Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TxQYyAFs_54gDxxVdBCDVKXdrwk.roa
File: TxQYyAFs_54gDxxVdBCDVKXdrwk.roa (raw, json)
Hash identifier: 0qmJ+L8qjK+QjQhYUmSweYc2ErCkwZxpsz9BSvdKVWE=
Subject key identifier: 4F:14:18:C8:01:6C:FF:9E:20:0F:1C:55:74:10:83:54:A5:DD:AF:09
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD4DE1AEB8237DAAC3B4A488820E36
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TxQYyAFs_54gDxxVdBCDVKXdrwk.roa
Signing time: Tue 02 Jan 2024 10:34:35 +0000
ROA not before: Tue 02 Jan 2024 10:34:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213286
IP address blocks: 2a10:2f00:131::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:4d:e1:ae:b8:23:7d:aa:c3:b4:a4:88:82:0e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f1418c8016cff9e200f1c5574108354a5ddaf09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:55:d3:7b:6e:1f:14:a8:75:44:c4:5a:bc:da:
bc:79:de:3b:be:9c:92:01:e7:1c:32:af:b2:78:f4:
60:a3:d5:fd:18:8d:63:ee:59:b4:a8:48:1b:3b:e1:
f2:25:0c:fe:44:ad:c1:25:14:3a:32:48:8c:08:40:
c3:b6:92:ff:90:1d:a3:00:db:f1:bf:e6:98:c8:6f:
07:67:22:fa:df:e8:0c:b6:ac:69:ea:22:ba:0b:7e:
c8:99:14:81:69:48:2d:a5:7e:33:68:a3:5e:7d:88:
79:ce:0b:03:b9:55:4a:5e:11:24:0b:58:a3:81:f4:
52:d2:c9:ee:e9:03:47:a0:80:5e:1a:dc:2d:e9:e9:
0a:38:6c:f9:47:04:da:c1:d3:d0:97:15:fc:d1:d3:
c3:d0:99:1a:8d:2e:cd:b3:30:d3:26:12:7e:88:62:
62:8d:e9:63:41:29:d5:34:ad:b0:4d:6c:30:d0:76:
ae:65:b1:db:91:de:7b:10:d1:28:d1:2f:64:aa:61:
b3:cb:85:a1:f3:aa:23:44:93:63:70:33:bc:04:8f:
49:e9:07:7c:42:37:f1:2a:34:67:04:45:75:ef:e2:
c9:0b:be:2a:35:d0:78:54:e0:65:b8:5e:54:5d:e9:
91:60:c3:da:3e:24:01:87:c2:22:f1:dd:b8:83:5c:
b8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:14:18:C8:01:6C:FF:9E:20:0F:1C:55:74:10:83:54:A5:DD:AF:09
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TxQYyAFs_54gDxxVdBCDVKXdrwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:131::/48
Signature Algorithm: sha256WithRSAEncryption
54:01:cf:0e:eb:de:dd:5a:d4:95:28:ea:a0:80:fd:1e:5e:fc:
e3:d0:8b:3d:56:80:d0:b1:b4:0d:52:2a:57:e3:52:40:cb:c6:
f9:00:f6:1e:c0:f9:53:78:37:a7:53:b8:49:a6:28:74:98:d9:
3b:32:09:88:82:49:fe:56:47:f4:ef:8a:15:be:ae:5d:bb:84:
62:44:c6:3a:fe:6f:1e:2d:b1:b6:73:84:31:d8:ea:29:d4:2a:
d0:f3:25:b6:99:56:e2:5f:a4:ad:5e:1a:e2:b5:dd:da:ea:10:
4b:8f:85:ca:0c:ff:fc:52:0f:24:3b:d4:66:46:9e:5d:05:12:
5b:3f:7d:3b:57:8a:46:28:df:fe:84:ae:e7:db:5f:b6:3a:50:
98:04:a9:4c:be:28:30:b8:79:f5:ef:4a:bd:c3:bb:20:1d:49:
3a:10:c1:ce:3d:8b:35:07:d3:3f:6e:1b:d4:ac:df:f7:cb:ce:
58:33:42:c8:a6:8b:54:15:a0:68:6b:b2:35:cf:df:92:e6:a9:
e3:8f:26:62:a5:76:f8:d7:71:dc:c4:03:59:01:88:e9:5d:8b:
de:0b:3a:64:43:37:ca:a1:70:08:04:40:0a:61:a3:17:ae:70:
4b:b6:29:38:fc:6a:e5:78:11:44:63:a1:8b:39:50:65:dc:17:
a3:c7:cd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:06:42 2024 by rpki-client on console-ams.rpki-client.org