Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qFNaP617TlC87u9oN6IZ41AZc44.roa
File: qFNaP617TlC87u9oN6IZ41AZc44.roa (raw, json)
Hash identifier: 3e6/jSkc7ay1alzGTXueWzb4+C9CUoogedPw4VSP67U=
Subject key identifier: A8:53:5A:3F:AD:7B:4E:50:BC:EE:EF:68:37:A2:19:E3:50:19:73:8E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD5B46F154D8E6DA439659E074A35B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qFNaP617TlC87u9oN6IZ41AZc44.roa
Signing time: Tue 02 Jan 2024 10:34:39 +0000
ROA not before: Tue 02 Jan 2024 10:34:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216474
IP address blocks: 2a10:ccc2:10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:5b:46:f1:54:d8:e6:da:43:96:59:e0:74:a3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8535a3fad7b4e50bceeef6837a219e35019738e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:53:bb:ac:a1:51:af:d9:ff:b3:ca:d3:fc:
91:65:f7:48:82:35:38:fa:c3:eb:ea:30:90:e6:1a:
22:d8:06:8a:95:ab:f9:7e:1a:2d:a3:8d:ca:19:1f:
11:c3:87:1b:3e:3b:88:cc:07:c9:8e:1d:7d:49:fb:
19:73:1f:cc:d7:94:b9:a9:20:dd:b7:d8:1b:2f:96:
65:22:ee:50:c3:6a:f0:7b:68:44:3b:4b:65:04:0b:
b7:c5:3e:24:e5:45:8a:66:23:b6:17:9a:d4:2f:3c:
ca:b7:a1:4c:1f:1c:d4:4f:07:1b:c2:7a:3e:15:0c:
c4:b1:c6:d5:c0:2b:25:bd:05:ba:2f:15:68:ef:29:
57:13:6e:87:8a:9e:2d:69:95:e3:bd:27:b9:35:8e:
12:a8:a0:f5:46:c0:07:b8:1d:5f:18:f0:b3:5d:7c:
73:9b:a5:90:94:27:c5:40:0d:83:db:65:c6:39:cb:
44:86:a9:a9:68:52:87:e2:df:df:be:b8:be:0f:62:
4f:b8:43:bc:47:43:34:0a:e2:ba:72:a4:ac:62:cf:
ac:51:c3:61:1b:5d:e4:45:0a:bd:f8:cb:27:f8:2d:
39:b3:2a:f3:ee:c9:22:19:52:da:db:7e:b7:71:10:
e9:5e:34:c7:fd:10:04:f2:fd:0e:be:ad:65:7f:bd:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:53:5A:3F:AD:7B:4E:50:BC:EE:EF:68:37:A2:19:E3:50:19:73:8E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qFNaP617TlC87u9oN6IZ41AZc44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc2:10::/44
Signature Algorithm: sha256WithRSAEncryption
4c:37:a8:b1:c9:60:62:1a:b9:5e:2a:f5:89:4f:9d:b6:e8:42:
3f:2f:7f:fe:26:e9:75:cd:27:0d:87:74:ad:14:86:a6:e4:fe:
04:0f:cc:10:2e:ec:8b:25:61:45:51:54:ba:90:3d:e9:6e:fb:
5c:03:0f:5a:62:81:95:4b:ca:a6:9d:94:46:83:eb:f2:ea:f4:
37:33:3f:d7:2f:fa:f3:38:a4:1f:cc:da:51:db:99:60:ac:ec:
dd:c2:5d:13:c1:cc:ce:2e:9c:4d:a4:98:0c:5e:bf:53:c5:06:
11:dd:75:bb:fc:5e:f1:0a:6b:eb:31:56:70:48:25:80:84:3a:
a6:2a:ec:18:3e:c4:85:dd:05:c2:92:b8:4f:6d:ee:01:c5:fa:
9d:fe:21:94:50:86:8d:4b:dc:15:ce:38:4c:4c:ed:70:30:c4:
93:26:da:c0:02:df:e8:61:22:09:d3:e4:f2:46:30:81:89:43:
4e:a7:2d:cd:c5:b1:0e:26:55:b5:ba:1d:a0:b3:1e:b5:bf:96:
3b:25:bb:7d:fe:77:14:12:f3:1f:5b:a9:60:a9:04:87:a0:79:
c8:04:af:fc:59:e0:01:99:0e:bb:29:67:4c:31:d3:c6:d9:85:
d2:43:39:fc:51:96:ee:e9:cb:56:2d:10:e2:29:e1:3d:fe:e2:
22:08:4b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:17:53 2024 by rpki-client on console-ams.rpki-client.org