Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VaAq2DvvGMJ6Yw0b2zalPud9VZA.roa
File: VaAq2DvvGMJ6Yw0b2zalPud9VZA.roa (raw, json)
Hash identifier: Rxy+b2flzR33/Ba7wMVm6AX9qXwnboX24TU5rPkIecs=
Subject key identifier: 55:A0:2A:D8:3B:EF:18:C2:7A:63:0D:1B:DB:36:A5:3E:E7:7D:55:90
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD380F12F509F070A36D1DBEFA5A1E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VaAq2DvvGMJ6Yw0b2zalPud9VZA.roa
Signing time: Tue 02 Jan 2024 10:34:30 +0000
ROA not before: Tue 02 Jan 2024 10:34:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211571
IP address blocks: 2a10:cc40:190::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:38:0f:12:f5:09:f0:70:a3:6d:1d:be:fa:5a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55a02ad83bef18c27a630d1bdb36a53ee77d5590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:07:7c:26:66:d9:4e:b0:99:12:6c:2e:41:
4a:3f:a0:40:de:6d:1d:cb:8a:90:4f:f8:cc:89:25:
c5:3d:de:96:e1:00:30:5e:c6:f5:aa:cb:be:4c:ee:
02:d5:20:ce:6a:1c:c6:29:0b:97:37:da:3b:b1:14:
bb:1f:cb:7b:2c:5b:10:06:11:ba:0b:cc:b2:98:dd:
69:00:12:ec:42:34:20:2e:26:0a:1e:e2:16:b1:4a:
09:e6:8a:1a:7f:c1:43:8d:f2:b9:30:59:ae:a2:ad:
83:39:f1:99:e3:8b:79:b8:86:7c:3e:7c:7c:7a:15:
4e:be:37:fb:e5:f1:98:50:7d:d0:c2:19:48:da:37:
3c:c8:fb:0c:a0:0e:1e:fc:2b:4e:00:4b:d0:e2:7e:
a6:4b:84:c5:4d:ac:ba:db:f4:5c:05:32:2d:3e:f8:
43:04:ca:bf:7d:84:ee:fd:91:ac:b6:1c:d6:e8:e2:
90:03:ea:ee:08:9a:d1:97:8d:4d:77:0c:35:95:7a:
95:9b:15:ea:ba:12:e4:14:82:0a:35:c9:00:c2:2d:
4a:44:83:3a:40:ce:6c:93:f2:55:6a:57:68:66:f7:
c4:58:da:c3:ff:d7:a4:6d:63:f9:49:dc:61:c4:5a:
6c:01:a9:b1:a5:cf:b8:34:4c:74:db:d0:29:2e:1a:
31:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A0:2A:D8:3B:EF:18:C2:7A:63:0D:1B:DB:36:A5:3E:E7:7D:55:90
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VaAq2DvvGMJ6Yw0b2zalPud9VZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:190::/44
Signature Algorithm: sha256WithRSAEncryption
15:64:e8:c6:d7:48:35:d5:58:9c:08:0a:a7:3c:5c:50:60:08:
8f:bb:b9:45:eb:ed:44:44:f9:54:9a:56:52:a6:96:4c:c8:d6:
eb:a9:fa:ef:68:f9:87:39:06:fe:47:c5:d5:b8:71:9e:c0:b4:
b4:46:a9:17:ab:18:c1:e9:de:b8:ae:12:c8:f4:72:55:70:eb:
1e:91:27:87:11:1f:69:5f:ca:2a:97:32:38:2c:9a:f2:2a:c1:
47:85:2e:82:1d:ff:b5:31:66:40:ad:dc:87:b1:e2:28:0c:0e:
93:b7:be:7e:65:b2:c6:55:50:67:e4:6b:e0:72:37:78:29:77:
c4:99:a1:cb:d3:df:22:56:4b:59:3a:3c:a2:13:88:39:fd:95:
42:fc:64:7b:08:c2:7d:57:2f:1c:f8:5b:eb:a1:46:3f:b2:8c:
43:e0:c9:5d:3d:48:25:69:61:4d:2b:02:ea:e6:31:68:9f:0a:
79:79:35:16:b9:aa:27:07:7e:57:e6:8b:3b:7b:ef:36:7c:52:
1d:25:f6:48:ad:5c:36:67:b4:4d:0e:38:2f:7e:57:ad:46:74:
ea:0f:6e:00:53:e9:35:9e:4b:c7:b4:fc:fe:2c:a4:7d:94:8e:
36:3b:54:47:b3:b3:cf:9c:80:21:96:f5:5b:9f:1e:f5:39:d2:
88:98:50:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:34 2024 by rpki-client on console-fra.rpki-client.org