Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QXIINyh_OnEM_GnwhpIa9k_R0SU.roa
File: QXIINyh_OnEM_GnwhpIa9k_R0SU.roa (raw, json)
Hash identifier: XcnYHTnXXVer+tLajWnfrC7rG+mzAQq6WXXFTkn71LA=
Subject key identifier: 41:72:08:37:28:7F:3A:71:0C:FC:69:F0:86:92:1A:F6:4F:D1:D1:25
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019314F9E6878115A72FC8CACD289F7D8DF8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QXIINyh_OnEM_GnwhpIa9k_R0SU.roa
Signing time: Sun 10 Nov 2024 07:29:01 +0000
ROA not before: Sun 10 Nov 2024 07:29:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2a0e:97c0:411::/48 maxlen: 48
2a0e:97c0:8e0::/48 maxlen: 48
2a0e:b107:19a0::/48 maxlen: 48
2a0e:b107:1a63::/48 maxlen: 48
2a0e:b107:1a64::/48 maxlen: 48
2a0e:b107:2880::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:14:f9:e6:87:81:15:a7:2f:c8:ca:cd:28:9f:7d:8d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 10 07:29:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41720837287f3a710cfc69f086921af64fd1d125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:e7:52:db:c4:4b:70:f2:25:45:65:73:e3:
6d:f7:76:f6:e4:3c:48:6b:b0:03:69:d0:fc:bf:b7:
6c:13:93:d0:b4:8b:66:6b:23:d9:d8:6f:9d:c0:14:
67:3f:c4:97:d0:a8:34:9a:73:43:90:f3:fa:c0:f3:
f6:e0:1e:0c:33:37:96:4d:ca:2f:14:1b:c9:24:20:
33:e9:52:14:51:de:2b:b9:55:ab:db:93:60:f3:8d:
8c:19:10:de:46:6f:a5:43:a4:ca:22:b6:59:7c:25:
28:53:83:2b:96:c0:3e:c6:b6:6f:d1:e6:95:7c:2c:
18:a2:f4:d4:37:be:29:3e:ce:21:79:7b:01:c0:c3:
6d:b6:97:f0:f2:61:b4:8e:49:04:25:70:e4:97:a4:
49:36:f5:9e:87:cd:ae:9d:89:ae:f9:83:e7:c8:cb:
99:61:fb:59:18:38:e5:3e:b4:7d:eb:ff:1c:8f:8e:
14:77:6f:7a:e3:f8:b3:ea:6b:94:ec:51:78:ad:89:
73:06:a3:ab:79:1f:3d:7a:5c:f4:49:e7:72:2c:b3:
91:fd:f8:a7:19:d4:e0:b4:d1:5b:9f:c1:05:da:79:
52:86:82:66:92:c6:17:6f:ca:9f:15:b4:07:6f:fd:
ea:4d:f9:8a:3b:52:e7:01:7d:16:c4:7a:1a:9e:cf:
e7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:72:08:37:28:7F:3A:71:0C:FC:69:F0:86:92:1A:F6:4F:D1:D1:25
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QXIINyh_OnEM_GnwhpIa9k_R0SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:411::/48
2a0e:97c0:8e0::/48
2a0e:b107:19a0::/48
2a0e:b107:1a63::-2a0e:b107:1a64:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2880::/46
Signature Algorithm: sha256WithRSAEncryption
53:28:d6:4a:a2:b8:04:2a:bf:2a:df:14:52:f8:9d:44:fb:09:
00:f6:d9:bb:b1:a8:c6:b2:31:48:26:b5:5c:fb:77:a2:fe:0b:
59:19:cc:9c:ce:dc:41:46:3f:8f:9d:71:3c:7a:0a:d2:ad:6a:
91:af:40:70:bb:bb:52:1f:c7:bc:64:5e:25:de:5c:a5:d7:c0:
ba:25:7c:f0:6a:fb:90:d8:d0:12:ed:13:df:ef:f1:03:eb:3f:
e1:29:d0:5a:84:fa:99:71:f1:b2:4c:e4:a1:51:89:06:f8:be:
26:3c:c2:a9:16:4d:e7:ab:fc:c5:d0:0a:0a:a9:27:4f:c9:54:
ea:01:15:a8:2e:4b:eb:cd:68:6f:b3:5b:25:77:35:7b:83:f1:
6f:7f:19:8b:6d:75:10:e4:41:9d:26:91:f1:1a:a0:0d:c7:8d:
89:55:c9:d7:48:3e:7c:25:91:17:81:38:c0:26:28:db:b0:0a:
39:41:29:c8:1c:b6:23:4b:95:1d:cf:ea:32:bf:3e:f3:7b:87:
3e:15:f1:08:c7:a4:d6:d1:a2:1b:02:b9:20:58:8c:9e:6d:89:
a1:f7:c9:23:9d:3c:ea:3e:7c:4b:7d:18:02:18:13:88:0d:40:
80:a1:cf:76:d7:be:31:31:0e:65:34:0e:b8:18:1e:11:22:66:
bb:d7:c2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:56 2024 by rpki-client on console-ams.rpki-client.org