Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xPrNCO00EUCD25CpxxvV3HI4bMA.roa
File: xPrNCO00EUCD25CpxxvV3HI4bMA.roa (raw, json)
Hash identifier: rTu07NFM/p0sgyA5a09cZHg8vH5Sh4U3MyZ4Fi8L5QI=
Subject key identifier: C4:FA:CD:08:ED:34:11:40:83:DB:90:A9:C7:1B:D5:DC:72:38:6C:C0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01928C2C156BB91711F357BEC41CA436D94B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xPrNCO00EUCD25CpxxvV3HI4bMA.roa
Signing time: Mon 14 Oct 2024 17:55:52 +0000
ROA not before: Mon 14 Oct 2024 17:55:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214527
IP address blocks: 2a10:ccc5:5550::/48 maxlen: 48
2a10:ccc5:5555::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8c:2c:15:6b:b9:17:11:f3:57:be:c4:1c:a4:36:d9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 14 17:55:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4facd08ed34114083db90a9c71bd5dc72386cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:36:95:29:e4:9c:e0:df:4c:d5:de:7f:c9:
f2:42:3e:14:9a:16:7e:1c:da:c2:4c:9b:69:e5:aa:
b3:0d:40:02:f1:57:17:8d:c2:6b:26:d5:78:66:57:
17:27:93:72:e9:29:c4:9d:51:b8:11:0a:ba:a8:34:
40:e5:3c:ad:36:28:6c:37:d6:3c:b2:e5:60:be:20:
6a:d7:24:de:fc:d4:ce:61:6c:23:8b:51:7c:95:27:
03:c5:4a:e2:77:6d:c7:17:bd:66:88:f5:92:5f:8f:
c3:34:e2:04:ab:38:57:03:a0:97:01:af:29:bd:19:
af:46:10:99:10:05:bc:9f:f2:79:60:dd:69:d1:4c:
0a:b3:dd:62:d3:d2:c0:57:23:d2:18:42:75:f2:d4:
69:c9:c3:10:41:1a:f0:ea:a6:1f:78:c9:ea:53:d6:
24:b3:6b:b6:c3:33:6e:cb:28:53:79:8f:a6:20:19:
ae:17:7d:65:4a:38:c3:48:27:df:0a:dc:65:c2:0f:
4c:7e:c9:bf:aa:e1:ce:77:b8:e7:95:97:d0:a2:61:
b6:a6:69:73:07:3e:a5:1f:6b:72:d9:bd:c5:b6:0b:
72:b4:98:63:44:d5:8d:b7:3b:3c:f0:0f:6f:55:c8:
cd:5f:e2:70:02:62:bb:2f:6e:07:a8:6b:ab:0e:b1:
0f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FA:CD:08:ED:34:11:40:83:DB:90:A9:C7:1B:D5:DC:72:38:6C:C0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xPrNCO00EUCD25CpxxvV3HI4bMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc5:5550::/48
2a10:ccc5:5555::/48
Signature Algorithm: sha256WithRSAEncryption
11:0a:e8:97:75:23:f1:cf:ab:f0:ad:26:05:58:f2:6e:5f:bd:
fc:2e:09:cd:f7:e5:79:07:07:b4:34:23:02:67:44:23:6f:0a:
d2:cd:7c:04:0d:20:74:ac:46:72:a9:6a:a9:e1:b0:73:bd:1e:
3a:fd:bb:cb:b6:6a:56:b9:51:13:cf:5e:10:f0:64:b0:e7:eb:
8b:7a:05:16:86:59:9b:2b:b0:2e:66:bb:55:76:da:2b:e5:bf:
2d:0d:12:fc:13:79:a6:20:47:82:20:77:fb:94:5f:58:22:3b:
f9:48:05:97:5d:5c:ee:56:f9:3f:32:3b:f4:61:d4:60:db:0f:
ed:f1:57:f6:3b:a5:47:71:7a:4e:b4:1e:6e:92:c1:02:4d:84:
0c:a9:eb:6d:6e:a3:e8:e2:61:25:dc:49:21:fa:98:d9:6a:8d:
a3:b6:75:73:60:27:a4:e4:aa:48:01:5a:ac:fe:48:c2:e1:62:
41:0e:4d:c0:c8:a0:53:d1:63:76:d2:ee:71:ab:ba:8a:54:5a:
da:33:a1:a3:44:75:c1:ea:f4:1a:2f:ed:32:99:2c:a5:d9:b6:
4d:a9:f7:59:f0:69:ff:36:d3:f1:1b:76:87:68:03:04:42:9a:
3a:02:54:fd:5f:b2:56:15:ea:b9:b2:0d:90:09:7e:89:27:8f:
f5:30:a1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:32 2024 by rpki-client on console-fra.rpki-client.org