Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qod3AQ-oUg-UQpq3c-RTOp1bO6w.roa
File: Qod3AQ-oUg-UQpq3c-RTOp1bO6w.roa (raw, json)
Hash identifier: ftJZkofFcqUK5SYT7H1wxemGrRe8KmCitTi95Fpab7o=
Subject key identifier: 42:87:77:01:0F:A8:52:0F:94:42:9A:B7:73:E4:53:3A:9D:5B:3B:AC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCD50F97E2FCCCDA915D316778379B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qod3AQ-oUg-UQpq3c-RTOp1bO6w.roa
Signing time: Tue 02 Jan 2024 10:34:04 +0000
ROA not before: Tue 02 Jan 2024 10:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58015
IP address blocks: 2a0e:b107:11d0::/47 maxlen: 48
2a0e:b107:11d2::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d5:0f:97:e2:fc:cc:da:91:5d:31:67:78:37:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=428777010fa8520f94429ab773e4533a9d5b3bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:73:ce:8f:21:92:4a:12:bf:11:41:cd:c8:
a3:9a:17:71:6a:35:b1:8a:1a:dc:94:b1:25:fd:45:
eb:d4:3c:3c:6b:ad:d0:97:4c:9f:1f:2e:c7:2f:7a:
4e:4b:c8:39:55:0a:7d:b5:7a:ff:e4:5e:a5:5f:ee:
f1:0c:70:a3:1c:c9:d4:b6:5c:0c:7e:d9:47:9c:a8:
5e:f1:c1:a6:b8:e4:01:86:89:5a:b2:d3:a1:13:51:
b9:04:8e:31:14:59:1d:05:52:1e:2d:a3:4a:f3:d9:
5c:25:59:e0:36:29:f5:d9:f4:15:c4:26:8f:5e:dc:
7d:b7:f3:dc:03:c1:59:ad:dc:40:d6:59:49:fc:66:
c1:bf:9e:ae:a3:13:1f:8a:c9:c3:1d:68:8a:f3:27:
3a:81:c7:77:43:73:9b:4f:c7:bc:83:0e:b3:21:83:
27:86:bc:a5:fd:0b:c6:ac:e6:a1:84:66:47:a8:fd:
45:a5:6a:5b:98:55:20:2b:14:81:95:a2:be:57:37:
9b:e0:94:25:e3:59:99:14:ae:a2:02:16:a3:e5:5f:
9e:3c:74:ae:b2:cf:5e:24:3e:cd:f4:2a:92:0a:a0:
ca:c8:74:3b:b7:ed:26:80:6a:2b:0c:be:b7:58:f5:
da:9d:96:ba:26:f6:d4:da:2e:89:c6:01:a2:5d:a7:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:87:77:01:0F:A8:52:0F:94:42:9A:B7:73:E4:53:3A:9D:5B:3B:AC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qod3AQ-oUg-UQpq3c-RTOp1bO6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:11d0::/46
Signature Algorithm: sha256WithRSAEncryption
05:d8:a4:6d:d3:27:76:3c:8f:b9:e7:e0:f4:87:5a:d9:9d:12:
0b:34:c9:86:13:6d:0f:a6:ba:ef:56:4e:2e:4b:a3:03:b5:af:
93:4c:fc:14:bc:39:a4:88:33:a3:2a:30:c5:89:09:71:d2:f1:
b5:56:9c:af:49:41:f1:23:46:8f:4e:b4:dd:7c:c1:d3:a2:97:
b4:39:f6:a8:77:5d:55:5b:9e:7c:c8:c6:ed:15:03:03:ef:3b:
77:40:65:fb:f4:fe:4c:b0:b8:c7:78:33:19:22:e4:d3:0f:ee:
06:dd:44:b1:dc:04:78:b8:3b:4e:87:ed:5a:38:9d:00:c6:f5:
28:c9:b4:94:b4:13:1f:d3:ac:f8:5b:95:93:57:82:13:02:56:
c0:f1:e2:71:b7:84:b2:79:bc:3f:de:57:af:a1:15:b8:bd:94:
af:3a:74:6c:2a:ef:fc:68:c5:bf:3d:b9:4b:74:fd:d1:d1:be:
c4:0e:4b:b0:cb:4d:16:46:37:d0:50:a5:a3:79:ae:7f:36:8d:
87:dd:86:ec:c8:b8:47:f4:d4:2c:d7:1d:6e:60:79:11:be:b4:
da:29:94:e6:cf:15:ce:ed:f4:a1:79:49:3e:dd:f9:4d:ae:6d:
65:0d:ae:53:96:70:65:67:5e:fb:7d:37:3a:0c:44:4c:99:a8:
1b:d2:6c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:39:04 2024 by rpki-client on console-fra.rpki-client.org