:33:d3:
21:39:76:a7:a4:5b:bc:e9:1f:7f:e0:9a:74:3d:ed:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F9:EC:D6:8C:03:C0:AF:66:60:98:BE:B7:7D:7E:D8:82:F3:7D:6F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9_ns1owDwK9mYJi-t31-2ILzfW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:160::/44
Signature Algorithm: sha256WithRSAEncryption
3a:39:d5:4f:3a:9f:7b:d8:09:be:ab:e3:45:76:a4:f1:65:8d:
29:f0:f2:2b:63:58:a6:b8:59:6d:57:06:2f:71:43:33:1b:39:
5c:c7:dc:cc:ec:38:7d:5f:9e:87:ca:57:c6:15:6e:ac:9f:78:
9f:16:e5:6b:02:90:6a:fd:e2:d4:68:aa:d6:78:46:02:52:e0:
c1:3a:22:a3:b7:79:83:35:a2:b0:b3:ae:b3:2f:d7:fc:83:ed:
80:a3:19:8b:33:5f:b9:b3:8f:a5:ac:d4:89:a4:c1:3a:fb:6d:
0e:b5:db:3e:20:71:f5:80:93:fe:9d:2d:f4:6b:9a:cd:57:b1:
40:38:2d:ee:fc:c2:e5:b5:97:b4:15:9c:c1:65:73:ec:a7:56:
1f:75:53:7f:04:c5:33:e5:71:e6:12:7a:ed:6d:d6:7b:14:4a:
18:b9:97:28:ab:12:34:7c:6d:28:8e:4e:fc:4e:95:f4:e3:81:
b6:29:8f:c0:0a:0f:a4:75:38:e3:21:a5:fe:a8:3d:02:39:a5:
6b:29:19:ff:05:e0:38:e0:fd:a7:c2:99:3e:7e:4d:d6:f7:1a:
a4:64:7b:11:33:77:f7:0d:99:ce:50:11:ee:e1:6e:58:74:0e:
eb:57:70:5a:d0:98:bb:c8:26:db:d4:80:d4:41:4c:fd:d4:18:
89:15:98:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:29 2024 by rpki-client on console-fra.rpki-client.org