Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BxJuIOEOM8IL6qc6bWrr0ynD4BA.roa
File: BxJuIOEOM8IL6qc6bWrr0ynD4BA.roa (raw, json)
Hash identifier: 7UsWyk1P/2bwgi92grC6WOABzB+sFN9WggdUStdlMB0=
Subject key identifier: 07:12:6E:20:E1:0E:33:C2:0B:EA:A7:3A:6D:6A:EB:D3:29:C3:E0:10
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD4979B5416CB710DED6EDC306B41C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BxJuIOEOM8IL6qc6bWrr0ynD4BA.roa
Signing time: Tue 02 Jan 2024 10:34:34 +0000
ROA not before: Tue 02 Jan 2024 10:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212895
IP address blocks: 2a0e:b102:100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:49:79:b5:41:6c:b7:10:de:d6:ed:c3:06:b4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07126e20e10e33c20beaa73a6d6aebd329c3e010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d0:7e:ae:16:3c:0d:1f:30:88:c9:d3:4b:20:
35:bb:8f:d0:2e:65:92:08:2c:48:3f:6f:ba:fe:d0:
6d:93:e6:1b:ab:b1:ce:3e:ff:1d:e4:85:15:75:0e:
b5:fa:a5:b9:cd:fc:90:44:ec:ec:38:07:58:ea:9a:
e2:21:a5:36:3d:a9:10:53:21:02:da:bb:52:89:ed:
15:af:7d:d2:fa:02:68:be:b8:36:73:b5:26:6b:82:
e2:0c:54:0a:d6:ae:f6:a8:6c:04:90:68:a3:8d:42:
5b:cb:ae:8d:05:88:95:1a:6b:29:38:05:15:38:87:
b2:9a:8a:84:85:c9:24:cb:57:7c:be:ab:7f:e3:8e:
d0:66:4d:7b:5b:c1:9e:f8:86:4c:d0:03:b0:38:a8:
bd:b0:1d:98:7f:1a:00:e0:2b:e8:f7:d3:4d:ad:f5:
6a:32:68:87:13:0c:d7:49:be:e7:bd:ab:dd:3c:ee:
d4:f2:78:b0:4a:20:d2:23:2f:b5:10:e5:4f:93:70:
db:80:74:d3:68:7a:9d:11:fb:4f:e4:1f:a4:d8:f3:
c5:ab:90:a1:4f:62:d7:a0:da:84:bc:e0:2f:6d:c0:
0f:b5:19:63:ed:e0:e6:36:a4:3a:f5:00:fa:b5:8a:
b8:3d:52:03:54:c6:f3:22:8a:fb:c7:cd:fd:47:19:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:12:6E:20:E1:0E:33:C2:0B:EA:A7:3A:6D:6A:EB:D3:29:C3:E0:10
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BxJuIOEOM8IL6qc6bWrr0ynD4BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b102:100::/44
Signature Algorithm: sha256WithRSAEncryption
69:47:df:65:bc:1d:6c:48:87:a4:c8:38:3f:a4:8c:0a:46:f9:
90:d2:99:34:1d:c6:ea:2b:de:e2:68:23:11:ee:43:e2:a0:4f:
15:31:48:d7:20:17:c3:b8:9b:57:83:d2:65:2b:1a:23:f8:32:
af:46:50:5b:d4:e6:00:8f:dd:e1:8d:99:23:a5:6d:ca:d8:09:
f0:92:45:9b:a2:d3:af:aa:d9:e9:df:e1:24:64:99:49:73:fa:
ab:26:90:1a:8b:c1:4d:c4:a4:4e:b2:29:04:84:1e:7f:0c:ec:
a0:56:1c:b6:9c:cb:e3:ca:af:e4:a9:36:1f:15:ee:40:bc:38:
3c:74:5a:78:b9:76:22:6a:b2:df:34:d5:5c:1e:8f:b7:8e:74:
82:21:2b:cc:47:95:2d:51:e7:cd:d6:69:15:ef:f1:2a:b7:af:
e5:75:20:ba:6a:82:fe:a3:0b:56:08:02:2d:26:1a:11:85:63:
93:17:2c:6f:46:5e:7b:62:71:44:85:58:3a:df:a1:24:cd:b9:
50:27:67:4d:79:af:67:f8:9e:f7:9b:9f:5d:cb:04:83:9a:95:
22:09:aa:02:16:5a:1f:2c:93:c8:36:09:72:9a:9e:75:94:78:
53:1a:83:dd:60:e9:44:6b:df:51:48:85:db:e8:ff:66:29:a0:
63:36:64:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:06:41 2024 by rpki-client on console-ams.rpki-client.org