Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NvymZBxAAoPGGXtk1l7VPyXThTQ.roa
File: NvymZBxAAoPGGXtk1l7VPyXThTQ.roa (raw, json)
Hash identifier: 8yA3vspnUMB/9at3JS55/IU61/IiACJUQindQ4Fck2Y=
Subject key identifier: 36:FC:A6:64:1C:40:02:83:C6:19:7B:64:D6:5E:D5:3F:25:D3:85:34
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018E4BBC26C98F139B4F63772FC5E9B6AB1F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NvymZBxAAoPGGXtk1l7VPyXThTQ.roa
Signing time: Sun 17 Mar 2024 09:26:45 +0000
ROA not before: Sun 17 Mar 2024 09:26:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212703
IP address blocks: 2a10:2f00:14d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4b:bc:26:c9:8f:13:9b:4f:63:77:2f:c5:e9:b6:ab:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 17 09:26:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36fca6641c400283c6197b64d65ed53f25d38534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:31:fc:c2:5d:5d:e4:1c:8b:2c:3d:d3:4f:
e3:39:3e:90:a7:21:c7:36:a0:70:23:7b:0a:42:e4:
c8:4a:ee:bc:88:0d:b5:be:bb:cf:7f:9d:ce:c5:0c:
a5:3a:00:b8:06:44:7d:f6:49:02:3f:c2:51:01:11:
51:7e:81:d0:5a:b5:1e:6f:74:56:92:ae:0c:14:27:
59:9c:9d:55:4c:d7:2a:ba:ee:52:46:53:e4:74:82:
cb:84:4d:fb:95:80:c9:6a:53:c3:6e:bc:01:21:1c:
6b:86:a8:b0:9e:91:55:2e:96:99:c8:6f:a8:22:ed:
1e:6e:db:b4:2e:33:44:33:e8:27:00:16:32:ec:11:
79:5c:18:50:52:63:6f:37:cf:fa:70:21:0c:7b:9f:
db:b6:ef:6e:e0:84:c4:e3:bc:68:a0:bc:dc:6a:e6:
62:ff:29:dc:71:f6:f8:30:50:38:9a:90:cf:53:8c:
03:33:0a:19:c5:76:32:14:1f:4e:3f:a2:94:bd:9c:
48:4a:c9:4a:15:39:d4:2c:a9:dd:d0:fd:4c:4f:58:
eb:99:d0:d6:14:97:db:23:51:0e:68:14:ba:f3:2d:
8a:c2:1b:9e:cd:c7:9f:e8:8d:86:50:ab:82:e8:46:
b7:87:83:7b:d4:50:6a:e1:c1:7f:a8:40:67:49:3e:
ef:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FC:A6:64:1C:40:02:83:C6:19:7B:64:D6:5E:D5:3F:25:D3:85:34
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NvymZBxAAoPGGXtk1l7VPyXThTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:14d::/48
Signature Algorithm: sha256WithRSAEncryption
a0:94:85:fa:34:0c:bb:2a:73:34:cf:ab:af:33:0b:c7:04:db:
d1:2b:02:c1:e4:eb:8f:38:f1:dd:d2:60:a7:36:ee:dd:7f:19:
b7:79:6a:f4:3d:97:f3:0b:2d:96:d6:5b:a1:2e:98:22:b0:20:
03:c1:ce:d9:19:65:6f:69:f9:0e:e4:1f:14:ad:9d:4c:3f:2a:
e9:f7:8c:d6:3b:b5:f5:d5:2f:1e:50:bf:ab:19:2d:ad:62:6a:
fc:cb:7d:cb:e0:fc:32:a6:16:9f:a7:c3:23:1e:15:ab:71:66:
af:89:94:2f:99:59:ad:dd:2d:8e:89:d4:35:f7:76:7b:37:9d:
df:d6:42:5a:7a:8e:77:d4:40:4d:94:9e:20:f6:ea:e4:9e:2b:
b0:a4:d8:ea:bf:94:db:1e:21:52:8f:51:d2:24:84:a1:1e:54:
c0:44:78:bc:f1:c6:ab:2d:38:cf:fe:3b:37:38:89:66:3e:bb:
a6:a5:7c:0a:4b:a6:0e:ba:17:50:26:5d:2d:15:c4:aa:92:19:
53:51:85:d3:17:36:db:cb:cd:35:89:bc:05:19:ae:30:ee:de:
61:ca:ed:77:d8:40:19:cb:ed:e9:aa:72:fc:61:94:3b:21:8f:
03:65:00:da:c5:0f:ee:09:29:15:db:2d:6e:22:ec:ec:f3:e8:
19:a6:23:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:33 2024 by rpki-client on console-fra.rpki-client.org