Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YCDGKQGzOS2Xok_neqtLx_4qygc.roa
File: YCDGKQGzOS2Xok_neqtLx_4qygc.roa (raw, json)
Hash identifier: iVRjSYI9dHhK62JaReCz96x6clMHYPe6oNVPdAkEXYc=
Subject key identifier: 60:20:C6:29:01:B3:39:2D:97:A2:4F:E7:7A:AB:4B:C7:FE:2A:CA:07
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCC7130775D3166FE0A197F5CDC0F3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YCDGKQGzOS2Xok_neqtLx_4qygc.roa
Signing time: Tue 02 Jan 2024 10:34:01 +0000
ROA not before: Tue 02 Jan 2024 10:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35708
IP address blocks: 2a10:2f00:173::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c7:13:07:75:d3:16:6f:e0:a1:97:f5:cd:c0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6020c62901b3392d97a24fe77aab4bc7fe2aca07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:e9:8f:19:56:45:6d:5b:b0:f7:1d:ac:55:
78:86:28:61:14:dc:78:6b:72:f4:8b:a0:cf:2b:77:
c8:4f:6c:ab:e1:df:24:5f:cc:a6:e5:9e:b0:ce:c3:
e9:94:1f:19:5d:c7:a3:9c:8d:b7:b7:2a:0f:a0:35:
10:61:e7:9c:9b:60:93:47:fd:ba:f9:4b:de:8f:4b:
89:60:d3:39:f8:9f:bf:50:4f:29:dd:f7:a7:8b:a2:
57:1c:1d:a0:a7:dd:77:8f:2b:5a:3d:6b:87:a6:43:
41:8f:5e:4e:52:d4:ed:80:d3:a8:c3:00:df:0b:be:
56:1f:92:13:6a:69:04:e7:42:9f:9d:58:18:da:0e:
16:66:9c:76:f9:ad:58:ec:54:c8:db:0c:a1:70:d0:
f3:ae:15:a3:1e:ba:f0:6e:84:16:4a:c0:57:c6:bb:
6c:16:64:79:22:de:66:3c:f4:76:89:3f:6b:d0:bb:
e0:82:31:3d:a2:a8:ca:a0:6f:9a:b1:7b:48:b5:b5:
fc:28:0d:4f:4d:49:92:cb:f5:d8:79:11:c8:17:5d:
aa:d9:7e:36:52:3a:36:36:c1:b8:3f:e8:32:d2:a3:
54:13:3f:75:8e:37:34:b6:d0:7e:a4:1e:1b:55:41:
81:05:35:3f:92:6e:98:b2:06:2a:e7:2a:ea:c0:32:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:20:C6:29:01:B3:39:2D:97:A2:4F:E7:7A:AB:4B:C7:FE:2A:CA:07
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YCDGKQGzOS2Xok_neqtLx_4qygc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:173::/48
Signature Algorithm: sha256WithRSAEncryption
94:1b:c7:8d:46:91:9a:c8:22:9d:d5:6c:f0:89:6b:37:f2:67:
c9:8a:d1:c5:47:82:16:77:e7:9a:72:60:89:82:de:fd:68:1e:
23:79:d3:14:fb:ce:8b:9d:b2:e4:64:72:b2:3d:35:6c:c4:5c:
74:fd:a9:ca:7f:b2:d9:2f:82:18:bf:a0:71:8d:cf:90:3c:6c:
f5:0c:90:78:de:80:1a:c4:f6:8f:92:d3:66:09:be:4e:e0:06:
6b:13:f2:1c:1d:47:d2:2b:bf:fa:5c:8d:50:e9:0f:fc:5f:22:
a0:a6:ce:5e:9c:44:a6:00:4e:32:02:19:5f:82:55:93:82:c8:
a3:f1:21:89:f9:eb:4b:cb:3b:8a:58:7f:a3:9b:9f:26:21:a3:
0b:5f:22:0f:8c:87:fc:c4:4b:84:74:ed:af:50:d6:49:f5:99:
ae:e1:1b:e9:f1:48:31:df:9f:d4:91:5d:85:f4:e9:0f:93:7d:
b0:a7:85:29:aa:d1:30:75:57:a2:7b:6b:78:e4:92:ea:03:00:
49:04:b2:64:49:56:79:91:dd:69:4e:77:dc:01:01:12:e9:f6:
50:ae:45:84:68:56:f5:ae:b2:1c:b7:0d:ec:b3:73:ad:35:e7:
77:a1:a8:45:d6:54:16:16:cb:a1:fe:24:b6:ac:cf:74:f2:69:
e0:6d:00:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:35:00 2024 by rpki-client on console-ams.rpki-client.org