Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qulGd8EJAQ_ORqx5yKO_JW_B_gw.roa
File: qulGd8EJAQ_ORqx5yKO_JW_B_gw.roa (raw, json)
Hash identifier: 7z31vFHV3bvmDekCmooC8ONLWFP9STwGmHSZTx7eIwI=
Subject key identifier: AA:E9:46:77:C1:09:01:0F:CE:46:AC:79:C8:A3:BF:25:6F:C1:FE:0C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD1C5F30A8013C257307F90B6293FC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qulGd8EJAQ_ORqx5yKO_JW_B_gw.roa
Signing time: Tue 02 Jan 2024 10:34:23 +0000
ROA not before: Tue 02 Jan 2024 10:34:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209225
IP address blocks: 2a10:cc40:102::/48 maxlen: 48
2a10:cc40:100::/44 maxlen: 48
2a10:2f00:17e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:1c:5f:30:a8:01:3c:25:73:07:f9:0b:62:93:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aae94677c109010fce46ac79c8a3bf256fc1fe0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:55:f7:0b:92:2b:d3:62:7b:80:3d:30:e5:72:
52:35:97:16:85:64:18:34:ad:b7:50:5e:b2:20:54:
5c:6f:6d:33:34:75:93:26:7b:7d:48:02:00:71:c7:
41:fa:98:5d:0c:fe:0a:fd:ae:8a:b1:0b:a4:4f:42:
12:7d:20:6f:a4:00:55:82:15:bb:12:81:73:c8:b0:
11:87:fc:f3:5d:21:2d:13:54:3c:6b:04:a2:b1:0e:
8c:87:b3:80:ed:86:2b:59:ef:13:94:5a:91:30:a9:
4e:5d:52:3f:50:53:e4:24:20:46:73:6f:4e:eb:bd:
e8:c3:5d:03:4d:f0:3f:f1:52:39:35:84:08:e0:55:
77:a9:b2:f7:af:47:72:ec:c5:45:f0:11:77:73:a2:
db:26:9a:11:69:c3:91:48:70:f6:2c:75:74:5e:6a:
37:37:ad:a8:74:f1:91:dd:3c:77:7a:d8:26:4a:5c:
39:4a:ba:76:9e:f9:84:5d:84:e2:97:47:ed:52:6e:
47:90:d7:ff:72:fb:81:19:69:ad:b6:59:74:43:96:
e1:4c:d0:71:6b:92:7e:f4:dc:52:64:28:82:3c:d8:
d8:b2:d8:dd:9f:e2:32:0e:ff:6c:f4:69:84:0b:f8:
35:12:b2:47:9e:e1:9d:e1:ad:ae:2f:c6:c8:16:ef:
bf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E9:46:77:C1:09:01:0F:CE:46:AC:79:C8:A3:BF:25:6F:C1:FE:0C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qulGd8EJAQ_ORqx5yKO_JW_B_gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:17e::/48
2a10:cc40:100::/44
Signature Algorithm: sha256WithRSAEncryption
13:5c:6b:e8:ee:0e:de:22:46:07:fe:ac:e3:96:50:b8:fa:58:
1f:e1:c2:1f:04:25:a4:fb:3e:f9:23:7f:98:75:9d:c9:b8:25:
ca:e1:53:9a:11:9d:0e:2e:b9:65:12:fa:e8:43:83:f2:b1:ec:
e5:84:e7:cf:aa:5b:d2:e9:d4:b7:17:ff:5d:d2:db:33:b4:dd:
c5:88:66:5b:04:d4:3d:2f:ee:01:84:cd:57:a0:0b:54:bd:ab:
70:ba:20:e2:d0:71:2f:a1:e9:fa:48:b4:91:1c:3f:ac:28:e6:
48:ea:52:50:83:2f:b6:38:30:ff:2f:45:a1:82:62:b2:57:8c:
40:21:a5:57:ac:90:5c:c1:74:bb:04:a6:79:96:5d:21:b5:6b:
24:c5:14:0a:b8:24:15:5a:31:ac:3b:d2:8f:38:e0:c6:90:4c:
20:55:ea:13:8a:9c:7e:c1:70:2c:f5:5a:f1:e0:88:c7:af:bc:
17:e3:28:16:f1:fa:29:8a:da:77:51:f8:59:6c:e0:7f:4b:66:
30:4e:39:40:35:33:51:5f:03:78:04:e9:d6:37:b5:76:9f:8b:
26:ed:8d:b8:30:bc:f6:bf:5e:06:94:c1:d1:7e:16:fe:b6:3b:
a3:25:cb:9f:d4:ae:8c:1e:f5:2c:e0:33:5c:3f:27:65:fa:a7:
d1:cc:45:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:58 2024 by rpki-client on console-ams.rpki-client.org