Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rclxlQAWoX0ur98ksniLhdLKZt0.roa
File: rclxlQAWoX0ur98ksniLhdLKZt0.roa (raw, json)
Hash identifier: 1DWWCO0n/j7Ed1iNAVdBKUXkAHJaQv5rGs01t6GIWes=
Subject key identifier: AD:C9:71:95:00:16:A1:7D:2E:AF:DF:24:B2:78:8B:85:D2:CA:66:DD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018DAE41764C397FFAB33070967967EBC1F3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rclxlQAWoX0ur98ksniLhdLKZt0.roa
Signing time: Thu 15 Feb 2024 19:32:22 +0000
ROA not before: Thu 15 Feb 2024 19:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2a06:de00:10::/48 maxlen: 48
2a0e:97c0:411::/48 maxlen: 48
2a0e:97c0:8e0::/48 maxlen: 48
2a0e:b107:19a0::/48 maxlen: 48
2a0e:b107:1a63::/48 maxlen: 48
2a0e:b107:1a64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ae:41:76:4c:39:7f:fa:b3:30:70:96:79:67:eb:c1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 15 19:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adc971950016a17d2eafdf24b2788b85d2ca66dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e6:d5:6a:04:a5:df:80:25:9b:16:85:dd:8e:
a8:11:3c:fd:88:53:61:57:75:f4:8c:41:80:b6:5d:
a6:3d:0e:22:67:14:a1:43:b0:a3:5c:6e:d8:6a:61:
d7:9a:cd:a2:89:18:f7:bd:6c:ec:d7:1a:fd:2e:25:
e4:10:1a:82:72:05:1d:f8:33:95:22:78:5b:02:3a:
e2:1e:af:01:5a:f3:b9:ed:d2:70:89:6a:1e:a5:4f:
ea:49:8a:8d:30:10:94:c7:35:04:2c:ff:76:2a:53:
af:1b:51:c5:30:f2:64:98:7a:4a:b9:a9:f6:99:7a:
db:90:6e:3d:c0:14:a6:5b:31:69:40:60:0e:c1:4a:
25:a7:72:fa:6f:a8:1e:b6:11:3e:1c:6f:3a:88:bc:
6e:e0:34:23:05:74:c6:35:3e:b9:4e:fd:b5:02:cf:
73:2f:7c:e5:49:ef:8d:22:1f:c3:b5:4f:9c:bc:a7:
15:a3:c4:5a:3a:c8:fc:88:78:d4:ff:90:d3:ab:77:
d0:81:7c:d7:ee:87:f1:5f:32:b5:cf:67:69:a8:9d:
3b:29:a0:3c:79:35:2a:19:c6:57:50:8a:84:eb:ff:
c2:2c:66:21:dc:6c:cd:47:20:44:31:69:63:60:2f:
85:5f:6e:84:30:e4:71:f0:4d:ce:c5:ce:ff:6e:11:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C9:71:95:00:16:A1:7D:2E:AF:DF:24:B2:78:8B:85:D2:CA:66:DD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rclxlQAWoX0ur98ksniLhdLKZt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:10::/48
2a0e:97c0:411::/48
2a0e:97c0:8e0::/48
2a0e:b107:19a0::/48
2a0e:b107:1a63::-2a0e:b107:1a64:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
38:fb:60:49:eb:66:b2:75:89:d4:61:04:5a:60:02:b0:82:29:
6c:c0:64:99:34:2f:79:8f:79:66:fe:e7:8e:44:c8:2b:6f:53:
ad:49:3d:f9:77:ab:37:d9:0f:74:c4:2a:48:b3:5b:8a:7a:8c:
42:92:31:f5:70:a7:e1:f1:19:7d:d8:f1:71:4c:2c:cf:5a:ac:
ef:4d:57:8b:e3:ff:56:3c:8d:c6:3c:c7:5a:15:85:ce:03:09:
21:69:1f:94:85:1b:b3:3d:ec:fe:3c:2e:72:30:75:10:b3:2a:
9c:4f:9b:e5:e1:5d:86:86:53:11:48:99:95:29:6e:c5:c1:f8:
ad:79:43:cc:d7:67:db:7f:1a:17:3d:dd:22:9e:6b:5e:5a:4d:
25:99:a9:69:a8:56:b0:b8:f0:e0:41:69:2c:bf:23:2f:d4:6c:
62:ea:ca:c3:e7:3b:86:07:d7:d6:ae:78:1f:88:54:25:6e:a2:
6c:13:7d:2b:96:35:71:79:4f:ff:43:c3:61:a6:85:6b:67:2a:
9c:a7:69:51:68:ee:c3:40:51:68:f8:fc:05:3f:58:f6:d8:7a:
d5:84:28:64:eb:7f:f6:63:7f:4c:26:ac:fc:1b:f0:c1:82:96:
42:27:70:07:d7:ed:a3:76:6d:c5:a4:c2:32:3d:9c:32:e4:01:
f2:02:35:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:51:20 2024 by rpki-client on console-ams.rpki-client.org