Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uqm7AXHXTP507d1pfGUJl9hVapM.roa
File: uqm7AXHXTP507d1pfGUJl9hVapM.roa (raw, json)
Hash identifier: oTLS0vOPuO6aXQcw87+5rncCqxZM9TrfZJ/kA6ua1m8=
Subject key identifier: BA:A9:BB:01:71:D7:4C:FE:74:ED:DD:69:7C:65:09:97:D8:55:6A:93
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD1EDA64C512E84C78E9720605B406
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uqm7AXHXTP507d1pfGUJl9hVapM.roa
Signing time: Tue 02 Jan 2024 10:34:23 +0000
ROA not before: Tue 02 Jan 2024 10:34:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209669
IP address blocks: 2a10:cc40:150::/48 maxlen: 48
2a0e:97c0:a1f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:1e:da:64:c5:12:e8:4c:78:e9:72:06:05:b4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=baa9bb0171d74cfe74eddd697c650997d8556a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c7:73:cf:75:f2:49:a6:fa:82:c3:96:9e:f4:
8e:b0:f3:a6:5e:66:2d:8a:a8:72:07:b7:3b:eb:89:
95:28:91:26:54:71:76:3e:cf:76:a9:69:fc:97:d1:
a8:94:ba:f3:6a:7d:d6:7e:b6:e2:4f:c7:8e:40:0e:
35:58:43:98:a7:1c:43:ba:37:4d:33:4b:c9:3d:1c:
85:a0:c3:a6:d6:85:8b:c5:e5:f8:52:93:77:94:91:
93:a4:16:ea:f6:05:3d:96:21:5d:60:c8:52:f0:c9:
dc:f1:85:24:43:0f:ec:98:b4:e9:46:a0:ec:b0:1d:
85:8a:51:51:1d:24:43:df:3d:5b:09:4a:40:c6:a4:
88:35:00:38:2d:39:5b:58:4c:e2:fd:ec:c2:80:06:
d5:65:f0:95:53:39:6c:0c:37:3a:f3:87:63:2a:d5:
c1:e3:bc:2f:45:6f:64:b4:4a:ae:eb:e2:ba:86:6d:
5f:80:f4:27:46:35:c7:60:d4:c6:cd:fc:5b:e7:22:
61:c2:01:b7:eb:db:e2:2d:5c:b5:45:82:04:b4:14:
9e:40:83:87:1b:da:4a:9a:5d:2e:34:1e:15:7f:d7:
b5:7d:cd:5d:c7:fc:0a:41:50:13:b8:51:38:92:98:
c5:2f:7f:5c:74:4a:f5:ae:cb:6a:76:34:17:6d:2d:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A9:BB:01:71:D7:4C:FE:74:ED:DD:69:7C:65:09:97:D8:55:6A:93
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uqm7AXHXTP507d1pfGUJl9hVapM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:a1f::/48
2a10:cc40:150::/48
Signature Algorithm: sha256WithRSAEncryption
3b:24:45:b4:8d:67:cc:78:6b:91:da:a9:ee:94:10:e3:99:fd:
57:e7:e5:fb:83:fe:65:f8:22:a0:01:e4:9b:a3:b4:3e:2f:55:
d6:1d:4d:f7:a1:63:28:78:77:b7:bf:81:57:20:85:65:74:2a:
ad:a7:33:17:e4:46:c9:6d:eb:50:95:b1:b2:ea:52:4e:a0:19:
b9:af:93:72:84:3e:ba:b1:9d:d7:b6:d2:97:8a:fd:e8:13:aa:
7c:52:e2:3f:89:98:e8:0b:4a:23:0d:cb:74:b9:0a:0e:30:31:
ce:f5:a9:5e:0d:ac:87:12:f7:ca:82:76:70:68:b7:5e:3b:e5:
23:e9:c4:bf:89:18:00:95:d5:32:f5:e8:ea:a2:b1:ba:ef:a9:
b8:2a:20:d6:70:7c:0b:f1:63:d5:70:9b:6b:71:c0:21:36:e3:
2c:f0:66:cf:e7:6b:76:3b:46:41:5a:0d:63:c9:cd:6a:09:9d:
6d:1e:c8:07:17:db:5e:26:ea:0a:e8:9a:52:f8:61:9b:19:50:
4c:07:52:3e:f3:c4:95:86:d1:21:97:bf:ef:0c:d9:20:a3:71:
65:30:50:6b:a3:42:9f:32:70:d2:da:71:79:79:75:86:0a:e0:
0b:79:46:cd:f0:ed:39:00:0d:ec:90:a0:9b:cc:ef:41:e3:91:
b3:76:dc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:39:07 2024 by rpki-client on console-fra.rpki-client.org