Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qj_7TF1KjZZUUZLAhQW1pZViy44.roa
File: Qj_7TF1KjZZUUZLAhQW1pZViy44.roa (raw, json)
Hash identifier: xQs3TwrE/w1NFW7cjQLkbXZXVuu4SoWSWLBv5CV5/is=
Subject key identifier: 42:3F:FB:4C:5D:4A:8D:96:54:51:92:C0:85:05:B5:A5:95:62:CB:8E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD1BDD0A06FF2C20ECE570A2E461A7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qj_7TF1KjZZUUZLAhQW1pZViy44.roa
Signing time: Tue 02 Jan 2024 10:34:23 +0000
ROA not before: Tue 02 Jan 2024 10:34:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209218
IP address blocks: 2a0e:b107:a0::/44 maxlen: 48
2a0e:b107:ab::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:1b:dd:0a:06:ff:2c:20:ec:e5:70:a2:e4:61:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=423ffb4c5d4a8d96545192c08505b5a59562cb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:65:7b:4c:a3:f7:fa:b5:8d:8f:4c:eb:b7:
24:fe:df:64:27:24:f6:d5:b4:2e:74:a8:74:82:cd:
86:c1:a8:36:41:bb:d2:d9:c2:1e:b1:e1:e8:0b:ee:
40:28:21:57:2a:94:e0:8a:28:f5:5b:e2:23:cc:16:
e7:c0:eb:93:95:c0:a8:fe:f4:4c:33:6f:ac:d7:13:
92:af:04:23:4c:fb:3a:a8:c9:00:8b:c9:c9:86:7d:
50:4d:67:12:21:63:0f:e1:c7:3a:8a:5d:c2:63:96:
f4:e8:e0:91:3c:7e:47:8f:5b:7a:db:57:a9:79:cc:
2e:0f:bc:b3:b1:30:67:86:60:b4:d5:b7:fb:a8:3a:
4e:fd:7c:b0:43:9b:67:bf:b9:53:b6:cb:34:ff:b6:
1f:3b:2f:e0:c2:30:00:6f:96:3f:ca:be:23:45:94:
b9:0b:fa:71:5d:4d:7f:d5:72:5a:f8:b7:47:10:06:
3e:be:a6:bb:3c:51:be:26:77:ff:fc:23:b7:ec:94:
36:d7:7b:44:4e:d8:38:dd:67:9d:a7:2e:fc:03:e0:
00:63:38:09:68:43:6f:0f:43:5a:46:f8:eb:75:2c:
f2:0b:c3:a2:12:11:95:77:ca:77:9b:73:f3:34:a6:
30:5a:2f:4f:81:08:0c:8e:67:b4:7a:26:72:11:32:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3F:FB:4C:5D:4A:8D:96:54:51:92:C0:85:05:B5:A5:95:62:CB:8E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qj_7TF1KjZZUUZLAhQW1pZViy44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:a0::/44
Signature Algorithm: sha256WithRSAEncryption
c9:aa:14:ec:5d:c2:d9:6a:da:fb:4d:30:b6:9f:9c:58:97:d1:
a1:bd:02:5e:36:97:02:dd:56:dd:db:77:9c:a2:bc:fd:2a:2c:
d9:88:17:11:70:0f:c3:5d:47:61:50:5b:d7:28:2d:d6:18:44:
5c:38:e0:a1:75:19:5d:59:f2:d0:92:e7:48:cc:7d:f4:6b:b7:
1e:77:ef:1a:1a:b8:5d:cf:c7:94:80:3f:09:d6:7f:3e:f2:b6:
71:54:cd:0e:c1:1d:d8:27:f3:55:b6:8f:2e:66:1a:33:54:a4:
c7:8e:7c:39:43:35:a1:86:72:0b:ff:fa:e4:0e:23:d3:38:7f:
79:a0:16:a2:b7:a2:1f:5f:32:b4:83:6f:83:b3:64:bb:d0:89:
33:18:74:25:df:e5:db:ce:f5:cf:3c:37:a0:11:96:63:37:f5:
36:8e:f0:a3:61:76:80:3d:24:75:bb:60:69:e6:30:d4:59:d3:
61:52:b0:37:88:c7:ae:30:49:9b:6f:f5:a6:a7:b7:26:92:bb:
46:e1:5b:9a:b4:af:23:2d:3c:32:dc:87:a6:06:88:bc:76:6d:
23:07:33:32:6e:a7:da:ab:37:d3:20:ea:72:bd:48:35:3a:bf:
5f:e7:40:50:3a:56:51:44:af:20:83:b4:44:3d:92:95:32:14:
1f:d2:02:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:34 2024 by rpki-client on console-fra.rpki-client.org