Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JFIIHxZnee48qoWdTqAjrZRLx0g.roa
File: JFIIHxZnee48qoWdTqAjrZRLx0g.roa (raw, json)
Hash identifier: hopT3NrKl7sei3nrZowUxE38Bue/YR9ofrVR+vxkqyU=
Subject key identifier: 24:52:08:1F:16:67:79:EE:3C:AA:85:9D:4E:A0:23:AD:94:4B:C7:48
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD41BC7B64AED8039AE4948D02323D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JFIIHxZnee48qoWdTqAjrZRLx0g.roa
Signing time: Tue 02 Jan 2024 10:34:32 +0000
ROA not before: Tue 02 Jan 2024 10:34:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212194
IP address blocks: 2a10:2f00:15f::/48 maxlen: 48
2a10:ccc7:7770::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:41:bc:7b:64:ae:d8:03:9a:e4:94:8d:02:32:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2452081f166779ee3caa859d4ea023ad944bc748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:b6:1c:20:a8:97:b5:f3:d0:93:34:a5:a9:
bd:33:9e:54:e2:a8:df:db:20:3a:bb:1f:63:e9:d9:
44:ba:00:af:4c:a2:f0:9e:cb:a0:f0:ab:d6:e9:e5:
bb:6f:f1:bc:08:37:7c:42:56:b2:bc:c4:86:a9:27:
75:84:24:73:5e:1b:61:a0:c7:3d:a0:42:74:40:7b:
0f:d5:da:3e:6b:4b:b1:47:62:fa:b0:1e:94:14:88:
00:45:70:b8:7c:23:34:30:b2:64:cc:41:af:f7:f2:
ba:f9:b6:ad:ef:83:fe:de:26:d0:9c:33:2e:f2:f5:
01:91:f4:46:47:2f:f7:4a:3f:ba:64:8e:cc:75:44:
4e:2a:a0:c7:09:03:dd:43:f1:b5:51:ae:3c:f8:97:
67:94:b5:d2:5d:41:fb:e3:41:d8:e5:2b:7c:e5:e5:
34:87:72:d8:a2:f2:98:d4:fc:d3:96:00:ae:40:1e:
a9:e7:e9:6c:97:fa:04:f9:88:2c:10:b9:38:95:bc:
17:e6:5c:67:bb:fe:72:d2:69:6a:c7:eb:90:cf:2f:
12:fa:b0:7d:90:91:43:de:9b:60:13:2a:84:79:a8:
5d:5f:fc:44:6c:9a:a4:25:16:0c:fe:76:34:0b:ea:
aa:69:93:44:85:4a:91:1a:3b:41:35:5b:79:06:ac:
56:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:52:08:1F:16:67:79:EE:3C:AA:85:9D:4E:A0:23:AD:94:4B:C7:48
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JFIIHxZnee48qoWdTqAjrZRLx0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:15f::/48
2a10:ccc7:7770::/44
Signature Algorithm: sha256WithRSAEncryption
60:1b:6f:1a:0a:44:47:5d:92:16:c1:a8:65:b2:d5:b9:cf:bd:
ad:39:ff:6a:c6:55:10:79:fa:ed:35:c9:bf:c9:ac:3b:19:47:
fa:7f:48:2e:94:d7:68:18:a1:30:aa:36:bb:d9:ae:22:6b:0b:
63:30:33:92:2a:24:8b:69:92:01:6d:dc:c0:6c:94:d2:4d:92:
8f:f6:79:e7:9c:75:0f:33:e3:a3:36:52:22:ca:4f:ea:da:77:
c4:ca:6c:b2:b6:e9:6d:5e:76:03:60:64:5b:a5:a8:bb:cc:f9:
b1:32:75:4e:e9:61:29:11:7f:6d:54:60:52:d4:ce:f9:c1:f0:
a0:6f:35:29:8e:b1:03:1f:6c:24:ec:01:46:8a:f6:bc:c3:62:
ca:81:ac:8a:62:10:d2:ad:4d:9b:8f:cc:7c:62:8d:66:45:10:
46:eb:65:79:7f:44:c7:64:7a:4b:3d:ba:f2:a8:6b:0c:3d:42:
93:d3:2a:fe:14:c0:3e:43:f7:6f:c2:d5:0a:b2:99:61:65:e1:
7e:45:97:44:64:5e:45:8e:a5:fb:82:86:30:97:8c:4a:8a:04:
e9:26:83:4f:4a:3d:36:23:68:8c:bc:43:5d:81:a6:e0:52:83:
f0:05:b9:c8:a5:0c:fd:eb:2c:d3:32:1e:e4:18:73:0c:75:1f:
a4:b4:12:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:33:16 2024 by rpki-client on console-ams.rpki-client.org