Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qFOWLCvRfOeQi45nSB58Gl41cms.roa
File: qFOWLCvRfOeQi45nSB58Gl41cms.roa (raw, json)
Hash identifier: OsND7nq1zxQ/dogTviF7p61iAs6ksf7TjWoq0djNC1Q=
Subject key identifier: A8:53:96:2C:2B:D1:7C:E7:90:8B:8E:67:48:1E:7C:1A:5E:35:72:6B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0192AACD0B6E7F20FFBCD95DC3AACAE75543
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qFOWLCvRfOeQi45nSB58Gl41cms.roa
Signing time: Sun 20 Oct 2024 16:40:17 +0000
ROA not before: Sun 20 Oct 2024 16:40:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202941
IP address blocks: 2a10:2f00:187::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:aa:cd:0b:6e:7f:20:ff:bc:d9:5d:c3:aa:ca:e7:55:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 20 16:40:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a853962c2bd17ce7908b8e67481e7c1a5e35726b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:36:bc:a8:bf:2a:3d:c1:26:36:32:77:70:6e:
cc:91:ba:27:98:3c:cd:42:50:f1:9c:dc:f1:40:e6:
3e:c7:50:58:5f:c3:a7:08:f2:e4:0f:74:fb:c0:ae:
47:cf:56:5c:4b:d2:5c:a4:0e:62:b0:0e:60:96:e1:
94:36:d2:48:15:91:c8:82:a3:7f:f3:30:2d:85:2d:
39:bf:24:a0:52:6d:e4:70:34:27:91:6c:f4:3a:3a:
54:0d:4a:1f:fd:8e:c9:46:f5:b9:7a:d3:72:f7:0b:
b2:f1:53:7c:a9:99:46:78:61:eb:47:de:dc:1a:b0:
94:98:3d:3d:3c:87:20:de:95:e2:b5:81:cd:0b:f5:
ab:1c:f4:af:99:f4:6e:39:1c:ab:d6:5a:5b:ba:46:
83:ad:57:32:0a:ef:b7:1f:8f:c6:e8:37:39:95:8b:
51:ce:d8:e5:a5:cc:6f:f0:84:26:59:f6:03:1e:a0:
9d:bb:0e:a9:66:b2:fd:f9:f2:4f:43:97:9e:6e:76:
da:6e:37:50:32:fe:61:36:99:2c:59:c6:b0:43:60:
d1:0b:a5:f7:bb:b7:d8:26:b7:44:96:7d:ae:50:9a:
df:3e:41:fb:f1:83:b4:58:92:3d:5a:39:93:60:bf:
0d:ed:c6:15:56:89:75:f8:24:c3:4c:82:d4:08:a1:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:53:96:2C:2B:D1:7C:E7:90:8B:8E:67:48:1E:7C:1A:5E:35:72:6B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qFOWLCvRfOeQi45nSB58Gl41cms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:187::/48
Signature Algorithm: sha256WithRSAEncryption
06:2f:40:c8:c7:9d:38:0c:46:c4:43:48:5a:06:a8:6e:04:95:
b4:4f:7d:2a:7a:b0:51:ca:ca:e3:f9:e0:25:d6:d1:cf:5d:d9:
8d:f3:37:a6:d1:f8:18:e9:96:47:b0:e1:2f:0e:c4:33:50:b0:
99:2a:d2:3f:bd:f2:d3:e5:ef:c8:81:05:58:f1:3f:c5:89:bf:
59:05:83:95:6c:6f:cd:54:d8:8e:04:8a:6a:37:7f:3f:ce:80:
90:28:ec:36:57:62:2a:6a:cd:57:bc:86:51:ed:90:0c:27:e7:
50:d5:72:34:a9:17:aa:4f:12:1c:bd:9a:88:31:f8:b3:4f:75:
fe:23:b0:1a:35:53:be:a2:3b:1e:9d:a0:4e:6c:20:96:f1:fe:
99:05:02:88:cf:bd:4b:09:aa:d0:b5:84:56:db:96:1d:38:d1:
e0:b4:ae:76:80:54:82:6c:4f:f6:f8:1f:99:3e:5d:a0:21:01:
1c:ac:7e:54:db:2a:38:de:3d:3c:31:5a:b2:60:d8:e8:29:b5:
35:41:30:a0:ca:92:7a:1f:4f:d0:f7:5b:80:ac:2a:bc:9a:4c:
8f:02:99:56:b3:68:2a:2c:4e:36:9e:64:55:24:cf:e1:b6:c5:
f6:56:82:79:d5:26:4e:8d:05:3f:a2:41:5e:b8:1c:63:73:5a:
b5:90:19:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:32 2024 by rpki-client on console-fra.rpki-client.org