Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GM7XwLiYceEDDaZXJHPMcs6hiTg.roa
File: GM7XwLiYceEDDaZXJHPMcs6hiTg.roa (raw, json)
Hash identifier: vsDFCRxj9PQ+xZEgtQPGGvBcetBTVifXoth/ZMULNy0=
Subject key identifier: 18:CE:D7:C0:B8:98:71:E1:03:0D:A6:57:24:73:CC:72:CE:A1:89:38
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01931AFA6FE8F17BDED33AD4F4F22D72EE9C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GM7XwLiYceEDDaZXJHPMcs6hiTg.roa
Signing time: Mon 11 Nov 2024 11:27:20 +0000
ROA not before: Mon 11 Nov 2024 11:27:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34927
IP address blocks: 2a06:de01:170::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:fa:6f:e8:f1:7b:de:d3:3a:d4:f4:f2:2d:72:ee:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 11 11:27:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18ced7c0b89871e1030da6572473cc72cea18938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:72:a6:f1:b7:d0:d7:5b:93:26:a6:db:ae:
ce:4e:69:0f:d7:98:c6:36:c3:56:4f:d1:4f:76:cb:
dd:8c:3b:1c:77:9d:61:0b:55:b6:d5:c6:9d:6e:61:
06:62:b7:f5:c7:a4:51:4c:c7:a4:19:d1:5c:ad:4e:
5f:01:ee:ec:b6:f5:77:36:1e:44:74:6d:97:1e:b1:
1f:4e:95:e6:54:4c:b1:f5:f7:cf:de:67:e9:2f:1a:
23:ba:70:00:5a:24:73:a3:9f:52:b5:85:75:60:e4:
6b:e9:3f:ed:47:27:a1:d1:0a:e6:aa:36:01:3f:40:
5f:95:96:56:ef:96:ee:f3:c4:a7:34:58:d0:82:af:
a1:e6:18:33:66:56:94:42:af:d9:fe:62:50:15:f7:
bf:66:39:34:be:df:79:f4:29:84:42:92:31:af:02:
7e:c9:59:b9:b8:74:d7:5e:4d:24:aa:28:9c:49:48:
2b:fa:c0:38:b2:1c:b1:dd:71:4b:d6:32:2a:b7:91:
a7:e9:f1:f6:40:3f:f6:a9:3f:45:6a:69:ef:4c:7f:
03:24:ce:61:2f:5a:f8:91:aa:d6:91:18:31:cd:bd:
28:9e:c5:5a:30:a0:9c:d1:90:50:24:17:ad:19:e1:
7a:a2:c9:8f:c5:17:7b:43:c7:40:c4:2f:5c:2a:66:
58:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CE:D7:C0:B8:98:71:E1:03:0D:A6:57:24:73:CC:72:CE:A1:89:38
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GM7XwLiYceEDDaZXJHPMcs6hiTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:170::/44
Signature Algorithm: sha256WithRSAEncryption
3d:1f:88:ba:32:83:0a:4a:0a:0d:92:30:ff:46:83:ee:c2:e4:
58:3f:78:54:fb:f4:21:fd:8f:34:c2:53:2c:01:04:dc:12:2f:
bb:2e:09:7d:d5:00:f0:61:a0:c4:e6:ec:20:a9:8c:96:ef:00:
62:0b:3e:33:e2:1a:58:42:fc:93:91:89:87:45:d4:0e:a0:c7:
ac:eb:c8:f9:4a:f3:db:44:b8:50:a1:ca:06:5e:a8:72:f9:fd:
e4:d0:d0:41:d2:97:4f:ed:90:85:e5:79:97:6a:eb:27:38:7e:
d4:1c:75:70:67:1f:8e:8b:51:b0:d2:a2:23:2f:97:7e:b8:b9:
d9:05:14:84:9a:72:6f:0e:c2:b1:b8:39:32:a7:ef:4a:1b:32:
df:55:31:fb:08:19:8a:a7:61:23:ce:10:73:cf:3d:66:d3:8b:
a7:bd:31:28:36:d9:dc:d4:05:1f:5b:d7:79:63:df:f7:6e:9c:
44:32:94:5c:a0:29:2a:19:26:3c:d1:9f:81:19:a4:80:c9:10:
13:17:72:00:13:65:86:a0:17:86:cc:03:9b:29:75:dd:58:b0:
76:e6:2e:7b:cc:8d:c6:86:54:c8:a6:a8:ca:1a:b2:5d:0f:79:
17:b5:81:0c:4f:10:b9:e1:30:81:4a:30:27:28:ba:c3:cd:e4:
4e:30:6a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:30 2024 by rpki-client on console-fra.rpki-client.org