Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GcBfXmkOuk8qWcFTdm6CtY03iIs.roa
File: GcBfXmkOuk8qWcFTdm6CtY03iIs.roa (raw, json)
Hash identifier: KB8ftmnMaqJZ1ksWIBcCIT71svoi+SgmFEYONdlPqok=
Subject key identifier: 19:C0:5F:5E:69:0E:BA:4F:2A:59:C1:53:76:6E:82:B5:8D:37:88:8B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCCD45D352886C9BF05FFF237453B7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GcBfXmkOuk8qWcFTdm6CtY03iIs.roa
Signing time: Tue 02 Jan 2024 10:34:02 +0000
ROA not before: Tue 02 Jan 2024 10:34:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47687
IP address blocks: 2a10:2f01:330::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:cd:45:d3:52:88:6c:9b:f0:5f:ff:23:74:53:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19c05f5e690eba4f2a59c153766e82b58d37888b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:37:81:72:6e:45:ef:89:c2:63:95:ec:87:
73:ba:3a:c9:8b:90:86:01:69:c5:e5:00:fd:e7:ed:
10:1b:25:04:45:e8:7e:6f:9a:21:b5:b7:4a:c9:f5:
02:f9:2e:79:03:13:35:3b:bf:58:bd:6d:19:c4:90:
0c:05:5d:8e:8a:75:d4:ab:b2:d7:00:56:e3:13:e7:
e5:2a:b4:db:9d:f5:37:a4:18:f1:3f:12:09:7a:41:
7c:b0:2a:33:99:05:f9:5f:51:d5:4b:c2:e4:ec:c8:
fb:4f:78:6b:dc:c8:e3:a9:f0:cc:ee:d2:11:3a:32:
c3:88:3d:18:97:a6:9f:72:39:1e:ab:f2:22:16:5a:
12:7d:64:72:0c:99:86:ad:72:d4:38:93:da:73:b8:
d4:02:57:16:35:ba:58:14:0f:e0:dd:e7:18:64:74:
80:6c:59:82:bf:78:4b:2e:43:cb:12:89:b4:02:7f:
4e:dd:8f:50:f6:ec:51:60:68:e2:d9:85:af:2f:b9:
9d:46:da:2a:2d:de:17:53:00:e1:c7:66:d7:95:ed:
2f:43:4e:25:84:25:70:f5:2f:6c:ff:77:f3:f2:ee:
87:79:0d:92:d2:b7:fb:a5:32:f7:40:40:79:d5:18:
be:aa:94:99:f3:2d:14:85:26:4f:10:0c:a7:6c:ad:
bb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C0:5F:5E:69:0E:BA:4F:2A:59:C1:53:76:6E:82:B5:8D:37:88:8B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GcBfXmkOuk8qWcFTdm6CtY03iIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f01:330::/44
Signature Algorithm: sha256WithRSAEncryption
84:f1:4b:2e:b1:eb:37:1d:26:40:12:1a:6f:21:52:3a:47:da:
c4:93:39:05:5e:38:40:16:69:c4:e2:23:c5:ae:9c:f0:dc:b2:
04:b7:64:c1:f2:fd:84:90:22:3d:49:fe:5c:07:a2:73:db:fd:
41:e0:f6:3b:6f:7e:b6:0d:85:cc:d2:e1:df:be:5f:5b:5b:74:
59:3c:56:9b:98:9a:98:6a:49:d4:b2:80:a2:2e:55:2e:6a:9b:
ed:32:5c:05:17:1d:dc:bd:b7:6d:f7:96:50:7b:0b:db:74:78:
4e:53:dd:98:aa:19:d9:55:85:33:f9:56:c9:2e:94:22:cf:e5:
76:ad:af:1f:2a:b9:7a:79:02:63:cc:9c:52:f5:15:65:43:ff:
98:e0:86:6d:a4:8c:f1:e6:22:f3:4b:e8:d4:b2:dc:c6:c6:c9:
f6:33:37:43:ef:4c:71:bc:33:b0:af:98:6e:ea:d9:3a:7f:85:
18:36:52:85:22:98:75:0e:0d:ec:2e:b5:46:fa:93:9b:a2:1b:
0b:c0:bc:99:b4:20:13:74:b2:52:78:c9:2d:13:92:70:2a:11:
51:d4:d5:1d:8f:71:9e:1e:59:82:83:0f:78:f1:09:bb:1d:37:
bc:49:3f:cd:7d:52:6c:5a:9d:94:26:83:06:40:d6:3d:f4:13:
6f:e8:fd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:04 2024 by rpki-client on console-fra.rpki-client.org