Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uxD7Sq73kMUAPybrffq6zfU0rlY.roa
File: uxD7Sq73kMUAPybrffq6zfU0rlY.roa (raw, json)
Hash identifier: Kszol1mm2xNI9Zzhdhiw4d0XZqnf4hR6S2R9Gt4sBew=
Subject key identifier: BB:10:FB:4A:AE:F7:90:C5:00:3F:26:EB:7D:FA:BA:CD:F5:34:AE:56
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCE695CD8B43A48EC30A601A92A584
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uxD7Sq73kMUAPybrffq6zfU0rlY.roa
Signing time: Tue 02 Jan 2024 10:34:09 +0000
ROA not before: Tue 02 Jan 2024 10:34:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197634
IP address blocks: 2a0e:97c0:ce0::/44 maxlen: 48
2a0e:97c0:ce0::/48 maxlen: 48
2a0e:97c0:ce1::/48 maxlen: 48
2a0e:97c0:ce2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e6:95:cd:8b:43:a4:8e:c3:0a:60:1a:92:a5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb10fb4aaef790c5003f26eb7dfabacdf534ae56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:45:cf:f1:20:64:7f:d8:41:dc:79:9a:46:
4e:f8:c4:11:d3:fd:52:79:46:44:83:42:e9:22:3f:
01:38:12:21:6f:f5:15:b5:22:69:dd:67:d7:7d:65:
30:e8:0f:b2:ce:d7:49:11:e9:0f:41:41:ff:4e:e3:
dd:84:15:7d:38:41:48:68:c1:cd:e9:30:70:71:41:
14:56:2a:82:9b:aa:13:fd:db:87:66:e4:14:6a:2f:
37:04:b7:6b:ca:16:a4:3b:08:c2:a2:fe:27:1b:0f:
7f:91:67:c7:7d:b9:24:f9:87:8b:be:5b:66:74:15:
15:56:46:00:04:02:0b:c7:e9:36:32:be:9d:bd:6b:
7c:64:0d:a2:28:38:79:b2:36:d3:03:81:d9:fa:90:
c7:f7:9e:26:92:7c:2d:08:be:ea:b8:ec:62:dd:14:
6c:f5:c1:2d:7a:dd:b1:e7:9a:ca:1e:5c:87:89:6a:
5e:cf:2c:a2:6c:ff:3f:3c:ef:9a:04:a0:b4:47:05:
0b:9d:ea:f9:80:a7:c8:ec:81:96:08:b6:41:79:0a:
03:36:7e:ea:0c:e0:51:b6:8e:80:b9:8a:a8:a4:d4:
20:f1:0f:72:da:ba:40:cf:18:82:0e:6a:6e:3f:21:
03:cd:8f:09:85:7d:34:dd:c1:48:17:be:03:a3:a3:
f1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:10:FB:4A:AE:F7:90:C5:00:3F:26:EB:7D:FA:BA:CD:F5:34:AE:56
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uxD7Sq73kMUAPybrffq6zfU0rlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:ce0::/44
Signature Algorithm: sha256WithRSAEncryption
3d:69:2e:bd:1f:1e:28:42:1b:33:e9:57:c0:aa:d8:e9:5e:46:
5d:45:ee:8e:5f:5e:24:73:7d:91:da:87:48:e6:f0:6a:e9:e7:
d1:9c:54:ab:96:85:33:fb:cc:f2:61:74:2b:5d:9d:5a:d5:46:
80:23:8e:0e:51:50:b2:d4:f8:20:16:2e:a4:72:d5:09:a7:ef:
00:3d:10:04:5f:fb:06:2b:53:df:bb:42:4a:6f:b5:e9:6a:a4:
9e:1c:9e:4d:c0:e9:57:6f:39:1a:af:c7:a7:10:16:06:27:df:
96:0c:5c:7a:9a:67:13:17:31:64:02:71:fd:d7:32:23:eb:c0:
1f:7c:75:11:9c:40:ac:9f:49:69:69:20:ad:6a:f9:e9:47:c7:
23:72:a8:b1:dc:4e:25:5c:54:4d:38:9b:d0:74:a9:61:3e:67:
8b:95:70:2c:67:eb:aa:5b:a4:a8:05:c1:fe:37:2f:3e:58:b4:
df:ef:cd:12:f1:f6:19:df:d4:d8:5e:a4:2b:a9:57:9a:2e:aa:
88:ec:f4:a4:6c:f4:4c:15:49:66:54:f8:19:07:8c:72:a9:75:
42:b1:a4:e9:fa:ec:e2:2d:66:35:75:09:42:fa:52:d7:72:c7:
56:b3:c7:2a:60:d2:8a:d5:94:20:32:f2:8d:19:86:12:d3:a0:
6a:60:ad:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:42 2024 by rpki-client on console-fra.rpki-client.org