Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UN30qNTdmI1cZFLZ9BzlvBHapsM.roa
File: UN30qNTdmI1cZFLZ9BzlvBHapsM.roa (raw, json)
Hash identifier: U4zCzg72NsuFyQLBS9y5/vxMwvpX9KV/VB0jGWK7r0Q=
Subject key identifier: 50:DD:F4:A8:D4:DD:98:8D:5C:64:52:D9:F4:1C:E5:BC:11:DA:A6:C3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD139D64F2FA75E8C9F68AA7004786
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UN30qNTdmI1cZFLZ9BzlvBHapsM.roa
Signing time: Tue 02 Jan 2024 10:34:20 +0000
ROA not before: Tue 02 Jan 2024 10:34:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207550
IP address blocks: 2a10:2f00:111::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:13:9d:64:f2:fa:75:e8:c9:f6:8a:a7:00:47:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50ddf4a8d4dd988d5c6452d9f41ce5bc11daa6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:cf:f2:bb:a3:ac:74:5c:e0:d6:51:cd:3b:
87:19:5e:43:8b:af:99:3d:13:0b:7d:a5:9d:e4:a1:
5e:ad:d9:2e:7f:6c:a0:39:f3:82:04:d3:ca:10:2f:
2e:fd:c8:1d:99:b3:c3:0d:a8:7a:1a:49:82:aa:5d:
64:c7:e1:a6:10:4c:0f:b6:be:13:f9:4f:be:a7:99:
1a:3d:12:53:33:28:94:2b:fd:6b:fb:e0:43:c6:4e:
bd:6d:4c:f1:3a:15:77:1e:85:e4:26:60:4d:1e:b5:
f3:14:8b:e5:8c:a4:66:46:04:c5:a8:25:52:e2:e6:
4c:19:b2:1e:87:92:84:a6:79:84:50:38:e1:f4:4c:
ba:b4:8d:ba:93:22:41:76:4f:84:6e:27:df:f6:86:
a6:4a:76:8d:cd:46:91:42:9f:05:10:97:bf:62:1d:
90:4c:b7:4d:1b:da:82:61:55:7f:4e:72:88:c0:e0:
c1:d3:8e:75:af:15:c1:05:5d:fe:9d:c2:4c:02:38:
b8:1f:ad:08:f5:38:c8:5c:8e:13:04:17:63:0a:07:
6e:3e:2d:44:15:33:30:b9:12:23:f4:76:bf:d8:d8:
c1:1d:17:c7:7b:c9:1e:cf:5d:73:9d:6f:4c:54:6e:
e8:ed:02:ca:9b:64:2f:46:32:9a:aa:18:62:65:c2:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DD:F4:A8:D4:DD:98:8D:5C:64:52:D9:F4:1C:E5:BC:11:DA:A6:C3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UN30qNTdmI1cZFLZ9BzlvBHapsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:111::/48
Signature Algorithm: sha256WithRSAEncryption
9a:d3:04:5c:6b:0f:21:81:ad:40:f8:45:86:47:9d:35:e2:f7:
74:f7:49:a6:6a:1b:4f:42:9a:3e:bf:d8:de:2a:18:51:33:e2:
39:f2:58:14:7e:cc:fb:91:e3:37:b5:cd:30:fa:60:76:a7:fd:
85:75:14:7f:29:cc:f2:1c:c7:4b:01:a5:60:d5:bb:68:d1:75:
55:e2:99:e3:bf:31:80:47:06:3b:8e:7c:d5:1f:23:41:f7:d8:
ff:31:5d:b3:81:c1:8d:5d:77:3c:40:7f:30:3f:86:70:88:e1:
cc:a9:9e:cd:66:58:fe:33:1a:53:fe:41:f9:3d:b8:c8:11:cb:
8f:2a:53:ac:91:e5:2a:e1:f0:0c:a8:1a:47:35:b9:81:3b:25:
65:39:b3:16:ba:a2:1b:d8:2e:1a:a3:03:ee:0f:e9:e1:fd:62:
25:66:b1:d4:51:9f:ce:c3:1c:9f:3e:f0:7e:49:a4:14:d2:d2:
11:be:33:d2:e0:96:9f:dd:30:1c:81:ce:46:dc:06:0f:17:0d:
17:1d:51:81:9c:da:45:23:82:78:be:66:31:f7:7d:b1:88:18:
f6:79:f5:6a:2c:4b:27:cf:5f:2b:d3:a0:9a:b8:5b:76:a2:ad:
90:9a:bc:98:68:3e:bf:33:85:de:a4:95:c0:e4:95:9e:88:36:
82:74:58:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:22:02 2024 by rpki-client on console-fra.rpki-client.org