Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GCIylX5KM0xGHLY0sYT1ITYRkDw.roa
File: GCIylX5KM0xGHLY0sYT1ITYRkDw.roa (raw, json)
Hash identifier: mWLnemPuruwrWs+w5bhI2ZS77wh9oBj0G8qd/ofT5VA=
Subject key identifier: 18:22:32:95:7E:4A:33:4C:46:1C:B6:34:B1:84:F5:21:36:11:90:3C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019275A9237679A8B30BA45CBFF8C874DF72
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GCIylX5KM0xGHLY0sYT1ITYRkDw.roa
Signing time: Thu 10 Oct 2024 09:01:11 +0000
ROA not before: Thu 10 Oct 2024 09:01:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61218
IP address blocks: 2a0e:97c0:4b00::/40 maxlen: 48
2a0e:b100:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:75:a9:23:76:79:a8:b3:0b:a4:5c:bf:f8:c8:74:df:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 10 09:01:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=182232957e4a334c461cb634b184f5213611903c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:0e:86:3b:20:bd:88:6d:bf:fc:f3:dd:32:
c8:92:e7:46:04:98:de:73:0a:c3:32:b4:ca:ad:78:
a4:14:d4:20:35:e3:fb:af:1a:d8:2b:65:fd:68:a7:
5a:e4:c5:90:97:90:ed:20:f2:ec:d2:4e:42:ae:8a:
13:76:93:a3:97:0a:65:36:52:3d:73:ce:31:6b:18:
51:5e:a1:43:15:c7:b2:76:dd:bf:a5:0f:2b:94:d6:
11:32:9c:4a:ed:71:e8:81:92:60:64:6b:27:54:fb:
bd:c6:82:6e:62:c6:fb:5b:31:b7:03:35:98:2d:e3:
8d:3c:73:95:52:57:51:a4:ec:e2:f1:ed:cd:73:da:
fc:7b:1b:f6:e1:3e:95:c1:9d:d4:1b:23:3c:8d:01:
38:15:a8:bf:ea:0f:79:d0:32:7a:0b:69:4a:7f:dc:
04:c8:5b:be:ad:e4:7e:32:71:f4:b6:2d:db:25:62:
4d:88:9a:c7:7e:ad:8a:2d:1c:4c:22:38:1a:75:58:
d9:21:45:00:43:6c:db:85:44:50:75:37:6a:06:4f:
80:a8:59:62:c9:ec:37:03:b6:df:e8:55:12:9e:5b:
20:ca:48:48:fa:b5:fb:8a:fd:bd:20:8e:49:8b:1f:
1e:07:0d:e3:32:35:dc:4f:06:86:2e:7a:3d:5c:29:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:22:32:95:7E:4A:33:4C:46:1C:B6:34:B1:84:F5:21:36:11:90:3C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GCIylX5KM0xGHLY0sYT1ITYRkDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:4b00::/40
2a0e:b100:1::/48
Signature Algorithm: sha256WithRSAEncryption
2f:3f:b6:c6:b6:21:3d:1f:75:69:a0:6b:26:46:de:d8:be:9e:
b5:ff:d5:e1:78:0d:ac:1f:98:d4:9f:9b:c7:70:bf:96:77:8b:
ca:53:c2:d8:ae:bd:e6:a4:c0:a5:86:7d:1b:50:07:f1:cf:15:
1c:ca:97:6f:1a:28:bc:94:71:d4:78:03:2a:93:8c:a9:cb:b5:
15:a2:fe:b3:54:e3:e9:fb:58:e7:73:5d:a5:18:0c:42:4b:f8:
90:dd:39:41:f7:8a:a5:c5:60:b1:e9:98:2a:f1:84:ee:3d:42:
d0:d3:b2:fc:a0:57:0b:03:ef:33:22:57:b2:3c:d3:6e:11:11:
2f:fc:89:97:76:dc:c4:1c:e5:75:62:6b:81:a0:13:2a:6b:2e:
3a:96:47:cc:13:cc:25:4e:c6:26:89:26:ff:c2:34:c3:c7:d7:
3c:76:73:c7:f3:d2:73:fa:19:c7:d3:c9:df:a5:5e:19:3c:85:
49:96:8a:cb:c0:a7:3e:f2:97:b9:61:a5:b6:82:53:6f:9c:5c:
01:51:f8:93:6a:75:c6:cb:ba:4c:99:90:bf:bc:d7:bf:59:11:
57:91:79:e4:b0:1c:a7:86:92:3e:cf:6e:e7:99:e4:fb:15:c0:
f5:78:ac:44:d9:3c:a5:89:d8:72:47:f0:eb:83:33:31:60:9f:
b2:95:c2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:30 2024 by rpki-client on console-fra.rpki-client.org