Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jPupHz5h5K_JUVmhSkDJtcqGiH8.roa
File: jPupHz5h5K_JUVmhSkDJtcqGiH8.roa (raw, json)
Hash identifier: NOQg/2/55oIqgH1qCwpZN8o1PehGdnJhqrb7wS/dHvA=
Subject key identifier: 8C:FB:A9:1F:3E:61:E4:AF:C9:51:59:A1:4A:40:C9:B5:CA:86:88:7F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCC8C4C7E0EE135A2B998726AA634A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jPupHz5h5K_JUVmhSkDJtcqGiH8.roa
Signing time: Tue 02 Jan 2024 10:34:01 +0000
ROA not before: Tue 02 Jan 2024 10:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39753
IP address blocks: 2a10:2f01:100::/40 maxlen: 48
2a0e:b107:24::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c8:c4:c7:e0:ee:13:5a:2b:99:87:26:aa:63:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cfba91f3e61e4afc95159a14a40c9b5ca86887f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:96:31:2c:88:82:81:a2:20:d4:de:9b:4e:1f:
1c:fa:26:ca:89:a7:61:9f:bd:07:57:07:10:4a:19:
9a:69:f6:2b:a0:d7:2b:e3:fc:fb:9c:cc:44:e3:08:
38:82:2b:42:f5:05:ca:4d:b1:a2:09:2e:a7:39:8f:
a1:75:f8:86:eb:f8:08:15:1b:d6:28:e2:64:ee:d0:
4d:0d:3a:a2:c3:70:9a:ea:35:f5:a4:6b:00:db:db:
f3:0e:02:47:0c:e2:7c:0d:43:7b:27:37:42:5d:c8:
2c:e3:12:c1:90:07:1f:39:f1:84:ed:87:17:91:52:
06:67:67:4c:ea:70:14:16:3b:f6:4c:b0:15:9a:45:
47:32:08:fb:1b:65:20:96:24:18:f1:20:21:7e:13:
8f:81:ff:29:88:22:05:69:1d:4f:f4:b6:6e:a4:93:
d6:c6:1e:d0:28:ef:7b:e7:b0:6b:10:46:51:7c:cd:
32:e2:0b:01:13:a3:08:8a:03:93:a3:35:b1:95:75:
4a:12:30:a2:60:e2:dc:73:75:b6:02:e1:b4:63:ba:
a3:51:3c:65:02:95:ec:83:7c:89:a8:23:8c:3c:ac:
b6:1b:aa:68:ff:77:e6:3b:ef:0d:f9:27:a2:a0:6a:
fc:74:6c:ae:61:03:b6:3a:1e:9b:f9:fe:86:05:f6:
d0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FB:A9:1F:3E:61:E4:AF:C9:51:59:A1:4A:40:C9:B5:CA:86:88:7F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jPupHz5h5K_JUVmhSkDJtcqGiH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:24::/46
2a10:2f01:100::/40
Signature Algorithm: sha256WithRSAEncryption
a1:7f:f9:4c:61:d2:4d:96:71:31:f1:e6:f3:38:22:d7:eb:c4:
cd:a6:04:f2:4f:53:8e:ab:e1:23:8f:1d:06:ef:4c:27:4d:36:
04:cd:91:93:fb:f6:a2:30:d8:4b:d3:3f:6b:77:b9:38:76:b9:
19:24:73:4d:23:06:7a:51:20:94:cd:f0:f0:ca:ec:ee:07:4c:
31:de:02:48:79:cf:e6:a8:b1:c2:ea:17:f4:86:a3:5d:9b:40:
9a:0c:50:bc:b9:ad:77:7e:d1:a0:07:eb:38:67:9d:5d:9a:4e:
45:12:90:5e:ee:20:16:74:ff:dc:f7:93:aa:3d:de:d2:16:28:
28:1d:d6:bc:8a:fc:eb:a1:9c:11:23:47:16:6b:e5:72:02:b5:
f9:d5:9e:6d:42:ab:1c:f6:0e:03:a9:45:52:76:d8:e8:d4:59:
27:58:16:b2:5d:e5:e3:4c:e4:b2:8e:df:7c:5a:83:e4:02:d3:
01:4b:34:61:f3:21:83:5a:08:af:d7:92:8c:f5:ee:ef:43:97:
3e:74:81:c0:92:e3:45:ca:53:41:c0:46:4b:8f:44:56:07:cf:
c3:9f:7c:f7:69:99:aa:c1:fa:82:6c:0b:9b:a8:23:1a:ef:fd:
9c:7b:14:4d:7e:b0:ef:c2:d5:31:f1:ef:b6:b8:3f:5e:ee:da:
ee:9c:ec:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:08 2024 by rpki-client on console-fra.rpki-client.org