Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QEka_hoirh8Dkd_jVjLkWIYzfbk.roa
File: QEka_hoirh8Dkd_jVjLkWIYzfbk.roa (raw, json)
Hash identifier: 4XlGmjGfGjZRBfwJaOksZS3x3n7NA1KdDKzMAfL2xtg=
Subject key identifier: 40:49:1A:FE:1A:22:AE:1F:03:91:DF:E3:56:32:E4:58:86:33:7D:B9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD3FDC9379C673C42473CF6899DACF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QEka_hoirh8Dkd_jVjLkWIYzfbk.roa
Signing time: Tue 02 Jan 2024 10:34:32 +0000
ROA not before: Tue 02 Jan 2024 10:34:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212121
IP address blocks: 2a0e:b107:1130::/48 maxlen: 48
2a0e:b107:1130::/44 maxlen: 48
2a0e:b107:1132::/48 maxlen: 48
2a0e:b107:1131::/48 maxlen: 48
2a0e:b107:113e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:3f:dc:93:79:c6:73:c4:24:73:cf:68:99:da:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40491afe1a22ae1f0391dfe35632e45886337db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7b:03:2c:3e:bf:40:51:9f:fc:da:e6:01:bc:
ab:e7:8d:ae:9f:58:de:5b:db:71:2d:fc:44:86:2a:
cf:39:fd:ef:c1:22:78:ac:18:cf:7b:b6:b1:3c:e1:
0e:3b:58:fe:a5:f1:53:e1:59:7e:ce:3b:3d:06:ad:
8b:ba:be:b5:c0:99:57:74:0a:56:9b:62:14:cd:95:
16:b1:ad:7f:15:13:09:27:2b:c9:3a:a7:53:12:f9:
be:11:fd:89:08:a4:9a:41:f0:32:0d:fe:72:3e:a6:
83:54:af:83:9e:1a:60:6b:73:43:9b:7d:63:69:d1:
f1:4d:01:27:99:1e:73:68:41:e3:8f:aa:2c:8f:3a:
00:fc:82:22:78:0e:fe:e7:65:67:80:71:ac:8f:cf:
f3:6e:a1:92:ab:d2:22:06:2a:4c:76:69:a3:a1:78:
78:80:50:6c:58:c9:6e:37:07:9b:97:ea:83:c3:08:
c7:7c:cf:5b:09:27:e8:1a:f8:18:31:c7:d1:64:36:
13:9e:56:10:a3:75:81:13:7b:22:98:31:fa:52:e5:
51:a0:c1:2b:e0:c9:60:66:15:1d:ba:0f:4e:58:0d:
6a:11:94:c4:30:47:d8:af:c0:e3:22:ba:71:a9:19:
a5:f5:a3:48:c0:d5:1a:ec:67:b6:8e:3e:83:cb:fc:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:49:1A:FE:1A:22:AE:1F:03:91:DF:E3:56:32:E4:58:86:33:7D:B9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QEka_hoirh8Dkd_jVjLkWIYzfbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1130::/44
Signature Algorithm: sha256WithRSAEncryption
6b:cb:09:f9:e7:c4:4a:5e:43:57:77:ca:6b:54:16:de:62:c8:
c9:cd:f3:9d:ee:9e:45:0e:fc:65:3d:4d:04:27:86:1d:2e:58:
67:a2:10:4d:7e:9d:92:c2:77:79:f0:25:a9:d5:d3:dc:93:22:
e7:98:56:28:c6:fd:69:55:74:04:eb:8d:b7:ee:3d:1b:a2:99:
c3:60:da:2d:05:1b:69:72:5c:95:46:f5:11:66:67:15:26:ab:
e4:15:49:a2:f4:4d:f2:6c:05:34:31:15:b6:6e:1e:2e:1c:ee:
2f:81:10:01:49:a1:46:7e:9d:d7:21:67:de:53:99:34:40:55:
5e:74:eb:1c:37:01:df:f1:b5:50:09:98:37:f2:4b:f8:f2:36:
1c:19:21:42:6f:a6:63:c9:c3:f1:d0:ac:bc:bb:9f:42:7d:7c:
09:6c:32:b0:22:c5:8b:af:96:88:00:3b:e7:26:d8:ae:a8:a5:
1d:e0:d1:e0:97:bf:fe:6a:0f:81:4e:5d:68:8c:0a:36:58:4a:
36:8d:10:94:ca:42:5d:05:cc:a2:0d:18:23:4a:d5:64:ac:95:
45:44:ad:1b:d3:86:b9:24:24:55:d3:6f:61:8a:e1:a6:9e:3f:
1c:6e:3c:e7:0c:ca:ea:37:a9:fa:e5:66:7b:21:ab:fe:54:28:
27:77:cd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:33 2024 by rpki-client on console-fra.rpki-client.org