Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XQKFx8NrZx1iZ39B2JcYQOroU_g.roa
File: XQKFx8NrZx1iZ39B2JcYQOroU_g.roa (raw, json)
Hash identifier: 8axpqml6r74e8nKTbMQ31FQL/v7hdvDwpw5tMiunGOE=
Subject key identifier: 5D:02:85:C7:C3:6B:67:1D:62:67:7F:41:D8:97:18:40:EA:E8:53:F8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018DA6BB326408A1D279C2991B72B03DE29E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XQKFx8NrZx1iZ39B2JcYQOroU_g.roa
Signing time: Wed 14 Feb 2024 08:28:22 +0000
ROA not before: Wed 14 Feb 2024 08:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215517
IP address blocks: 2a0e:97c0:6f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a6:bb:32:64:08:a1:d2:79:c2:99:1b:72:b0:3d:e2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 14 08:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d0285c7c36b671d62677f41d8971840eae853f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8d:9c:71:33:01:3e:b9:3c:19:eb:5c:7e:93:
df:d5:40:fc:d6:f2:4b:8c:4a:dc:5c:f5:38:42:e0:
4b:95:89:56:ae:19:ee:6a:27:59:0c:4d:26:f1:06:
22:2c:86:38:11:11:61:7d:db:6a:df:01:0c:7a:94:
9e:a5:27:cb:7c:fa:cc:43:96:09:48:c0:cf:d9:93:
45:20:25:39:dc:45:8c:50:9f:fc:76:7c:35:b1:1c:
bf:76:f6:d8:54:4f:ee:a1:8a:43:cb:bb:0d:ac:be:
1a:82:77:97:aa:16:05:fc:c8:18:45:02:c5:0f:be:
9c:f4:02:2a:9a:f1:7a:93:a6:da:ff:e0:f0:7e:84:
91:1d:00:42:f0:19:1a:53:c1:f8:0d:4b:be:9e:04:
aa:9a:23:13:2e:9d:5d:f1:e3:2b:2b:81:62:b4:b9:
ad:1b:a8:f9:92:4f:f2:17:13:39:16:d0:82:a7:b4:
42:83:d9:e2:6f:11:cd:24:46:ee:39:7e:9b:65:6c:
57:bf:68:63:1f:58:35:6e:93:a6:61:e3:9e:96:bb:
7c:8e:bf:e8:5e:8d:da:0b:66:49:0a:d8:b9:5c:11:
d7:21:c9:cf:e1:3a:68:81:dc:af:33:86:3f:ea:c5:
04:8b:46:a7:76:c2:1a:01:57:b3:0f:83:0c:51:26:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:02:85:C7:C3:6B:67:1D:62:67:7F:41:D8:97:18:40:EA:E8:53:F8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XQKFx8NrZx1iZ39B2JcYQOroU_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:6f0::/44
Signature Algorithm: sha256WithRSAEncryption
36:45:fa:40:48:ea:08:b9:de:0d:25:aa:bd:b6:47:7a:7f:5a:
ea:25:4b:d2:cf:39:d2:14:f5:d7:75:13:8d:72:07:0b:c9:62:
aa:e1:03:44:ef:79:d9:e7:53:22:3a:db:0d:7a:5d:23:4b:ff:
bc:e3:eb:c4:29:64:14:84:34:f1:c5:c2:3e:74:66:22:a3:23:
52:7d:f9:56:59:3b:4b:3f:6b:10:32:3d:7b:a2:77:9d:05:e3:
b8:94:fa:58:6c:31:96:66:c3:4d:16:78:22:c6:ef:b2:b2:19:
a1:91:0e:13:07:9d:6e:f7:fd:70:d5:d9:3b:6f:50:ee:f8:a5:
e2:39:4f:a6:23:3d:97:f3:c3:f3:d8:91:d0:28:c5:90:27:a9:
29:4d:1c:eb:29:77:2f:82:86:06:91:6b:94:84:bf:3b:4c:92:
38:29:c0:ac:73:c0:44:a8:83:24:72:29:48:75:15:98:95:d3:
48:d3:eb:ba:4a:c6:b4:f2:c2:53:39:8b:26:b6:12:60:be:8e:
8a:5c:a9:74:23:30:68:5c:cf:35:f7:24:86:1f:26:03:89:3d:
41:c3:4d:25:b4:39:8d:d9:69:cb:7f:72:f7:ba:56:db:ce:eb:
d1:8b:d5:76:52:d9:60:02:70:c2:3e:e0:13:b7:02:55:80:e1:
97:a1:45:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:34 2024 by rpki-client on console-fra.rpki-client.org