Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/J7XY8CSvaAqfuv8u8Sqb8LFFIno.roa
File: J7XY8CSvaAqfuv8u8Sqb8LFFIno.roa (raw, json)
Hash identifier: xl5T7GCnDRd3MaOMb5fBqa5AT5laSMIsWCgIbayiAyo=
Subject key identifier: 27:B5:D8:F0:24:AF:68:0A:9F:BA:FF:2E:F1:2A:9B:F0:B1:45:22:7A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0192ECC675236EB0F7606EFE18A177C309A1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/J7XY8CSvaAqfuv8u8Sqb8LFFIno.roa
Signing time: Sat 02 Nov 2024 12:08:01 +0000
ROA not before: Sat 02 Nov 2024 12:08:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213929
IP address blocks: 2a0e:97c0:330::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ec:c6:75:23:6e:b0:f7:60:6e:fe:18:a1:77:c3:09:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 2 12:08:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27b5d8f024af680a9fbaff2ef12a9bf0b145227a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:f3:7d:93:73:fb:0c:bb:1b:6a:20:64:6d:
56:89:66:0a:95:56:3f:0b:85:a8:f2:ce:57:65:22:
10:9a:ab:7d:a0:fd:4d:46:b1:37:96:86:e9:9f:85:
ea:72:91:96:b5:8b:08:d0:40:2a:32:0c:b7:e2:79:
74:b4:91:75:f4:c6:84:46:4f:87:10:6a:d5:a9:f7:
3b:8d:1a:6c:63:f1:98:a9:42:ce:95:69:1b:c8:eb:
74:4c:4c:28:9f:da:ba:a6:62:c0:b5:b3:26:b2:10:
99:d7:d6:9e:8a:2e:0c:fe:02:82:5c:b6:f9:af:e5:
e7:2c:c0:6f:45:01:a6:1c:1e:9e:43:f3:1d:42:7c:
ba:b8:cf:7d:90:94:57:ce:02:79:53:59:ad:f8:ba:
52:8a:62:9a:71:12:fb:c7:c7:25:c7:6f:d1:d9:e1:
c4:b1:13:c2:1f:31:1b:97:86:da:86:6f:64:8f:61:
de:53:27:25:fd:c4:64:28:ff:e5:0b:00:6f:fc:4d:
42:30:57:c7:c9:83:ea:ae:bf:a9:56:cb:41:79:36:
71:b8:80:fe:f6:4b:5a:db:75:c4:3e:3a:6e:11:c8:
27:6d:6a:db:ac:54:2c:3b:e1:25:56:f3:ec:f7:87:
bf:62:83:fe:a7:cd:6f:77:58:b9:2c:ca:14:5f:74:
e2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B5:D8:F0:24:AF:68:0A:9F:BA:FF:2E:F1:2A:9B:F0:B1:45:22:7A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/J7XY8CSvaAqfuv8u8Sqb8LFFIno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:330::/44
Signature Algorithm: sha256WithRSAEncryption
1d:7b:6d:31:3a:2e:ba:4a:77:a5:1b:06:ea:3b:72:81:79:5a:
22:bb:08:7a:81:d1:1d:c4:fd:0d:d5:9c:06:dd:6a:2e:a5:15:
eb:58:20:a5:9f:16:4f:17:1c:af:b4:c1:dd:54:fd:71:88:d2:
c7:da:4b:77:6a:5f:a6:eb:34:fe:c6:48:ea:31:36:96:69:d4:
34:9a:ab:12:64:00:85:55:22:94:dd:b6:f8:44:06:a6:69:28:
86:62:e1:b6:5b:9d:09:ce:c0:33:0e:3f:8f:2d:bd:e5:96:4c:
5e:af:3f:87:01:09:1d:67:83:57:c3:50:37:33:28:7c:f4:bb:
b1:70:87:24:db:90:db:65:0c:d0:90:94:dc:f4:02:04:a7:c6:
42:28:82:9e:0c:cb:64:30:e0:9d:1b:61:cb:c8:24:e6:af:a3:
b2:ac:3e:59:92:70:0a:6b:d2:90:6e:9d:70:ae:ec:6b:ea:2c:
b9:87:2a:4a:61:fb:b9:fb:51:e0:26:6a:a2:9a:81:73:f6:88:
c7:72:a2:c0:dc:15:a1:e9:9d:70:dd:23:12:f5:8d:16:3f:ad:
28:04:ac:2d:48:28:55:11:96:e5:e3:54:25:a8:9d:e8:5f:7b:
59:a3:e8:e8:eb:2f:1f:7f:ff:28:b9:9b:5a:8e:a7:86:9a:5c:
e9:e5:1b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:54 2024 by rpki-client on console-ams.rpki-client.org