Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JIw-jkw-vTFcyluEUSSOXqgQWZA.roa
File: JIw-jkw-vTFcyluEUSSOXqgQWZA.roa (raw, json)
Hash identifier: rCjMrpZ11nQ+mNS/Z/8GpMEIgAZHI6NFI9VqrmYsMX8=
Subject key identifier: 24:8C:3E:8E:4C:3E:BD:31:5C:CA:5B:84:51:24:8E:5E:A8:10:59:90
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCD0725781DC3A20465FD99295A0B9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JIw-jkw-vTFcyluEUSSOXqgQWZA.roa
Signing time: Tue 02 Jan 2024 10:34:03 +0000
ROA not before: Tue 02 Jan 2024 10:34:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49922
IP address blocks: 2a0e:97c0:b80::/44 maxlen: 48
2a10:cc44:100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d0:72:57:81:dc:3a:20:46:5f:d9:92:95:a0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=248c3e8e4c3ebd315cca5b8451248e5ea8105990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:95:00:05:c4:33:58:87:6d:d1:be:ee:99:76:
1f:27:59:01:3e:4b:fd:83:c4:cf:c2:6a:25:20:ea:
52:1c:43:f2:62:cb:c7:73:1d:02:7a:b8:7f:b9:cd:
4e:ae:a5:db:a0:f6:86:01:bc:fe:b4:43:88:ee:32:
e2:85:ca:04:e2:a6:e2:9b:d3:11:06:0f:ef:8d:de:
b9:96:64:e4:19:27:66:4c:70:79:be:98:62:de:39:
52:7a:d2:c8:78:25:44:bb:69:56:d6:3b:ae:bb:cd:
17:6a:ab:64:13:29:92:82:5c:90:69:5c:f5:08:57:
2a:2c:12:fc:6a:6d:41:c8:a6:59:f0:2f:26:6c:68:
7e:48:01:43:b4:e0:16:59:24:34:6d:4b:5f:1b:48:
f8:fb:47:a8:4e:7a:8e:f6:4d:08:10:80:80:6d:ed:
e9:74:d8:bc:7e:71:a4:a1:d9:5e:cc:10:b4:03:ab:
35:9f:aa:ec:d3:c1:de:a0:77:0e:8b:dc:bd:9a:76:
85:45:59:d2:f3:4f:ce:f7:82:c6:ef:d9:f2:65:c8:
d0:11:2d:e0:63:d7:df:43:03:c6:e0:7c:13:f3:2b:
ed:4a:69:30:e5:08:37:5e:e5:1f:e9:5c:ec:d4:56:
46:d8:43:67:bd:3b:ad:6a:2c:8c:fb:18:03:23:a4:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8C:3E:8E:4C:3E:BD:31:5C:CA:5B:84:51:24:8E:5E:A8:10:59:90
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JIw-jkw-vTFcyluEUSSOXqgQWZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b80::/44
2a10:cc44:100::/44
Signature Algorithm: sha256WithRSAEncryption
04:56:78:e4:3b:fc:b0:f8:a8:38:8f:d1:30:63:48:8f:c6:d7:
92:be:ce:ff:17:7a:c9:4b:5c:ba:4a:84:b0:ca:07:df:d2:74:
90:65:1f:02:74:a6:42:6d:b2:23:33:d4:a5:69:6f:4d:58:d8:
cd:cc:18:86:bd:2e:0d:f7:cd:5e:b8:d1:66:cf:7f:fd:86:eb:
ba:05:09:cf:e8:d7:3c:2c:2e:ae:39:a4:4f:0f:3d:a7:0d:2c:
b0:a3:98:4c:ce:27:0d:48:32:e3:88:1b:f2:4e:2d:dc:2c:85:
50:8c:c1:6e:29:fb:ae:aa:31:8f:06:80:33:89:ea:92:d2:33:
78:35:e6:a1:7f:ec:eb:31:7d:e8:45:9b:ee:77:5c:ca:da:fc:
c6:92:f7:9c:a8:b1:85:80:b9:f8:7a:8f:cd:7d:b0:d7:8a:47:
12:d7:58:01:e6:00:8b:54:09:5d:51:38:8b:b6:e2:bb:44:cf:
07:d5:12:aa:59:1a:dd:1f:1b:4d:86:e6:2a:2e:44:cb:d4:e2:
a1:86:00:b8:a9:db:61:73:37:ba:2d:4f:df:c3:ee:48:ba:de:
1f:db:83:98:65:dc:5e:c7:0f:0b:06:8f:a2:fd:7f:87:97:34:
a1:fe:28:6e:dd:95:8e:8c:63:ba:8f:b8:94:74:ea:4e:8e:4c:
43:df:54:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:33 2024 by rpki-client on console-fra.rpki-client.org