Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aAd2KCQHyl0WEaCPJReWcSwNp34.roa
File: aAd2KCQHyl0WEaCPJReWcSwNp34.roa (raw, json)
Hash identifier: 55/8VsVWh59cHg+ZXnqdyVIUwwE68KeGteDbVC/Elkc=
Subject key identifier: 68:07:76:28:24:07:CA:5D:16:11:A0:8F:25:17:96:71:2C:0D:A7:7E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018DBDF1E2506971011B16533D4831C29A0B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aAd2KCQHyl0WEaCPJReWcSwNp34.roa
Signing time: Sun 18 Feb 2024 20:39:22 +0000
ROA not before: Sun 18 Feb 2024 20:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215486
IP address blocks: 2a10:2f00:1a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bd:f1:e2:50:69:71:01:1b:16:53:3d:48:31:c2:9a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 18 20:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=680776282407ca5d1611a08f251796712c0da77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7a:fa:35:0d:50:af:d6:6c:eb:93:f1:9d:83:
2b:f9:21:d9:b3:24:cc:91:89:c5:62:70:72:e5:cb:
9b:c3:50:3a:f3:ff:d6:89:7b:88:32:6f:32:8c:71:
5c:7c:42:8f:29:00:80:a0:a7:d3:09:33:9f:79:2c:
a5:65:09:54:3e:9c:cc:84:9a:7b:32:b5:8c:23:53:
09:f7:3f:25:fb:58:7e:bf:fe:7a:82:af:e5:fa:cb:
af:ee:a5:ce:31:e8:c0:64:57:1f:14:5d:b8:db:fa:
c7:a2:ef:2d:cf:a9:c0:63:07:9d:b5:ea:8e:57:84:
c3:95:2b:a9:89:02:a2:e8:3b:2c:45:e9:06:1d:30:
82:53:b8:c0:91:f7:a4:d4:43:c0:f0:45:09:0f:c8:
45:ed:42:f9:7f:a5:30:3e:37:e3:e5:69:eb:27:2e:
d2:f3:16:a7:a3:88:20:f2:17:89:65:1a:8b:4e:84:
e4:28:de:13:dc:a0:d5:0f:8b:ab:ff:c1:c2:91:64:
06:cf:67:cb:f3:0b:d9:50:f3:9d:80:01:e0:5f:c2:
a8:b0:21:6f:b3:45:54:6b:3d:ce:ac:af:19:00:bc:
8b:7d:88:0a:1f:b6:ab:e9:ad:33:4e:97:43:0d:80:
15:f4:da:8c:bd:5d:61:85:fa:5a:d3:ee:16:ac:94:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:07:76:28:24:07:CA:5D:16:11:A0:8F:25:17:96:71:2C:0D:A7:7E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aAd2KCQHyl0WEaCPJReWcSwNp34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:1a0::/48
Signature Algorithm: sha256WithRSAEncryption
6c:ce:cd:f8:3f:f4:c4:72:17:1c:c4:dd:a3:e8:e5:28:90:09:
fc:fc:f6:3f:5a:d6:65:6e:44:f0:d3:34:41:cd:10:3c:8a:c5:
0d:af:1e:b3:52:73:03:1d:aa:13:13:5e:c6:89:19:a5:a2:2f:
00:63:05:eb:4e:1e:1f:0f:99:3c:63:12:f2:ec:fc:6b:43:04:
5c:8f:42:d2:d4:fc:37:28:cc:40:05:5d:08:4c:ab:9c:a3:b6:
62:ad:80:d4:fb:45:58:b8:eb:6e:8c:74:df:cc:00:ea:33:08:
4a:89:56:8b:d6:b3:fc:eb:f9:d7:96:15:ff:99:4b:cd:8b:7c:
56:7b:b9:2e:b7:26:a5:f6:e6:e0:aa:b5:dc:94:ac:25:ec:98:
b0:0c:23:7e:01:94:cf:52:19:33:ff:d7:67:86:a6:6b:2c:0e:
9e:20:4f:be:17:1c:f2:ff:86:f2:dc:e9:db:7a:ce:ff:ae:67:
b3:df:46:00:bb:56:e8:34:4f:7d:d5:7a:8c:5d:04:d8:c3:6e:
bb:67:82:03:d7:32:41:ea:36:18:9c:5d:fb:e3:4a:9f:b0:45:
a7:4d:c1:2c:14:c5:28:a1:53:d3:92:95:c3:39:d3:8b:04:41:
4c:9b:ba:c6:e4:40:dc:ed:76:e8:48:ca:db:80:11:3d:76:05:
09:ca:01:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:34 2024 by rpki-client on console-fra.rpki-client.org