Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KkaVVLm8Ds-DPQSJZqTMMk8GwuU.roa
File: KkaVVLm8Ds-DPQSJZqTMMk8GwuU.roa (raw, json)
Hash identifier: lAWPx+pD4uU6Qj+QRcjXaQ6LT159k4oah+lTz0y2PI4=
Subject key identifier: 2A:46:95:54:B9:BC:0E:CF:83:3D:04:89:66:A4:CC:32:4F:06:C2:E5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D7D80E7DD7399FBC11719697EDCB4B582
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KkaVVLm8Ds-DPQSJZqTMMk8GwuU.roa
Signing time: Tue 06 Feb 2024 08:20:16 +0000
ROA not before: Tue 06 Feb 2024 08:20:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215743
IP address blocks: 2a10:ccc7:ccc0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:80:e7:dd:73:99:fb:c1:17:19:69:7e:dc:b4:b5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 6 08:20:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a469554b9bc0ecf833d048966a4cc324f06c2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:18:4b:c1:25:c3:a3:f7:42:81:96:49:63:a2:
19:f8:23:35:7f:84:5d:48:e7:4f:ea:fe:a2:09:fa:
4d:73:97:12:5a:84:a4:25:44:4c:93:7f:73:47:6b:
aa:e8:d7:2c:80:b2:34:60:72:c5:43:6c:2e:56:83:
ca:b9:4f:33:6a:f1:2f:fb:65:40:83:04:f2:6d:d9:
45:36:4b:a0:e0:63:16:45:9b:67:8a:ef:79:71:af:
6a:6d:b6:03:9d:b6:b8:c1:05:31:4a:3c:79:64:fc:
e7:24:fe:6b:e9:0b:f7:60:33:6f:39:de:90:22:16:
25:5c:b6:97:92:72:27:20:51:a4:f9:d7:42:89:29:
f5:e6:26:ee:ac:47:68:f4:e0:f1:d2:a7:12:f3:9e:
c6:9f:68:e7:97:f6:a4:c1:eb:ac:dc:74:9c:8a:6b:
45:46:a5:bc:bd:0e:7c:13:42:f5:2c:1d:b3:5a:36:
f8:4e:fd:e3:dd:ed:1d:05:c5:7c:16:a4:2d:cb:dd:
98:55:a4:9e:80:7d:b0:f3:37:fd:5c:73:69:6e:0f:
01:84:45:bd:04:f9:a5:f6:5f:f5:d4:f6:52:93:de:
c8:91:30:2e:9a:18:cf:a3:28:96:3e:6e:2d:a3:0e:
c7:02:da:40:58:22:4b:c8:34:99:db:42:a4:05:fe:
75:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:46:95:54:B9:BC:0E:CF:83:3D:04:89:66:A4:CC:32:4F:06:C2:E5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KkaVVLm8Ds-DPQSJZqTMMk8GwuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc7:ccc0::/44
Signature Algorithm: sha256WithRSAEncryption
55:35:14:c8:b2:fb:27:92:67:20:39:a6:50:1f:ff:1f:3f:dd:
06:44:56:cf:66:1e:6c:e7:3b:1f:9f:ca:b3:ba:8b:d4:1a:fa:
37:be:46:7f:9f:17:c6:17:16:41:7c:64:b3:4c:61:fe:fc:01:
13:a7:e9:ad:ec:71:d4:a2:52:f2:16:33:6a:9f:86:69:3d:85:
82:8d:e9:f1:24:4b:44:f8:35:b4:50:65:b5:fe:ba:c9:22:ff:
16:f5:e1:a2:b3:5b:c1:76:6b:7c:a4:5b:59:6e:66:7a:ad:6d:
c0:76:96:3c:09:f0:5b:97:d8:ad:21:81:2a:5c:07:80:1c:ed:
5b:05:19:69:33:9e:6c:05:a0:d5:5b:4e:07:68:13:23:20:88:
b6:4c:58:db:66:9f:4d:84:d2:ea:88:d5:e7:ac:15:7a:8f:13:
21:34:14:63:2d:b5:68:78:94:83:33:44:57:49:cd:89:22:8c:
6f:a8:72:16:fd:60:97:58:9d:38:2d:93:1c:dc:35:f5:0c:c1:
60:40:a5:7c:83:5b:bb:20:2c:84:4c:e0:e5:64:0c:c5:a7:07:
3a:83:a7:13:63:4d:de:94:a0:1c:cc:7e:ef:d5:a4:e5:16:96:
eb:f0:aa:1f:c3:9c:8b:10:61:bd:8e:bd:58:85:88:da:1a:a0:
ea:0e:9c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:33:16 2024 by rpki-client on console-ams.rpki-client.org