Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mF_LcCohN7TAFmUnfEVE7VCKEok.roa
File: mF_LcCohN7TAFmUnfEVE7VCKEok.roa (raw, json)
Hash identifier: R3nTTkVHrf+Fl6KC2wdgONxx7Od3+QOhMKEQvmWhwrM=
Subject key identifier: 98:5F:CB:70:2A:21:37:B4:C0:16:65:27:7C:45:44:ED:50:8A:12:89
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCD6DA23B40CF5898060D9B1C95D74
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mF_LcCohN7TAFmUnfEVE7VCKEok.roa
Signing time: Tue 02 Jan 2024 10:34:05 +0000
ROA not before: Tue 02 Jan 2024 10:34:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59922
IP address blocks: 2a10:cc44:112::/48 maxlen: 48
2a10:cc44:110::/48 maxlen: 48
2a0e:b107:13de::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d6:da:23:b4:0c:f5:89:80:60:d9:b1:c9:5d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=985fcb702a2137b4c01665277c4544ed508a1289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:c6:cb:c7:82:f6:4f:1a:28:46:1d:7d:74:
84:18:3b:0e:9e:59:49:c7:31:10:61:7a:d5:75:a2:
85:fa:e8:5b:1f:7c:0b:8c:8a:eb:7a:0e:79:46:37:
b8:dc:6a:34:a0:71:48:7d:6f:6f:86:5c:18:24:39:
c7:25:3c:ba:05:18:3c:9a:da:4a:f8:64:93:c2:18:
3f:d2:99:82:74:b0:c9:b1:05:7e:de:25:4f:41:c9:
f5:a0:ec:ff:60:10:cf:43:06:42:a6:61:8a:6a:f2:
97:b7:84:a8:d9:6d:3a:c9:2b:c5:df:d0:fc:74:fe:
c6:13:dc:67:b6:83:65:36:0e:1b:51:bc:fc:c2:3b:
a8:42:eb:b4:22:94:89:71:97:6e:f0:44:76:39:4c:
84:09:fd:ab:a9:5d:a0:f0:95:6d:52:43:8c:b2:5a:
dd:a2:a8:30:61:6b:3b:c7:31:b8:ca:87:5c:61:5f:
f1:51:c4:8d:2a:71:07:b2:de:7b:21:3e:79:72:43:
7e:d2:5f:8a:cd:8d:f2:c4:63:f3:3c:86:bd:f7:3d:
c8:24:fc:e4:53:e1:1f:6d:00:ba:b6:64:14:38:e7:
9a:42:74:76:a1:db:51:b4:f6:c1:a3:8e:98:96:98:
28:d8:c7:38:73:ab:54:c0:34:44:91:f9:f3:b7:ec:
6f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5F:CB:70:2A:21:37:B4:C0:16:65:27:7C:45:44:ED:50:8A:12:89
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mF_LcCohN7TAFmUnfEVE7VCKEok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:13de::/48
2a10:cc44:110::/48
2a10:cc44:112::/48
Signature Algorithm: sha256WithRSAEncryption
b7:99:ce:da:2e:4b:e4:86:4b:b7:34:14:7c:42:ed:56:c4:fc:
db:55:3d:43:71:aa:ca:4f:0c:31:48:27:da:e9:cd:4c:e8:1c:
ec:25:c9:91:a1:ff:3f:58:a3:2b:53:f4:bc:38:77:51:0a:ee:
bb:d4:b1:67:42:72:c4:3f:1a:5d:5f:17:80:a6:ec:a7:42:bc:
56:6b:9c:39:5b:71:ca:d1:00:f2:53:03:ac:58:86:d0:33:86:
19:d7:5c:3b:4c:49:33:b7:a6:54:42:b7:19:b5:57:2e:a8:ce:
75:52:3f:7f:4d:a2:ae:5d:b2:8c:31:d7:51:e0:c3:8b:4d:fc:
0f:64:7a:be:24:d6:5c:b7:cd:72:9b:0c:89:3b:df:85:48:eb:
49:6e:7b:a0:e9:fb:b0:17:c2:51:a2:4d:74:92:d1:2d:4c:ab:
71:37:b9:3a:ab:f9:d2:ba:52:41:76:90:39:f0:ff:51:73:ab:
57:80:82:2b:0c:b1:86:94:45:ea:2a:5f:53:1c:ef:03:e0:f1:
9d:6d:f7:cc:08:fd:6e:61:6c:d1:7f:9a:1e:58:a3:77:ea:7d:
b3:d6:c2:84:7d:cd:34:05:a9:a4:f1:c3:0f:de:31:26:46:fd:
e8:f1:b9:94:ac:c8:87:20:29:32:30:82:22:e8:ec:e0:0c:b4:
1f:73:00:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:22:04 2024 by rpki-client on console-fra.rpki-client.org