Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RQ5mTEwq4euDJ9P2nblN-aJ50Hw.roa
File: RQ5mTEwq4euDJ9P2nblN-aJ50Hw.roa (raw, json)
Hash identifier: gnNy0wL4lAh6/hRJ+6hMdmzLku3GyO2IpCyN1/3JOeM=
Subject key identifier: 45:0E:66:4C:4C:2A:E1:EB:83:27:D3:F6:9D:B9:4D:F9:A2:79:D0:7C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCE733571493901EE8B2509A24E6BF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RQ5mTEwq4euDJ9P2nblN-aJ50Hw.roa
Signing time: Tue 02 Jan 2024 10:34:09 +0000
ROA not before: Tue 02 Jan 2024 10:34:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197762
IP address blocks: 2a06:de00:1330::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e7:33:57:14:93:90:1e:e8:b2:50:9a:24:e6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=450e664c4c2ae1eb8327d3f69db94df9a279d07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a9:a8:18:d8:b4:c7:82:3d:32:96:93:cb:0e:
ab:42:d7:19:a5:45:e2:e5:84:ef:42:e2:a8:53:11:
fc:36:be:3b:7c:05:ea:24:f5:20:22:28:e5:ac:10:
e3:e3:20:b6:39:69:97:6c:d9:81:c0:e1:4e:5f:e0:
98:a6:ba:b9:8e:53:04:9e:ea:34:e2:a3:53:81:3a:
ef:c4:b6:b2:94:98:3d:b1:d7:d6:6a:67:fc:c6:ca:
73:92:4f:64:5f:ae:43:ce:6f:a2:2f:c5:9b:d4:3b:
a1:c6:8e:ee:f5:15:40:c6:97:c8:16:ea:45:a0:d3:
23:5d:8d:88:67:2f:21:f6:85:8e:53:de:aa:16:44:
f2:e1:d0:b1:20:ff:ad:bf:85:76:6d:02:f3:f1:9f:
8e:a8:c3:6b:a8:22:80:34:46:d2:c4:9d:d3:91:9e:
22:14:c6:1c:9a:58:2b:b9:cc:88:bc:6b:44:43:53:
2a:75:20:b5:11:88:33:95:b4:e9:51:4e:75:03:ad:
82:a5:d4:bb:3b:a5:f5:16:f9:af:ea:02:58:8a:6f:
ec:1a:8f:e7:65:51:ee:fb:d9:24:d9:11:41:a1:ef:
50:fb:60:a1:6c:89:af:53:06:5b:39:ef:a1:8f:14:
db:d4:54:1f:16:a0:a3:79:26:71:34:ba:29:60:95:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0E:66:4C:4C:2A:E1:EB:83:27:D3:F6:9D:B9:4D:F9:A2:79:D0:7C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RQ5mTEwq4euDJ9P2nblN-aJ50Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:1330::/44
Signature Algorithm: sha256WithRSAEncryption
5b:b9:9e:fa:be:f2:98:96:2a:ce:08:2e:d8:13:95:3b:b3:dd:
45:e7:ee:aa:6b:77:55:98:df:d5:25:09:0a:1f:54:9c:ba:20:
b1:ab:35:8c:00:f1:4f:49:9f:06:9b:fe:55:83:2b:9e:f1:ac:
d9:36:f6:03:8e:9d:0f:74:b7:97:48:75:ad:fd:1e:b6:44:bf:
81:bc:2a:ba:e8:fd:cb:fe:f1:9b:81:91:c1:31:f5:66:11:e8:
ef:40:a7:01:73:af:3e:7f:c3:2b:14:b7:9d:c0:9c:f9:0d:71:
8b:af:c5:24:c2:cd:36:65:e4:af:4c:98:39:98:50:3f:33:6b:
84:96:2b:67:e7:66:e6:0c:a3:dc:22:d1:6f:5d:1f:33:fe:5b:
4f:11:9d:d8:aa:d7:3f:b4:71:98:d6:35:d8:9b:72:df:59:ca:
d5:04:3f:d5:01:d1:a8:f8:59:89:6a:a2:76:3d:44:e6:01:60:
a5:74:2c:e9:3a:4b:c2:c1:42:4b:ec:5b:f9:53:82:5d:cb:56:
5e:1b:a0:1e:74:53:82:37:dd:0f:89:14:7c:4e:0f:9e:8c:a9:
cd:ff:1f:11:d1:fc:ae:ac:6b:0f:79:f2:e7:44:28:d9:02:93:
46:5c:2c:c0:75:90:d6:4c:dd:ec:a7:17:7b:e9:43:1c:87:ab:
e5:25:a9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:07 2024 by rpki-client on console-fra.rpki-client.org