Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LQqo5fyJABCTSMS2Av8Gv-jYUCg.roa
File: LQqo5fyJABCTSMS2Av8Gv-jYUCg.roa (raw, json)
Hash identifier: hYG93jmTDeL5PVA70KCn6gHdhSLXyQl0KsuTcghJxYA=
Subject key identifier: 2D:0A:A8:E5:FC:89:00:10:93:48:C4:B6:02:FF:06:BF:E8:D8:50:28
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018F18DE4FC1463F2A549AE6518402179901
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LQqo5fyJABCTSMS2Av8Gv-jYUCg.roa
Signing time: Fri 26 Apr 2024 05:26:13 +0000
ROA not before: Fri 26 Apr 2024 05:26:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198055
IP address blocks: 2a0e:b107:1d12::/48 maxlen: 48
2a0e:b107:28a8::/48 maxlen: 48
2a0e:b107:28a9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:18:de:4f:c1:46:3f:2a:54:9a:e6:51:84:02:17:99:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 26 05:26:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d0aa8e5fc8900109348c4b602ff06bfe8d85028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:a4:67:b6:a4:c0:ac:3d:38:55:f5:5c:eb:
75:f2:f6:be:09:03:a0:eb:32:99:3f:af:ac:d2:f7:
0a:41:e9:f7:be:d6:dc:5f:81:f5:69:53:6a:7e:9f:
dc:a5:c2:66:8a:fd:ad:47:34:3e:60:be:df:6a:cf:
dc:8e:dd:de:33:fc:eb:75:52:49:13:83:28:9a:f3:
be:64:6c:b9:75:ed:a0:48:b0:81:62:8b:13:52:bb:
a0:25:f9:c7:9b:cb:4e:ce:98:16:0a:f2:ea:ac:8d:
90:af:57:cc:7e:b1:61:34:b3:16:6f:96:90:0a:a2:
c0:65:37:39:30:d6:10:a2:bf:a6:24:c8:5c:02:22:
96:d2:c2:1a:5f:d9:31:40:41:a5:8c:33:bd:fa:4f:
c1:4a:68:22:d6:73:c4:2c:27:6e:9d:b6:6f:b4:88:
fc:76:b3:a6:94:1e:a0:8d:be:d4:f0:af:32:de:32:
31:75:58:86:18:96:05:5b:a3:95:a5:cf:de:03:17:
c8:9d:6b:4a:21:5f:7d:fc:ad:b3:cf:af:c3:4b:1d:
9f:94:64:53:5e:ae:fb:eb:6b:b2:b3:5f:9b:c0:95:
77:dd:47:ff:48:db:59:b6:42:f5:c1:15:3d:ee:06:
43:4d:12:06:4c:2d:ef:d4:df:e1:e0:97:d4:99:34:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0A:A8:E5:FC:89:00:10:93:48:C4:B6:02:FF:06:BF:E8:D8:50:28
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LQqo5fyJABCTSMS2Av8Gv-jYUCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1d12::/48
2a0e:b107:28a8::/47
Signature Algorithm: sha256WithRSAEncryption
33:e0:c3:69:24:02:5c:71:78:66:ea:97:03:77:2c:fc:af:e5:
56:98:2f:3e:9d:98:9b:3d:b7:85:07:62:dd:f2:7a:d2:ac:3a:
ae:c3:d8:34:76:fe:cd:c8:55:ff:83:07:e7:95:b0:7a:86:fb:
3f:89:bb:f5:2a:d4:e8:5d:32:67:dd:a2:55:7c:78:19:f5:30:
4c:13:b5:8a:5b:50:ea:99:f0:5d:01:59:fb:fb:2a:68:ee:c2:
d5:d9:a7:96:da:1a:53:98:3d:ff:4f:71:4f:31:d7:06:e5:06:
4c:15:6a:35:4b:8e:44:55:b1:54:a1:89:97:57:e9:c4:de:0d:
9d:ad:e9:d6:22:b8:a7:5f:80:87:3e:c0:f8:14:cd:e0:1a:81:
41:12:d8:f1:1d:03:fb:44:10:91:8f:0b:9c:fa:b2:5c:65:83:
96:6e:91:eb:a3:af:72:6e:c2:3b:af:50:7e:11:41:4f:94:2b:
28:b4:8b:52:34:02:50:f0:98:35:ae:f3:fe:55:83:a9:87:96:
ae:87:40:70:b5:06:02:e7:68:dc:29:55:06:4c:21:bb:c2:fe:
5b:f8:94:2a:34:81:ca:4c:10:d1:e0:62:c4:51:4b:58:ae:81:
b1:ee:98:e4:90:13:f4:55:6c:bf:c3:4d:e0:ee:c5:eb:8b:eb:
2e:23:f9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:17:23 2024 by rpki-client on console-ams.rpki-client.org