Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RuAgjSfpctU1VMeBAaH1O6K-7gw.roa
File: RuAgjSfpctU1VMeBAaH1O6K-7gw.roa (raw, json)
Hash identifier: 4THoZesRDzEXqcOkZp6lmzS08Ke+l6an9xHVi+Ypq9I=
Subject key identifier: 46:E0:20:8D:27:E9:72:D5:35:54:C7:81:01:A1:F5:3B:A2:BE:EE:0C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD1211D820998DB2B2801A050C2B3C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RuAgjSfpctU1VMeBAaH1O6K-7gw.roa
Signing time: Tue 02 Jan 2024 10:34:20 +0000
ROA not before: Tue 02 Jan 2024 10:34:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207252
IP address blocks: 2a0e:97c0:db0::/48 maxlen: 48
2a10:cc40:270::/44 maxlen: 48
2a10:cc40:270::/48 maxlen: 48
2a06:de00:400::/38 maxlen: 48
2a06:de00:400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:12:11:d8:20:99:8d:b2:b2:80:1a:05:0c:2b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46e0208d27e972d53554c78101a1f53ba2beee0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:15:e7:7b:f2:a7:32:9e:34:4c:fd:ed:04:
5c:a3:20:c2:e0:a2:70:e4:a9:5d:cc:4e:80:e5:a0:
28:df:61:a9:85:ca:82:5a:2e:5c:d1:2e:e7:99:b1:
5c:9c:25:d0:d7:a0:c8:c3:59:66:2f:3f:b5:a5:c2:
1a:f4:5b:39:d2:67:16:2e:13:93:dc:c8:ff:67:fc:
51:78:a0:6a:17:ce:2d:bb:76:23:5c:7f:3c:3e:86:
ad:21:e4:4b:a4:16:c3:f1:f1:1c:4c:7e:a1:9f:b4:
ff:2e:5d:f1:9c:99:ae:64:59:30:fd:7c:8e:ca:fc:
b3:31:1f:82:7b:3b:05:79:0a:12:75:25:1e:5f:eb:
03:5d:69:bb:d9:16:d7:88:ff:6d:cc:46:fe:b1:d1:
07:78:ec:b1:51:0d:9e:ef:78:1a:14:38:6d:32:7c:
ed:dd:5e:f5:32:10:2c:f3:b0:e1:0d:b7:71:ff:4f:
47:0c:23:4e:b4:47:92:44:1e:61:ca:17:a1:05:51:
2a:b0:43:08:8e:9f:71:51:86:65:59:cc:22:e3:3e:
a2:e1:20:e3:d3:95:9e:32:2f:6c:ad:11:07:0d:90:
84:28:5d:54:02:34:0c:32:c0:39:3d:30:f9:ca:71:
6e:b3:7c:67:8c:c2:42:3b:80:2e:e4:a4:92:2e:65:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E0:20:8D:27:E9:72:D5:35:54:C7:81:01:A1:F5:3B:A2:BE:EE:0C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RuAgjSfpctU1VMeBAaH1O6K-7gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:400::/38
2a0e:97c0:db0::/48
2a10:cc40:270::/44
Signature Algorithm: sha256WithRSAEncryption
91:7b:1e:ab:fa:c0:c1:76:4f:31:5f:fa:9c:ba:e2:67:1c:58:
b6:15:2f:11:31:7f:a2:d4:eb:e9:4f:ee:29:07:81:8c:00:9c:
27:4a:46:26:f6:ba:49:f0:1a:d3:24:2c:7d:f1:73:d6:6d:b4:
60:09:87:1a:bf:64:25:11:75:5b:8f:42:96:ce:f1:3f:cb:28:
b0:d9:5f:91:eb:e7:cc:c0:9c:fe:d1:13:75:f9:4d:64:17:8a:
c6:b2:e5:7e:31:ea:93:ce:7a:3e:4a:b8:57:18:6b:f3:88:5a:
44:1d:4f:54:e7:ec:62:c2:e4:e8:33:e4:64:73:77:8c:e4:7f:
e4:a3:44:cd:0c:91:da:de:c6:e0:c4:7b:31:16:a9:c1:4c:a4:
15:b3:1d:92:29:33:1e:b0:51:2e:b2:d6:5b:9d:30:f1:a4:46:
0a:bc:d5:74:c7:0f:9b:99:a8:0b:c7:68:fc:48:70:7b:f8:43:
2f:6b:60:d2:27:ab:d7:21:26:05:e1:86:51:9e:63:f3:f9:6a:
01:54:72:ee:37:3c:99:a7:66:9a:76:7b:05:8c:9f:7c:e9:03:
48:24:ae:ca:42:68:57:5e:04:9b:37:2c:44:8b:52:8f:fc:28:
d9:e3:f1:03:04:1e:2a:5d:4c:c6:5d:32:de:20:9c:e1:66:7f:
90:8d:0e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:33:16 2024 by rpki-client on console-ams.rpki-client.org