Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XUCCQJ25g3leq4YOLWUEmeCgFI8.roa
File: XUCCQJ25g3leq4YOLWUEmeCgFI8.roa (raw, json)
Hash identifier: XNtoJ5yFDoZsNka/wGoxpOWkhgmtLfrU0EFuqR/eOPc=
Subject key identifier: 5D:40:82:40:9D:B9:83:79:5E:AB:86:0E:2D:65:04:99:E0:A0:14:8F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD01E5B4B5109AD8DFB30011AB7D09
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XUCCQJ25g3leq4YOLWUEmeCgFI8.roa
Signing time: Tue 02 Jan 2024 10:34:16 +0000
ROA not before: Tue 02 Jan 2024 10:34:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202976
IP address blocks: 2a0e:97c0:4f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:01:e5:b4:b5:10:9a:d8:df:b3:00:11:ab:7d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d4082409db983795eab860e2d650499e0a0148f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:19:a1:f8:dc:47:37:ea:4e:12:bc:2c:f6:77:
d6:92:bc:69:5f:ad:4c:34:2b:45:fd:a4:9e:3e:6b:
6a:f7:06:5c:b7:26:ae:75:03:da:9c:5b:e4:64:50:
3f:2f:53:bc:84:86:78:c7:3d:2d:9a:8a:d4:6d:40:
a8:94:e1:65:95:84:9a:cb:b7:a2:2b:20:01:8d:af:
3b:6d:dd:f3:f0:db:42:fd:3d:ab:0f:da:a1:53:1b:
d9:8f:2b:10:64:c9:76:d8:0f:18:96:95:61:fd:82:
76:8a:23:09:f3:56:e2:70:d7:52:28:e6:ba:32:29:
c4:f8:75:27:7b:09:70:91:6f:26:01:cd:a9:9d:d5:
b3:f6:d1:6c:da:ba:03:3b:3b:31:b6:07:fb:c0:20:
59:de:ca:ea:d7:bb:e7:16:de:d1:34:d8:41:da:d1:
01:1c:de:af:1f:ed:25:d8:84:1b:34:53:e8:0b:0b:
23:fa:1b:f7:5a:be:e2:fc:d9:69:89:f5:b6:8f:e0:
54:21:88:70:ea:10:25:23:db:5e:e7:23:2a:1d:33:
a0:e2:36:3b:da:ad:29:06:67:73:50:bf:d3:98:97:
dc:a4:55:20:37:39:ca:6f:47:a2:a3:13:37:55:47:
9f:cb:b5:60:72:ef:6a:6c:9e:f0:5d:c6:70:c7:59:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:40:82:40:9D:B9:83:79:5E:AB:86:0E:2D:65:04:99:E0:A0:14:8F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XUCCQJ25g3leq4YOLWUEmeCgFI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:4f0::/44
Signature Algorithm: sha256WithRSAEncryption
ab:85:39:6a:19:4e:bc:dd:e8:08:3e:4c:32:6f:6b:0a:5d:ba:
f8:9b:3b:07:89:d1:04:73:8e:b6:d6:01:46:e9:ca:0c:17:9d:
93:1e:52:a4:77:fc:42:8d:7b:de:43:9e:72:a2:39:63:d2:38:
93:d4:07:e3:1b:bc:19:c2:78:a4:3f:d6:cb:47:b4:3d:29:45:
2b:43:be:cb:cf:61:bb:e1:d3:8a:55:cf:a4:82:b2:0f:bb:14:
20:2a:21:e4:15:5b:9b:1b:b3:9d:7e:95:ad:1b:b3:5b:8b:fa:
f0:ca:4a:27:59:45:3c:6d:3a:29:2c:12:df:51:55:cf:a2:45:
61:0d:b2:14:46:a8:dd:60:5e:9e:ac:d7:e7:75:7b:5a:f0:85:
bb:ce:c5:ae:a9:c3:9b:f5:d9:ab:85:5a:7e:34:f5:f5:da:6c:
51:be:ba:c2:e9:d3:c0:93:46:09:7c:09:1f:4b:92:66:4b:95:
dc:7a:9e:cd:8e:19:76:38:9b:b4:bb:68:29:47:c8:cc:52:c7:
d1:f9:ef:92:96:5f:d6:d8:29:f9:c1:66:a2:df:eb:f7:35:af:
70:f1:a0:05:c2:fb:5d:c5:72:d4:bb:8c:b7:35:21:73:22:b1:
f4:e3:07:9c:1c:81:6a:ae:8f:4f:01:c6:f2:39:b9:4b:f6:35:
32:bd:c6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:07 2024 by rpki-client on console-fra.rpki-client.org