Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IQeYsWDB7v7j_qWluqeeKCBqsRk.roa
File: IQeYsWDB7v7j_qWluqeeKCBqsRk.roa (raw, json)
Hash identifier: t2vzJIUsZ3tIRwHKpCQf6r8lC9dqgXWnjlLjDAzOksk=
Subject key identifier: 21:07:98:B1:60:C1:EE:FE:E3:FE:A5:A5:BA:A7:9E:28:20:6A:B1:19
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD0B539DEF493E720E0E76F6C2E938
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IQeYsWDB7v7j_qWluqeeKCBqsRk.roa
Signing time: Tue 02 Jan 2024 10:34:18 +0000
ROA not before: Tue 02 Jan 2024 10:34:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204882
IP address blocks: 2a10:cc40:1b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:0b:53:9d:ef:49:3e:72:0e:0e:76:f6:c2:e9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=210798b160c1eefee3fea5a5baa79e28206ab119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6c:ee:0e:ec:63:2c:68:a1:aa:28:d7:1d:09:
bc:5b:26:99:18:97:15:6c:3b:b7:27:f5:ed:c6:52:
d9:30:f5:5f:28:33:ed:de:00:6d:6b:1d:ef:23:ce:
e1:de:5b:2e:89:01:60:a5:28:ef:b7:3f:8a:13:bc:
1d:22:c4:61:f3:fa:de:c6:d1:00:03:18:31:31:bf:
8e:94:ba:2d:45:57:53:ab:d7:95:d0:fa:2f:18:39:
fe:96:3d:6f:5a:6a:9f:c6:83:03:3d:45:4a:9c:ff:
12:53:40:77:de:ed:47:d3:2b:af:94:82:9c:bf:bd:
6b:c5:3f:6f:d1:eb:c4:bc:fc:d2:eb:ec:6b:3f:27:
b7:81:59:ed:f4:b7:c1:90:a5:f2:5f:6d:9c:f1:3d:
ee:a4:43:c9:82:09:b6:39:84:5c:06:0e:9f:9f:d3:
bb:b6:0e:b9:ec:43:5e:da:52:2d:96:75:8f:88:42:
1e:7b:0a:43:37:3b:3e:be:00:78:1b:e2:52:9e:f8:
d5:c4:24:30:db:86:fb:01:48:aa:32:4b:bd:46:a6:
df:c9:55:1b:c5:15:84:8b:4c:7d:31:ba:04:6c:bb:
66:9d:27:c8:57:c0:24:b2:26:8f:86:67:af:37:76:
26:97:2a:a9:1d:77:51:3f:d5:8f:77:e1:5c:fc:76:
25:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:07:98:B1:60:C1:EE:FE:E3:FE:A5:A5:BA:A7:9E:28:20:6A:B1:19
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IQeYsWDB7v7j_qWluqeeKCBqsRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:1b0::/44
Signature Algorithm: sha256WithRSAEncryption
4e:e6:65:78:3c:8a:0b:4b:d9:ff:8b:9b:c9:68:3a:01:2e:62:
c1:e8:1e:92:6f:8f:98:d7:5c:0e:f6:04:63:be:e3:89:ef:ea:
94:5f:8a:61:5f:ee:b9:57:f8:9e:89:31:a6:88:8b:6e:68:2e:
78:ab:89:82:1b:e3:e4:89:9b:f5:b8:bd:cd:89:74:de:3e:46:
3d:7a:cf:94:93:51:22:86:76:97:7d:67:99:8b:81:04:16:37:
12:36:1c:2f:59:e3:4a:36:ef:e3:8b:04:44:f1:fd:cc:e7:09:
c3:b8:ec:09:a4:c9:62:c7:48:12:a6:66:94:01:09:cf:50:b3:
1a:2d:41:01:6a:81:9d:4b:d0:88:f8:41:51:a4:de:ed:2a:ad:
66:91:b5:3a:a8:02:fd:a4:91:9a:cb:1d:7f:d9:b7:f8:5b:3e:
71:64:62:b8:ab:29:2b:9f:18:8e:f6:7b:0d:6c:85:2b:47:09:
02:73:8c:10:0a:80:c2:31:6d:96:e2:bf:82:dc:52:bc:94:5a:
ed:2e:52:14:ca:67:7f:54:71:a9:0c:b3:eb:32:e1:ff:5f:9b:
01:8b:98:f0:51:6e:23:03:a0:fb:7d:77:eb:2e:ba:53:db:a8:
c3:8a:28:4a:25:37:cb:d6:7b:2d:56:a6:8b:87:9f:f1:f0:22:
1d:a2:7f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:04 2024 by rpki-client on console-fra.rpki-client.org