Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fqQ0yuQnZX9ZWTHjhaZL4SW-cCI.roa
File: fqQ0yuQnZX9ZWTHjhaZL4SW-cCI.roa (raw, json)
Hash identifier: sMCgHPkAb7Zl+5P1z74s2rd2jWTyIITBMMS7bCcYs5E=
Subject key identifier: 7E:A4:34:CA:E4:27:65:7F:59:59:31:E3:85:A6:4B:E1:25:BE:70:22
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD53ACCE5C03A2A4FAA159A0D49D26
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fqQ0yuQnZX9ZWTHjhaZL4SW-cCI.roa
Signing time: Tue 02 Jan 2024 10:34:37 +0000
ROA not before: Tue 02 Jan 2024 10:34:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215956
IP address blocks: 2a0e:b107:1190::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:53:ac:ce:5c:03:a2:a4:fa:a1:59:a0:d4:9d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ea434cae427657f595931e385a64be125be7022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:62:f3:5b:43:f9:25:28:ff:e4:d3:55:2e:76:
7b:e1:63:53:c2:de:9f:ad:27:14:59:88:0f:79:37:
20:c8:ef:07:04:7c:d6:0c:2b:0d:61:8d:da:5b:2f:
a1:2c:76:d8:dd:57:d6:c9:27:13:f0:29:58:30:2b:
c8:75:5d:75:13:84:80:92:f4:86:5d:68:9f:96:71:
07:49:9a:3e:3c:f8:8a:0f:b5:49:4a:f7:4c:6e:0e:
87:ac:e3:e8:6b:42:d7:4f:00:7a:bf:5d:02:3f:b4:
e5:9c:b4:ee:a2:3b:3d:2c:50:2b:27:1f:28:ec:b3:
bc:18:c5:02:57:fe:27:c8:42:47:9a:82:73:02:4f:
72:74:b0:c7:01:e4:d6:a2:b8:5a:2e:77:1a:38:a3:
6d:63:84:5e:2a:8b:54:40:2e:57:2a:51:76:35:96:
90:fb:7a:60:73:f6:8f:15:b2:09:fd:c8:96:5e:d6:
d9:4b:69:60:7b:d6:a6:50:87:08:f6:7f:63:e4:65:
eb:66:24:e7:b2:b4:8b:36:5a:14:d1:f8:c0:a2:e5:
16:0a:76:bd:04:07:7d:86:3b:9b:3f:89:5c:01:40:
56:c1:e1:34:22:ea:d3:16:e4:cc:01:93:e2:7b:72:
9e:43:36:97:47:e5:c2:52:cc:9d:2d:cd:c0:b6:17:
fb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A4:34:CA:E4:27:65:7F:59:59:31:E3:85:A6:4B:E1:25:BE:70:22
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fqQ0yuQnZX9ZWTHjhaZL4SW-cCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1190::/45
Signature Algorithm: sha256WithRSAEncryption
15:40:a4:2a:e1:ba:de:16:d4:51:4e:65:c4:c3:7b:6f:e8:75:
16:15:18:1a:da:aa:44:a2:38:a5:5a:30:c8:4e:1f:ed:54:a5:
99:02:09:35:e2:5e:55:ca:45:44:18:62:75:6d:fb:23:b4:03:
89:c3:d6:e9:75:75:4e:35:e9:27:0d:38:fb:3e:32:92:3c:84:
81:69:2e:2e:9c:bc:d6:9a:92:d5:29:fb:d8:98:3a:56:93:ea:
ae:6f:d6:bd:87:cd:b5:4b:4a:64:15:7c:2d:bc:8f:23:63:05:
45:cc:25:a4:cd:36:15:03:7f:be:dd:ee:80:b4:e8:fb:5d:20:
c1:5b:cc:6e:f8:a3:09:20:f0:ff:4c:c3:e4:73:f0:5b:2e:b9:
a3:e4:85:fa:df:d7:f2:73:8a:91:2a:47:88:84:32:9b:6a:c1:
6e:91:9c:da:48:c1:70:c8:8d:0f:72:27:b5:7c:bf:30:31:36:
c6:8a:19:20:00:d1:2e:f4:fb:1a:c6:6b:ad:fb:82:bd:49:b7:
9b:4b:07:17:17:16:57:81:ee:2e:7d:12:4a:fb:7e:91:f1:66:
54:d4:4d:d0:0e:cd:71:de:24:82:b3:05:2b:77:53:81:9b:51:
07:32:23:16:27:db:21:72:80:9f:c3:ee:19:c7:69:f3:28:c2:
d8:f8:7e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:08 2024 by rpki-client on console-fra.rpki-client.org