Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qBjL8BscZtTqLfgmIE_Vos8MNdk.roa
File: qBjL8BscZtTqLfgmIE_Vos8MNdk.roa (raw, json)
Hash identifier: PvKQRid8lXbIXpTdA9x0CI309RiMuuc+pNrRgdDfjgg=
Subject key identifier: A8:18:CB:F0:1B:1C:66:D4:EA:2D:F8:26:20:4F:D5:A2:CF:0C:35:D9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCFB76C6CA5315CC8925C936AB0DAE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qBjL8BscZtTqLfgmIE_Vos8MNdk.roa
Signing time: Tue 02 Jan 2024 10:34:14 +0000
ROA not before: Tue 02 Jan 2024 10:34:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201197
IP address blocks: 2a0e:97c0:c80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:fb:76:c6:ca:53:15:cc:89:25:c9:36:ab:0d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a818cbf01b1c66d4ea2df826204fd5a2cf0c35d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:b5:54:0a:5a:39:06:c3:67:ec:cb:cd:21:
d6:d0:b7:9f:76:6d:3a:f0:f1:2f:dd:4e:9f:9b:c1:
3f:13:2c:aa:35:6c:e8:89:05:5c:0e:d5:81:e6:b6:
c6:be:48:a6:2c:5f:cf:6c:6e:e4:fa:49:44:61:33:
ca:ee:3b:58:47:68:a2:e5:91:f2:b8:cf:c7:1d:0b:
e9:77:f9:c4:14:b6:63:2a:3c:5f:af:28:d7:9e:ae:
fa:17:97:8a:76:e2:35:5f:fe:87:e4:a6:0a:5d:02:
96:aa:55:90:c3:24:11:d5:3a:90:92:c2:d3:b9:dc:
57:58:19:c6:76:5e:0b:b3:28:c0:fd:ed:f2:9c:da:
2f:a9:11:bf:58:a3:90:c8:86:5c:25:dc:02:72:f6:
d2:74:57:c7:58:d3:fd:0d:7e:a0:a2:7e:84:85:ad:
55:9c:25:15:6b:fe:44:d4:2e:be:cb:dc:d1:f8:d7:
6b:0c:3f:dd:a6:bd:74:d1:fa:16:ba:36:f1:3c:29:
99:2c:1d:4e:b8:05:a6:b5:8f:1d:4e:6f:ea:60:b5:
bb:d2:5b:de:ea:9f:e9:f2:2b:1f:99:94:2e:8c:59:
ef:56:0d:e6:6f:66:20:ba:09:3b:cb:4a:3f:07:8c:
d5:16:75:3d:9c:e2:b5:af:38:81:11:e8:e1:00:9b:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:18:CB:F0:1B:1C:66:D4:EA:2D:F8:26:20:4F:D5:A2:CF:0C:35:D9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qBjL8BscZtTqLfgmIE_Vos8MNdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:c80::/44
Signature Algorithm: sha256WithRSAEncryption
02:5c:c0:8a:ee:88:35:ce:fe:d6:59:9d:7a:87:cb:89:bd:ff:
ca:01:cd:73:f9:59:18:82:0d:8a:f5:a5:cf:87:77:c8:d0:f7:
4f:8c:b2:58:03:90:1a:16:3a:48:3b:bc:b8:32:d1:ad:1f:d5:
4a:cf:1d:eb:07:ee:03:c8:2d:b6:cc:fe:98:9e:b4:4a:24:b7:
ed:89:99:61:fa:df:6e:e2:0a:d9:40:a9:fe:03:d6:45:ea:89:
40:87:e5:6a:fc:e9:19:a0:54:6c:6b:09:0c:2d:0a:de:be:8c:
35:b1:2c:61:f4:a6:6b:25:60:33:9f:e1:3d:68:c7:cd:05:69:
cd:8d:42:14:5f:86:38:42:00:a4:da:63:8e:20:52:82:7a:d8:
3e:b0:98:eb:83:41:8d:08:b0:65:5a:f7:5c:f0:17:0e:69:01:
91:57:d4:94:02:4a:be:c8:6b:05:fb:96:99:92:e9:b0:32:97:
db:7c:ae:be:d3:1f:f4:cc:61:a9:cc:cb:ec:f9:cc:41:1a:60:
36:79:d4:d4:d8:c9:97:7b:d5:7e:3a:a0:d0:60:ae:bb:ac:dd:
01:c7:29:fb:da:25:4e:f1:46:0b:9f:1a:2b:6c:0c:e8:57:35:
e4:11:86:6e:e9:18:04:27:f7:30:b5:e1:de:02:69:1f:82:85:
f5:28:c5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:06:43 2024 by rpki-client on console-ams.rpki-client.org