Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Cnu18xB1-ScDInpGB0AubOZpwj4.roa
File: Cnu18xB1-ScDInpGB0AubOZpwj4.roa (raw, json)
Hash identifier: kUVMXjiwpmLPZquFS5rY01VhB4kaM4pNgu0mkOtVVV0=
Subject key identifier: 0A:7B:B5:F3:10:75:F9:27:03:22:7A:46:07:40:2E:6C:E6:69:C2:3E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01943237B62720CC096050805B4A181F35B8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Cnu18xB1-ScDInpGB0AubOZpwj4.roa
Signing time: Sat 04 Jan 2025 16:48:19 +0000
ROA not before: Sat 04 Jan 2025 16:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50922
IP address blocks: 2a10:2f00:18e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:32:37:b6:27:20:cc:09:60:50:80:5b:4a:18:1f:35:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 4 16:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a7bb5f31075f92703227a4607402e6ce669c23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:80:d2:b6:51:85:79:73:66:4c:95:00:63:
9a:ff:72:02:8e:58:29:f5:6b:59:0d:7d:e4:90:88:
6b:4f:74:56:c6:ff:29:9c:c1:2b:30:33:31:8b:b2:
a2:b1:96:cf:7e:fb:91:a6:d8:40:ab:13:39:70:4d:
81:71:bb:e5:e7:24:14:cd:49:e7:35:4f:07:3f:11:
58:4e:86:7e:01:df:f9:b3:d3:70:3c:8b:5d:d1:5b:
34:74:cf:88:21:c7:50:d2:44:8d:b8:0f:05:ac:3d:
ae:f7:2b:17:74:92:16:ce:b5:00:94:92:ac:92:63:
2d:4b:a9:a3:39:c2:31:d4:81:6d:71:15:22:62:b0:
84:c7:ef:28:22:20:aa:1d:cf:90:83:72:02:02:dc:
7b:67:99:6b:40:ac:8f:42:bb:ac:31:93:dc:56:3b:
e9:94:04:18:d2:21:6e:74:28:b3:e2:82:b3:9a:de:
3b:f1:5b:60:94:85:43:e8:92:89:25:be:9c:e8:4f:
0e:92:cc:28:b7:b1:5c:fe:35:b3:9a:c4:57:58:36:
83:20:32:6b:15:ee:8c:b5:c0:ea:59:d7:d8:a0:29:
f0:e4:e2:ad:b7:96:1b:c8:9e:f4:63:c0:fc:f6:1f:
10:04:87:23:a0:fe:29:09:b5:72:f1:86:e6:0b:15:
20:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7B:B5:F3:10:75:F9:27:03:22:7A:46:07:40:2E:6C:E6:69:C2:3E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Cnu18xB1-ScDInpGB0AubOZpwj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:18e::/48
Signature Algorithm: sha256WithRSAEncryption
00:68:22:44:52:33:cd:71:06:13:f4:04:71:96:99:30:b6:a6:
21:07:fe:31:df:11:4e:a2:97:87:fc:27:40:e9:d3:a4:6b:99:
a3:06:86:2c:dd:c0:22:bd:8b:32:41:6a:72:ba:b1:aa:a7:bb:
c4:0c:e2:cb:c0:88:83:2f:39:b9:9a:b0:ac:ab:3d:e1:f8:89:
92:79:e4:8b:c8:15:51:71:29:5c:7e:cd:92:85:28:4f:26:97:
fc:f5:f4:6a:49:fe:b0:03:34:d1:e5:25:18:51:91:e0:6d:8e:
05:1b:cc:2e:06:20:cc:2d:38:cf:e3:93:e8:3a:07:9e:f5:93:
c0:3d:0f:1e:19:8c:bc:a6:77:cd:40:3b:43:19:55:ea:02:21:
80:84:54:81:23:33:09:36:43:2d:6d:7d:3c:cf:25:1f:a0:94:
fc:90:8b:c6:6b:22:5e:6a:4a:f8:e5:d2:0b:df:23:25:2e:0a:
53:fb:71:12:7b:a7:87:5f:50:69:82:49:05:3f:49:38:bf:a4:
40:a7:2c:12:b7:ba:5f:b5:c5:1a:db:c7:a6:d8:fe:d9:0f:ab:
bb:17:3f:c1:9a:42:ba:8b:83:16:b1:99:16:ba:24:0c:d9:b5:
7f:03:42:f6:06:c3:7b:77:27:d1:ae:3d:d9:8b:45:75:f8:7e:
8b:d6:52:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:45:19 2025 by rpki-client