Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mqKyAkHKvszsSWfeYCUZbNPc51E.roa
File: mqKyAkHKvszsSWfeYCUZbNPc51E.roa (raw, json)
Hash identifier: dFIP5Uh/LMzrUxqyQdCwrhBuQItp/ma3i9tc3CEsR7k=
Subject key identifier: 9A:A2:B2:02:41:CA:BE:CC:EC:49:67:DE:60:25:19:6C:D3:DC:E7:51
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019389C8FCA19CBC046CFD40BC3EBAD9B816
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mqKyAkHKvszsSWfeYCUZbNPc51E.roa
Signing time: Mon 02 Dec 2024 23:51:10 +0000
ROA not before: Mon 02 Dec 2024 23:51:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44024
IP address blocks: 2a06:de00:7000::/44 maxlen: 48
2a06:de00:7000::/48 maxlen: 48
2a06:de00:7001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:89:c8:fc:a1:9c:bc:04:6c:fd:40:bc:3e:ba:d9:b8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 2 23:51:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9aa2b20241cabeccec4967de6025196cd3dce751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:70:75:f8:7d:83:42:f7:05:45:28:dc:0d:f6:
04:c9:84:76:7e:f3:61:ff:e2:e4:b8:99:87:f5:50:
9e:9e:99:74:55:c7:82:4d:05:8f:cd:25:e0:ed:0c:
5b:4b:d6:52:01:90:74:45:a7:e7:60:ea:77:f4:c6:
f1:0b:06:2e:c3:af:e0:bb:b6:24:0f:8e:7d:ad:3e:
a1:ee:a8:bb:94:e7:ba:b9:d1:9d:22:7a:2d:81:64:
c3:f0:d9:fa:67:1f:7f:56:e1:98:35:c8:75:e7:36:
90:14:2f:59:50:98:19:67:77:53:e9:0c:8d:e2:50:
b3:b1:21:d9:8c:d3:97:c9:72:60:57:b9:e2:43:4e:
e3:ad:cb:56:0e:60:e5:f7:c5:ad:08:f5:0b:3d:82:
10:f6:1e:4e:16:f5:8c:ee:4e:6f:b2:49:97:d4:0a:
05:90:8f:9f:6f:01:a9:6f:61:9d:e8:a0:5a:2d:a5:
69:51:a4:24:6b:cb:2a:0c:e0:81:9b:82:7c:f8:8d:
81:c3:52:31:5f:33:6e:67:85:0e:78:54:e3:48:ea:
1f:5f:41:7a:83:5c:b6:6f:92:97:b7:23:71:bc:03:
40:ad:fd:e5:04:1b:05:bb:28:ab:fa:2d:b6:97:0e:
0d:a1:d1:4e:03:a1:8e:dc:c8:d1:f9:ee:07:11:21:
e0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A2:B2:02:41:CA:BE:CC:EC:49:67:DE:60:25:19:6C:D3:DC:E7:51
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mqKyAkHKvszsSWfeYCUZbNPc51E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:7000::/44
Signature Algorithm: sha256WithRSAEncryption
7d:a4:49:38:96:25:67:53:8a:c0:1a:72:e0:2d:c5:02:59:48:
e6:e2:32:1a:94:37:e9:a2:f5:b1:40:c6:72:c2:6c:0e:6a:1f:
54:0e:51:21:4a:54:17:e9:16:84:61:e5:00:e1:98:88:bb:fe:
6b:fd:7e:49:32:a9:a8:7b:8f:2b:81:85:08:05:e2:91:74:2d:
4a:ef:de:3a:30:59:92:82:e0:d0:45:a5:db:49:d3:17:69:61:
ec:a6:56:24:16:5d:6a:ef:55:0f:1e:c9:c7:c0:e0:0c:38:a6:
d8:d1:66:c7:86:17:2b:8d:61:dd:a4:63:07:26:fd:b2:43:43:
73:b1:3e:70:0e:35:d8:0a:f1:bc:b9:f8:58:c3:77:b3:9e:26:
89:15:5d:b5:d0:ab:6a:62:df:99:29:ec:f7:c3:c4:81:b4:c6:
df:fb:7a:fb:56:d2:84:2c:5e:59:52:2e:7c:15:f1:42:40:d7:
7c:08:cd:b8:3a:25:13:64:05:4d:67:1f:a3:57:58:69:f6:3c:
42:cf:8b:55:13:77:ce:53:ee:d3:2e:cd:7d:fa:e1:16:76:cc:
f3:c4:0c:55:0c:4c:c8:5d:8c:f6:91:d7:44:d6:9d:5b:ed:95:
48:a0:77:5a:fa:bb:c1:91:d0:c5:08:3b:2d:4d:58:e7:fc:90:
e5:cc:37:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 20:36:26 2024 by rpki-client on console-fra.rpki-client.org