Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C7LqpYSqNkj2gX6LbuhWC7dYUQc.roa
File: C7LqpYSqNkj2gX6LbuhWC7dYUQc.roa (raw, json)
Hash identifier: oTNwbWWjDkn5rldWLcAJDjuhkaH+1sPC/ZPyXWFF4uA=
Subject key identifier: 0B:B2:EA:A5:84:AA:36:48:F6:81:7E:8B:6E:E8:56:0B:B7:58:51:07
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01905916B828A9C8EF2565B931995B7010DF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C7LqpYSqNkj2gX6LbuhWC7dYUQc.roa
Signing time: Thu 27 Jun 2024 09:46:19 +0000
ROA not before: Thu 27 Jun 2024 09:46:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212173
IP address blocks: 2a0e:b107:1d40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:59:16:b8:28:a9:c8:ef:25:65:b9:31:99:5b:70:10:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 27 09:46:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bb2eaa584aa3648f6817e8b6ee8560bb7585107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:20:b1:c0:b1:45:34:9a:d9:7c:8e:7a:91:
74:4b:01:14:58:4b:2f:af:80:10:61:25:4e:0f:8d:
71:3e:56:b9:79:e5:55:d5:31:c6:4f:c7:df:9f:11:
02:10:5d:ee:ea:11:be:ff:bf:75:67:63:f9:e3:4a:
7f:98:33:b0:eb:e3:a2:12:9c:90:9c:7e:5d:11:87:
ce:09:aa:ff:17:d2:76:a2:ca:c9:13:d0:34:df:32:
2b:6c:af:51:ce:a4:04:b5:f0:f1:92:3f:dc:23:83:
5a:3a:42:00:b2:60:42:3b:68:fa:d3:05:70:e6:ce:
49:21:92:2c:27:3c:d2:a8:e3:b4:70:73:e6:65:9b:
a8:df:1c:c9:fc:37:57:dc:62:02:1d:91:44:e6:9b:
e0:72:30:cd:a4:0f:fb:38:dc:ab:5d:78:cb:8c:8b:
bb:80:29:3c:a8:8a:cb:ad:43:15:f9:75:81:dd:8c:
00:23:02:26:8f:e8:72:41:a6:c8:f1:ec:f1:a7:f5:
a6:0e:15:54:eb:eb:12:1a:ce:64:0f:03:c7:14:7d:
ec:f9:2c:43:72:3f:57:8f:f9:18:dc:a8:e4:5e:03:
66:6b:01:28:14:13:14:03:c5:f3:c5:86:0a:d6:78:
de:f6:3d:83:75:96:00:f9:fb:46:cd:42:80:36:ac:
4e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B2:EA:A5:84:AA:36:48:F6:81:7E:8B:6E:E8:56:0B:B7:58:51:07
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C7LqpYSqNkj2gX6LbuhWC7dYUQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1d40::/48
Signature Algorithm: sha256WithRSAEncryption
7c:10:ca:df:e4:4c:4d:12:0c:97:5d:45:fa:69:5b:a8:43:cc:
33:28:9b:22:33:d2:57:24:fd:a0:68:01:87:c5:2f:7f:80:03:
18:e1:bd:ca:60:f1:9a:6e:9c:17:22:d2:d9:cc:02:85:87:4e:
cc:bd:23:a9:95:a3:5f:a2:fd:46:63:1a:35:69:71:3b:c0:fe:
f2:b1:61:b1:6b:f4:4a:d3:fe:0c:17:39:1b:3b:92:a9:30:7e:
17:08:80:9f:0a:c3:66:98:d2:3f:01:e7:25:1f:c5:23:96:6b:
84:cd:13:15:8b:13:4a:8a:51:5c:1e:9a:74:a5:92:84:75:dc:
5f:02:8c:98:23:76:76:cd:d8:0d:49:53:56:e0:40:a1:32:d6:
e7:2d:5d:84:b9:e1:b4:db:13:1d:5d:15:90:17:1f:72:b0:4a:
e9:84:48:16:7a:61:42:c8:81:c3:28:1a:01:8e:c8:61:a7:f7:
57:2b:88:88:1a:e4:73:89:5a:06:a1:07:82:43:34:85:94:2d:
03:dc:0e:38:9b:d6:b9:b6:5b:26:57:82:ab:67:6a:26:c9:31:
a5:e5:71:74:9e:01:49:5e:ed:f3:b8:9d:11:3c:81:47:a6:f7:
49:5c:38:a9:d4:fb:53:c7:10:f4:74:13:fe:b7:ed:d5:72:e7:
0d:08:3f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:54 2024 by rpki-client on console-ams.rpki-client.org