Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dqbkRbY3mWhdD8tK6v4OHzdU0LA.roa
File: dqbkRbY3mWhdD8tK6v4OHzdU0LA.roa (raw, json)
Hash identifier: YuxhRe7PhBm06UmlaWX1B4Cfsbm71H3W2kHB9Aa2YAw=
Subject key identifier: 76:A6:E4:45:B6:37:99:68:5D:0F:CB:4A:EA:FE:0E:1F:37:54:D0:B0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD11DD6ED7C82A93CF0C3A7DCFEAF6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dqbkRbY3mWhdD8tK6v4OHzdU0LA.roa
Signing time: Tue 02 Jan 2024 10:34:20 +0000
ROA not before: Tue 02 Jan 2024 10:34:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207111
IP address blocks: 2a0e:b107:1900::/48 maxlen: 48
2a0e:b107:1901::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:11:dd:6e:d7:c8:2a:93:cf:0c:3a:7d:cf:ea:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76a6e445b63799685d0fcb4aeafe0e1f3754d0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:66:77:07:b4:42:59:9a:54:41:44:e9:58:
57:05:66:4d:bb:82:8a:b0:f4:54:64:95:ab:a7:c2:
58:78:bf:32:a0:bd:d3:c6:eb:90:01:f2:6f:64:74:
32:d0:5c:0f:83:fd:82:0c:bf:a9:a2:57:37:bf:c9:
00:2a:33:25:fc:ea:a0:b1:dd:5e:eb:49:ff:ce:ef:
37:d2:2f:6e:5d:1c:ea:68:d5:d2:5a:d5:e7:9a:26:
5f:f5:ca:d1:ae:3c:7a:21:37:b8:5e:8f:50:73:4b:
28:16:57:50:14:32:b9:2b:81:5e:22:10:75:6d:08:
5d:6e:f1:88:9f:23:66:0f:24:28:78:3d:5b:c1:4d:
d8:11:16:2f:42:20:6d:2a:93:a3:f7:d9:0e:cf:38:
e4:38:69:27:f9:75:70:7a:ef:f6:4b:10:06:63:93:
e6:00:37:c1:6a:a9:52:9f:a7:7e:14:4a:c2:c0:fa:
34:09:a6:6e:7a:b3:cd:83:69:b1:a6:97:cf:3e:25:
fc:26:d4:d4:7a:c8:02:44:8a:e3:14:97:fb:cf:6c:
99:b9:71:01:2e:a6:8b:df:1f:48:40:4c:3a:49:42:
5f:e8:23:09:b6:63:06:62:68:da:37:ac:94:8e:40:
bd:0e:d5:4b:db:c0:8d:a8:d5:dc:6b:b6:b3:c9:83:
09:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A6:E4:45:B6:37:99:68:5D:0F:CB:4A:EA:FE:0E:1F:37:54:D0:B0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dqbkRbY3mWhdD8tK6v4OHzdU0LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1900::/47
Signature Algorithm: sha256WithRSAEncryption
0f:04:b2:7d:6f:2a:58:f7:a9:db:1e:b4:d3:31:24:e8:9e:9b:
80:74:40:c7:83:bc:91:0f:e9:20:86:10:9b:ac:f4:0a:97:7e:
59:91:47:7a:07:d9:ee:bf:84:65:d4:c5:38:8d:2a:1e:47:90:
00:e7:61:23:67:f8:4f:10:85:33:a4:ee:6d:90:4d:3f:5a:23:
b4:3b:05:7f:67:62:a5:43:09:4c:0c:36:97:fe:99:73:d2:01:
ac:83:73:b2:2f:fb:9c:6e:17:b3:26:8a:5d:5d:fc:2c:b7:91:
0a:11:27:7b:77:76:39:f6:3e:96:c5:02:f5:b2:c5:64:bf:79:
06:9c:fd:4f:0c:80:64:00:fd:20:16:71:cf:e1:43:2b:14:c4:
81:5e:2e:7b:d3:50:bb:e6:9c:3d:bd:3e:29:43:a8:43:3a:b9:
be:68:8b:c4:f3:11:1a:6f:c3:3d:33:f3:8d:ad:55:1b:6c:43:
4c:44:ad:1c:01:d4:8c:91:a7:b3:c3:9d:7b:42:91:a4:09:48:
14:ff:78:c5:e6:64:fb:dd:93:c0:ae:3b:e7:f2:a6:05:16:5c:
57:78:28:97:3f:b4:66:01:3b:40:db:22:d5:2c:3a:42:8c:a1:
06:15:83:b8:75:26:90:95:51:d9:f2:5b:39:e9:ff:79:47:ad:
15:c5:ec:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:35:00 2024 by rpki-client on console-ams.rpki-client.org