Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MCE-eWImMn7o7n_58nvOwRSA-Qo.roa
File: MCE-eWImMn7o7n_58nvOwRSA-Qo.roa (raw, json)
Hash identifier: m5VDWFM5Rp4w1edc0FmWLRsFjHp6OkaqSlDFwJHhINo=
Subject key identifier: 30:21:3E:79:62:26:32:7E:E8:EE:7F:F9:F2:7B:CE:C1:14:80:F9:0A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CD4805231E8D364C4C331203BA8F212A5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MCE-eWImMn7o7n_58nvOwRSA-Qo.roa
Signing time: Thu 04 Jan 2024 12:43:48 +0000
ROA not before: Thu 04 Jan 2024 12:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215795
IP address blocks: 2a10:2f00:19f::/48 maxlen: 48
2a10:ccc3:cc30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d4:80:52:31:e8:d3:64:c4:c3:31:20:3b:a8:f2:12:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 4 12:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30213e796226327ee8ee7ff9f27bcec11480f90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:4b:c6:76:16:2f:28:49:f1:06:96:a0:82:
2a:40:2d:71:e7:45:20:03:0a:97:d0:41:72:5a:6c:
bf:ce:44:d6:24:f7:a7:1f:d0:0e:65:bd:2d:01:55:
8d:ac:20:0e:6e:61:70:39:54:80:87:ff:37:c0:74:
94:05:3d:03:d9:1e:d1:fd:ae:ea:fb:b4:82:c9:39:
a1:28:29:22:02:ab:6e:fd:91:8d:09:82:51:35:6f:
31:fe:21:9c:90:4a:0d:7f:0e:28:20:c7:dd:90:46:
bc:3c:5f:d9:da:a9:6b:84:b6:24:04:8b:69:cb:ce:
3f:e3:4d:04:ca:d8:78:1f:1d:62:cb:52:a3:4d:a0:
c1:19:fa:5b:16:d0:d6:69:8a:af:8f:0d:8d:51:81:
db:b0:1f:a4:b3:92:cc:45:d9:ce:d2:1a:6a:20:ff:
63:23:11:46:3f:ed:ab:28:47:8a:3e:f7:46:c6:03:
a5:66:5b:cd:9f:2c:2a:b8:e7:71:90:49:2b:aa:34:
71:ee:d6:6b:57:13:f8:9c:92:66:1b:ee:fe:5d:0a:
97:2d:27:45:89:c1:4d:f9:ae:e4:87:d7:d1:84:8a:
e9:fd:35:e0:da:69:9f:27:ce:e3:66:67:3f:63:31:
01:be:e2:8b:ca:01:6d:39:e7:0b:1d:71:be:a1:a5:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:21:3E:79:62:26:32:7E:E8:EE:7F:F9:F2:7B:CE:C1:14:80:F9:0A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MCE-eWImMn7o7n_58nvOwRSA-Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:19f::/48
2a10:ccc3:cc30::/44
Signature Algorithm: sha256WithRSAEncryption
99:2e:f8:24:6c:70:1e:f9:d1:04:97:3e:b0:05:a1:f6:64:30:
43:a5:5c:f7:31:ff:b0:03:86:de:c3:7d:ef:f3:51:eb:00:06:
a3:85:54:64:23:65:70:9b:f9:72:68:d3:18:07:98:10:81:6c:
3e:9e:56:cb:ab:14:8c:7b:dc:4e:bd:18:59:94:e0:ee:ce:b5:
cc:dc:58:34:5b:dc:23:dc:c5:b2:54:6c:d2:21:ca:48:6f:1e:
e2:20:4b:fc:b5:24:54:81:a3:d8:0f:09:ac:4e:2b:3d:07:84:
45:5b:ab:be:34:c1:84:63:98:a9:bb:1b:2c:fb:10:7e:d1:4d:
67:43:e6:88:21:54:bb:7b:69:43:35:db:b0:2f:5c:2c:a7:bf:
ed:b3:d9:4a:9f:a8:e2:24:8b:77:95:e5:21:12:0d:e8:23:b5:
a4:78:91:f6:2a:fd:40:2e:7e:be:3a:b2:5a:76:c9:3a:a9:6d:
f3:2c:92:64:c1:51:5f:58:0b:27:8c:b4:30:5c:bf:22:c1:5d:
89:da:38:e2:b1:42:6e:9b:dd:13:98:50:ff:80:21:5d:b5:08:
7f:5a:b7:9c:ed:d6:fc:38:88:4c:df:fb:ef:a8:ff:98:8a:00:
85:4f:cd:4a:e0:6f:b2:7f:89:27:e3:d5:a9:db:34:dc:fb:da:
93:5a:3d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:17:51 2024 by rpki-client on console-ams.rpki-client.org