Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NGBhyLBtB3YfC6ua11-lYw1bwQo.roa
File: NGBhyLBtB3YfC6ua11-lYw1bwQo.roa (raw, json)
Hash identifier: AXJtQF+eb2cwet7GuA82fKa1lZFQWm8bfccM6ZR4zP0=
Subject key identifier: 34:60:61:C8:B0:6D:07:76:1F:0B:AB:9A:D7:5F:A5:63:0D:5B:C1:0A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD4F4BD7F8286DAD229D0C5FDCD306
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NGBhyLBtB3YfC6ua11-lYw1bwQo.roa
Signing time: Tue 02 Jan 2024 10:34:36 +0000
ROA not before: Tue 02 Jan 2024 10:34:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213346
IP address blocks: 2a10:2f00:129::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:4f:4b:d7:f8:28:6d:ad:22:9d:0c:5f:dc:d3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=346061c8b06d07761f0bab9ad75fa5630d5bc10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:fd:a0:9a:27:fe:5c:1c:15:a7:9d:14:7f:
0b:a3:92:01:a6:73:11:84:74:21:b1:35:f7:59:2d:
bb:64:4f:b9:d9:14:3e:72:ac:6a:bf:d4:de:e9:23:
07:75:37:b4:f9:ed:23:97:58:80:7d:54:b0:16:14:
74:37:f0:a7:5c:ad:ef:2f:70:20:f4:b9:66:7e:66:
14:6e:d3:7f:5e:ee:df:0f:01:25:8d:20:9f:7c:16:
10:e3:a5:c8:10:e5:5b:89:24:93:9f:26:28:04:0c:
2b:5b:3c:c2:cb:81:35:80:fb:1d:4f:d7:55:b8:e1:
d7:2c:9e:b2:43:66:66:a0:51:4a:36:9c:f9:78:5b:
8b:04:8d:f6:02:cd:25:16:40:5c:a8:6e:a4:49:62:
7a:19:99:ff:2c:d3:bb:9a:8a:75:4f:15:74:27:6c:
ad:51:2e:1f:36:0c:41:f5:80:e2:23:8b:33:05:ac:
f7:49:dc:bb:95:b0:ca:f3:02:60:35:9a:29:1d:7f:
97:95:66:02:0b:80:2d:de:3c:1c:72:99:37:85:62:
40:31:d1:3b:e0:d2:43:0d:83:ef:07:bf:13:72:45:
c6:2e:56:d0:9a:c2:6b:55:bb:09:5b:9f:66:1a:0f:
37:3a:ac:0c:49:53:a9:8f:d5:6a:4c:63:c0:48:80:
b6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:60:61:C8:B0:6D:07:76:1F:0B:AB:9A:D7:5F:A5:63:0D:5B:C1:0A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NGBhyLBtB3YfC6ua11-lYw1bwQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:129::/48
Signature Algorithm: sha256WithRSAEncryption
74:f6:ca:7e:c6:60:d5:95:e1:22:b8:78:3f:30:1f:57:92:5f:
d4:85:b6:93:92:e2:49:e1:dd:f1:1c:6d:4b:0d:3e:60:e4:a6:
87:a9:53:fc:6a:87:00:43:96:71:34:a2:71:15:44:18:30:31:
68:38:39:93:b0:2f:77:bd:c2:20:7a:f7:bf:39:01:ff:9c:6f:
2a:a9:40:5e:44:0f:3c:f4:14:84:fa:34:da:9f:39:e0:db:28:
6c:c1:87:be:7b:b9:70:3f:93:52:a6:f2:1f:a9:af:4c:12:3f:
60:52:45:37:7c:f9:ed:e0:55:5c:2c:dc:fc:d2:1e:d3:38:53:
59:bc:80:1e:a6:78:af:5a:d0:7b:e2:19:ab:dd:57:75:a6:13:
32:50:ed:43:61:a1:10:be:5a:61:6f:07:27:0a:d7:13:ac:25:
37:8f:23:1b:a9:e1:a8:81:cb:94:ef:29:77:df:91:42:53:e3:
c3:07:5e:c0:c9:c7:45:ca:97:13:1c:9c:70:5b:dc:70:0d:9b:
f0:cb:40:56:f7:86:ac:63:dc:93:f2:5b:32:cf:f7:3e:14:dc:
20:15:02:96:bf:84:46:8a:46:e9:04:93:92:5c:b4:b3:ca:25:
5d:d8:b7:42:4c:28:0a:83:ca:c8:e9:16:84:e3:1d:39:32:e0:
91:d5:14:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:17:51 2024 by rpki-client on console-ams.rpki-client.org