Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cTymY2ij_xrSSYdHy1g4UdYgrsc.roa
File: cTymY2ij_xrSSYdHy1g4UdYgrsc.roa (raw, json)
Hash identifier: Dlv7nPMl1bj3J/z73vGNCbT+APj0hZY2PQ2stSV8tSQ=
Subject key identifier: 71:3C:A6:63:68:A3:FF:1A:D2:49:87:47:CB:58:38:51:D6:20:AE:C7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD4C3A4A8502068162E38A511BCBE9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cTymY2ij_xrSSYdHy1g4UdYgrsc.roa
Signing time: Tue 02 Jan 2024 10:34:35 +0000
ROA not before: Tue 02 Jan 2024 10:34:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213164
IP address blocks: 2a10:2f00:18a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:4c:3a:4a:85:02:06:81:62:e3:8a:51:1b:cb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=713ca66368a3ff1ad2498747cb583851d620aec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:cf:ce:86:16:4f:a3:45:12:85:d8:94:1a:
a9:6a:4e:f5:c1:b4:2a:49:c5:56:5a:64:fe:da:de:
c9:10:14:0d:a0:31:0f:0e:df:70:9d:72:0c:e8:08:
d7:2e:53:cc:ef:17:c3:6e:d3:b8:f2:86:c8:bb:ee:
1b:39:7d:c3:f4:c8:a4:9b:7c:e0:01:65:56:10:45:
2e:e5:b0:47:19:a9:a3:13:79:3b:6b:bc:1d:8f:ee:
56:af:ff:ec:bf:77:fc:fd:cb:51:77:f9:35:82:ad:
79:cc:04:68:5a:f1:38:35:9e:b7:a8:45:a5:42:02:
0e:80:4a:fb:9b:6c:fc:0e:02:02:7a:81:8f:4b:f1:
a3:54:d3:64:43:73:44:8a:9c:53:81:af:78:f8:b9:
b7:22:e5:a5:0d:2f:74:ac:c7:c4:6f:74:89:ac:d7:
6f:a5:94:c0:0f:02:e7:0b:20:98:8e:09:97:fa:2f:
f0:ce:1f:c3:cd:85:73:36:43:4f:1b:64:83:50:e3:
6c:88:c9:c2:d7:4d:4f:77:d4:79:0b:de:5d:8d:75:
05:37:67:d4:bc:94:89:db:f9:56:25:15:70:36:d5:
63:4a:fa:17:81:96:19:32:4f:5a:c5:49:8d:8c:09:
46:58:ec:18:5b:12:52:e1:ae:f4:99:17:08:7c:fc:
34:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3C:A6:63:68:A3:FF:1A:D2:49:87:47:CB:58:38:51:D6:20:AE:C7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cTymY2ij_xrSSYdHy1g4UdYgrsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:18a::/48
Signature Algorithm: sha256WithRSAEncryption
95:64:85:88:9f:74:da:4d:52:44:1a:8e:e4:79:2c:29:e6:92:
38:de:4b:8e:2c:2f:70:4f:92:ea:3b:54:84:1d:80:89:c5:9f:
33:3f:3f:09:04:5e:b9:9f:6d:32:ea:eb:a6:8f:af:57:08:ae:
d0:6c:a4:a7:e3:fc:7f:e8:6d:af:26:81:7a:94:62:08:d7:4d:
94:6a:c1:aa:76:cb:49:1c:b1:9d:41:03:71:b8:ab:ce:86:5d:
e2:b7:aa:98:90:e2:05:e0:b9:73:81:bf:9c:66:7a:33:dc:77:
cd:6e:51:8f:7f:16:42:99:7f:af:29:67:7f:15:7c:be:be:a2:
de:00:1a:d7:d1:a2:6e:3d:e3:80:60:5b:a8:3f:4d:a0:ea:69:
d3:23:78:f5:9c:0f:53:ea:70:89:b4:0f:f1:ab:96:da:6b:ff:
96:3a:a0:79:2d:b6:19:19:38:41:66:e2:13:e6:73:4a:f4:ea:
45:0c:2c:d3:1c:d8:8c:79:2e:96:6f:c6:39:8d:f8:ba:2b:6b:
92:74:fa:14:46:5e:1b:07:8d:3d:7d:3e:1a:44:dd:c7:e5:8d:
70:cb:df:4c:c3:5e:3c:6a:5f:21:72:19:8a:0c:a8:dc:5e:7e:
0a:c8:88:88:40:c7:45:90:93:67:a6:bf:88:23:77:86:d3:8b:
ef:65:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:33:17 2024 by rpki-client on console-ams.rpki-client.org