Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KHFva0cgIW8c5eearLhdqL1FpM0.roa
File: KHFva0cgIW8c5eearLhdqL1FpM0.roa (raw, json)
Hash identifier: bEgmFwwHFgZTX8NKkvvKkfBKmYMfkDYjsgn2tvhokFI=
Subject key identifier: 28:71:6F:6B:47:20:21:6F:1C:E5:E7:9A:AC:B8:5D:A8:BD:45:A4:CD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCDC85498DBF52C003896A4A3C182B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KHFva0cgIW8c5eearLhdqL1FpM0.roa
Signing time: Tue 02 Jan 2024 10:34:06 +0000
ROA not before: Tue 02 Jan 2024 10:34:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139328
IP address blocks: 2a0e:b107:1d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:dc:85:49:8d:bf:52:c0:03:89:6a:4a:3c:18:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28716f6b4720216f1ce5e79aacb85da8bd45a4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:85:e4:ea:a4:65:2d:b1:62:96:d3:f1:11:c4:
a5:01:13:f4:ee:8b:ca:9d:6b:6c:8c:1b:b2:52:b0:
ed:05:25:05:26:f6:cf:d5:60:61:24:f9:1e:ed:f9:
3a:98:2f:29:31:66:6b:01:49:54:bb:ca:08:53:ae:
72:7a:a5:18:d9:1a:1d:e5:68:6c:c3:92:12:7d:62:
a0:59:f5:0e:83:73:e1:1c:3d:9f:7b:b4:d8:33:55:
18:95:60:d0:63:14:f3:c0:85:12:b0:75:6f:6b:dc:
e9:fa:d9:87:4d:e9:cd:d4:04:82:85:e1:da:ad:a1:
dc:98:61:c9:3a:92:f2:18:b8:65:59:fe:7e:84:c9:
06:e7:5f:b0:80:19:4f:bf:a0:58:35:e0:1f:dd:d8:
e2:93:05:76:73:2e:a1:1b:ff:97:fd:28:59:a3:1e:
03:b4:4b:c3:37:82:bc:9b:bf:83:57:f1:a5:d4:20:
08:e8:6f:2b:e0:1b:e3:3f:b7:08:03:48:a5:06:ed:
20:39:e6:28:21:7b:69:de:5d:1c:13:1b:1c:f1:22:
44:dc:ab:51:5e:89:4f:ed:dc:97:64:2d:09:08:0e:
0f:17:8c:9d:ab:51:35:5f:da:c9:4e:c1:2a:ce:5c:
2e:77:65:b1:f7:30:da:e9:15:3b:c8:55:79:e2:7c:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:71:6F:6B:47:20:21:6F:1C:E5:E7:9A:AC:B8:5D:A8:BD:45:A4:CD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KHFva0cgIW8c5eearLhdqL1FpM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1d0::/44
Signature Algorithm: sha256WithRSAEncryption
70:ec:9b:4e:fd:10:17:52:67:1b:10:fa:4e:7c:37:9b:e4:de:
68:f7:c3:17:86:f8:45:cc:84:ff:c4:4c:0a:94:c7:eb:83:3f:
49:0a:ff:ae:e5:4f:7d:f0:3c:eb:c7:2a:67:3e:6c:44:bb:b2:
47:82:82:bf:a8:47:70:1f:03:c5:13:4c:03:28:14:5f:e0:28:
e6:c3:8e:8c:14:82:8a:58:61:db:a2:d8:f1:a0:07:e3:d2:fb:
49:aa:a2:a1:30:dd:a7:69:3d:23:76:95:b1:54:30:62:a6:60:
77:6b:76:ac:7c:dc:77:56:76:e7:a6:2e:52:27:61:c8:2b:44:
1d:3e:02:5a:6a:53:1c:c2:32:9f:b7:2b:1d:b1:6c:69:32:b7:
90:bd:64:ee:ba:f3:16:f7:0b:0b:13:82:80:00:b7:47:a9:6a:
9f:e4:bd:93:ec:bd:31:da:53:16:9b:f7:cc:60:a4:c8:45:ff:
42:8e:22:85:ae:7f:ea:6f:81:00:b8:48:b4:ee:9f:56:e2:37:
98:46:d2:ec:45:ae:87:10:a6:72:98:53:60:cb:8d:23:97:6d:
6a:d4:26:20:62:29:72:dc:55:0b:57:2c:c2:df:d6:53:14:b0:
cb:06:0e:ee:48:8b:5e:6c:d9:6a:76:66:39:8d:56:cc:c1:36:
42:a1:d8:e9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvNyFSY2/UsADiWpKPBgrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODcxNmY2YjQ3MjAyMTZmMWNlNWU3OWFhY2I4NWRhOGJkNDVhNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIXk6qRlLbFiltPxEcSlARP07ovK
nWtsjBuyUrDtBSUFJvbP1WBhJPke7fk6mC8pMWZrAUlUu8oIU65yeqUY2Rod5Whs
w5ISfWKgWfUOg3PhHD2fe7TYM1UYlWDQYxTzwIUSsHVva9zp+tmHTenN1ASCheHa
raHcmGHJOpLyGLhlWf5+hMkG51+wgBlPv6BYNeAf3djikwV2cy6hG/+X/ShZox4D
tEvDN4K8m7+DV/Gl1CAI6G8r4BvjP7cIA0ilBu0gOeYoIXtp3l0cExsc8SJE3KtR
XolP7dyXZC0JCA4PF4ydq1E1X9rJTsEqzlwud2Wx9zDa6RU7yFV54nzNNwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFChxb2tHICFvHOXnmqy4Xai9RaTNMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvS0hGdmEwY2dJVzhjNWVlYXJMaGRxTDFGcE0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwHQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBw7JtO/RAXUmcbEPpOfDeb5N5o98MXhvhFzIT/
xEwKlMfrgz9JCv+u5U998DzrxypnPmxEu7JHgoK/qEdwHwPFE0wDKBRf4Cjmw46M
FIKKWGHbotjxoAfj0vtJqqKhMN2naT0jdpWxVDBipmB3a3asfNx3Vnbnpi5SJ2HI
K0QdPgJaalMcwjKftysdsWxpMreQvWTuuvMW9wsLE4KAALdHqWqf5L2T7L0x2lMW
m/fMYKTIRf9CjiKFrn/qb4EAuEi07p9W4jeYRtLsRa6HEKZymFNgy40jl21q1CYg
Yily3FULVyzC39ZTFLDLBg7uSItebNlqdmY5jVbMwTZCodjp
-----END CERTIFICATE-----
Generated at Thu Apr 25 23:03:04 2024 by rpki-client on console-fra.rpki-client.org