Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QxLGyWRkDGAMOgFlS668IzaSzgo.roa
File: QxLGyWRkDGAMOgFlS668IzaSzgo.roa (raw, json)
Hash identifier: LCgZ/gj1Ej3lGkwOhzivt/8Pfvk0yq9o6qnElLZswHQ=
Subject key identifier: 43:12:C6:C9:64:64:0C:60:0C:3A:01:65:4B:AE:BC:23:36:92:CE:0A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0191EF69BB0A4948545694CF9AAC912D854E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QxLGyWRkDGAMOgFlS668IzaSzgo.roa
Signing time: Sat 14 Sep 2024 07:22:49 +0000
ROA not before: Sat 14 Sep 2024 07:22:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58336
IP address blocks: 2a0e:97c0:550::/44 maxlen: 48
2a0e:b107:16b0::/44 maxlen: 48
2a10:cc44:100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ef:69:bb:0a:49:48:54:56:94:cf:9a:ac:91:2d:85:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:22:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4312c6c964640c600c3a01654baebc233692ce0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:af:7b:65:a3:ee:95:f8:26:31:34:b5:5f:e1:
57:45:92:0a:64:16:b5:61:82:91:c0:b7:9f:13:84:
48:20:91:b7:e4:5d:a1:25:62:1b:32:ff:8f:58:db:
81:40:7e:db:1a:63:d1:ef:b6:d7:11:13:df:ce:e4:
25:80:93:a5:7f:be:b4:48:ac:44:90:a1:a0:44:a0:
c8:a3:11:b9:83:1e:e0:6f:de:2e:67:28:86:66:30:
eb:63:05:71:31:e6:5f:44:dc:92:76:0b:ad:a1:d5:
4d:b9:51:86:40:46:58:a3:5b:2e:59:b0:ad:b1:4c:
6b:1d:5c:02:9d:7c:63:c2:43:73:7f:56:7d:7c:84:
f7:da:58:8b:80:dd:55:58:ee:ad:93:73:65:da:75:
df:cd:ce:1d:f1:06:33:93:21:4d:57:d0:88:f0:4f:
ec:fc:e5:11:12:e6:59:c1:29:32:c3:37:82:ce:81:
a2:99:2d:aa:cb:d9:9c:55:a4:88:5d:e8:ab:50:60:
36:fa:fe:b0:98:63:e7:05:96:d4:c3:b4:5d:e2:bf:
37:89:51:08:33:40:1f:7d:fa:3c:81:74:79:ec:af:
47:ee:0c:6d:1d:c5:7d:ca:d9:47:4a:cd:42:28:9a:
3d:49:0e:6c:35:8b:8c:a0:a5:84:75:89:2a:57:41:
a7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:12:C6:C9:64:64:0C:60:0C:3A:01:65:4B:AE:BC:23:36:92:CE:0A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QxLGyWRkDGAMOgFlS668IzaSzgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:550::/44
2a0e:b107:16b0::/44
2a10:cc44:100::/44
Signature Algorithm: sha256WithRSAEncryption
4b:f5:9d:6e:60:be:ff:74:5d:63:57:cf:5a:ec:40:91:e5:48:
cf:a2:6a:11:cf:42:fa:59:04:8a:15:96:5e:10:3b:66:ac:d9:
33:0c:07:f1:74:85:55:db:d1:54:45:3f:e8:5e:ab:c7:46:e5:
16:50:87:a9:10:e5:9c:f7:3c:a1:e4:19:d1:15:80:30:85:f9:
99:46:b9:db:68:43:14:f8:9e:ed:21:64:72:68:02:81:27:29:
f8:f5:bf:97:02:51:1a:f6:2b:ce:b7:ca:36:02:58:11:f1:93:
65:3c:7d:35:13:a4:bc:14:60:79:fd:a7:ba:47:29:49:9f:35:
96:7d:0a:38:71:81:f5:db:b9:d7:c2:71:c0:f1:18:23:ab:2e:
17:6f:1b:db:a8:33:f3:ce:6c:bf:75:e5:0d:6b:c3:b0:3e:e8:
34:e1:b0:99:7c:93:1d:9f:ce:98:9f:04:94:5b:d8:41:a5:02:
dc:9f:ff:9b:64:07:6a:a8:a0:2e:2a:e8:ca:72:8f:78:11:20:
17:65:7d:6b:09:2d:9d:c3:52:39:bc:09:80:99:e2:24:89:60:
ad:15:b8:21:33:97:31:12:10:2d:53:56:9f:01:05:4e:41:2e:
ba:1c:eb:a3:17:a7:38:15:42:63:cc:6d:19:0a:c7:79:c0:38:
37:80:a2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:56 2024 by rpki-client on console-ams.rpki-client.org