Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ajHfRbUxyBV1aY4nTK2BPbaVpsk.roa
File: ajHfRbUxyBV1aY4nTK2BPbaVpsk.roa (raw, json)
Hash identifier: 6FpL1hUWDCboxmwyV4gq+0wQqg2Xcs9MXdGavzSZDq4=
Subject key identifier: 6A:31:DF:45:B5:31:C8:15:75:69:8E:27:4C:AD:81:3D:B6:95:A6:C9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018F214084B109F01FD80232E0816E373B52
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ajHfRbUxyBV1aY4nTK2BPbaVpsk.roa
Signing time: Sat 27 Apr 2024 20:30:27 +0000
ROA not before: Sat 27 Apr 2024 20:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216084
IP address blocks: 2a06:de01:200::/40 maxlen: 48
2a0e:97c0::/40 maxlen: 48
2a0e:97c0:ee0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:21:40:84:b1:09:f0:1f:d8:02:32:e0:81:6e:37:3b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 27 20:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a31df45b531c81575698e274cad813db695a6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:48:dc:6b:0a:40:5b:7e:be:1e:38:28:95:0b:
15:cb:61:06:86:ce:aa:eb:31:4c:84:5d:86:de:53:
af:b9:2f:f2:7c:ed:cb:b8:56:6c:a1:cf:61:50:92:
1b:9a:ce:80:09:62:36:0c:0e:c0:50:a3:58:80:9f:
bc:ec:e2:43:9b:92:7f:e1:7f:28:56:72:fc:3c:52:
8e:ba:8a:d3:0c:12:95:ed:bd:7c:a8:59:b9:46:e9:
10:c5:b2:d6:9a:e7:eb:8e:8a:b2:35:b6:dd:01:bf:
0a:22:24:af:98:f1:ae:68:c6:0f:1f:70:c7:97:f8:
c9:58:0e:af:58:3a:ea:bb:91:79:1c:d9:b0:10:99:
db:3d:a2:6d:60:d8:a8:84:ac:53:54:3a:fb:ba:62:
7a:41:48:7e:d7:d0:88:05:0d:b5:31:92:7f:0f:e7:
61:80:24:0e:69:39:a3:84:d9:70:ee:df:6c:02:17:
6b:9b:49:94:d4:1a:f2:b3:b8:ff:94:29:6a:47:90:
54:10:34:ec:32:f9:61:0f:d1:b2:1d:f8:d0:18:f9:
1a:e4:6b:48:5b:a3:bc:a0:b6:ac:18:ec:fa:2c:d2:
6b:f5:49:b8:5d:c7:9a:8d:82:d0:ca:4c:40:14:c5:
8f:3d:12:1c:f8:63:a2:dc:6e:0a:00:eb:72:5f:ff:
d2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:31:DF:45:B5:31:C8:15:75:69:8E:27:4C:AD:81:3D:B6:95:A6:C9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ajHfRbUxyBV1aY4nTK2BPbaVpsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:200::/40
2a0e:97c0::/40
2a0e:97c0:ee0::/44
Signature Algorithm: sha256WithRSAEncryption
3f:68:ea:a6:8d:4c:53:f2:82:22:70:9c:01:02:62:ca:6c:e8:
b4:b8:92:96:e7:a1:a4:1a:d9:f8:fb:7f:3b:36:22:de:92:32:
00:f1:4f:9a:37:f9:37:7c:9e:53:48:7f:1e:58:ff:df:04:ec:
5f:35:1a:a8:f1:02:35:d2:64:22:ff:db:36:d7:a8:98:b7:13:
da:e4:52:96:1f:59:8b:65:81:43:29:51:5d:ea:cc:80:03:d9:
c3:c7:5b:a3:20:4f:63:fe:9f:96:f2:71:07:5b:45:39:91:2d:
04:ed:31:15:30:ad:50:59:f7:ca:7c:e9:5f:60:d0:47:f6:bc:
e0:5f:03:3e:3d:85:bb:80:83:b2:9f:97:fd:e5:ec:b2:5a:cb:
f4:86:1e:c1:29:5e:5e:24:ac:d4:ab:b8:f8:e5:da:27:24:4f:
3d:7d:b3:0d:31:1a:2d:af:cc:0a:83:ab:10:48:bd:66:f6:65:
b8:ed:3d:f7:d1:21:38:07:b9:35:e2:ff:65:67:de:b8:78:2b:
80:0a:20:64:66:f1:4e:f3:eb:64:68:9f:b4:2d:83:2d:83:f0:
00:9a:5e:5d:ad:fd:56:98:20:d5:5a:60:7a:cb:0c:1e:98:b4:
78:e8:d3:c7:76:39:19:b9:59:4e:1b:78:79:81:df:f5:f2:6f:
fb:95:40:9b
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAY8hQISxCfAf2AIy4IFuNztSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwNDI3MjAzMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTMxZGY0NWI1MzFjODE1NzU2OThlMjc0Y2FkODEzZGI2OTVhNmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EjcawpAW36+HjgolQsVy2EGhs6q
6zFMhF2G3lOvuS/yfO3LuFZsoc9hUJIbms6ACWI2DA7AUKNYgJ+87OJDm5J/4X8o
VnL8PFKOuorTDBKV7b18qFm5RukQxbLWmufrjoqyNbbdAb8KIiSvmPGuaMYPH3DH
l/jJWA6vWDrqu5F5HNmwEJnbPaJtYNiohKxTVDr7umJ6QUh+19CIBQ21MZJ/D+dh
gCQOaTmjhNlw7t9sAhdrm0mU1Brys7j/lClqR5BUEDTsMvlhD9GyHfjQGPka5GtI
W6O8oLasGOz6LNJr9Um4XceajYLQykxAFMWPPRIc+GOi3G4KAOtyX//SpQIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFGox30W1McgVdWmOJ0ytgT22labJMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvYWpIZlJiVXh5QlYxYVk0blRLMkJQYmFWcHNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAAjAZAwYAKgbeAQID
BgAqDpfAAAMHBCoOl8AO4DANBgkqhkiG9w0BAQsFAAOCAQEAP2jqpo1MU/KCInCc
AQJiymzotLiSluehpBrZ+Pt/OzYi3pIyAPFPmjf5N3yeU0h/Hlj/3wTsXzUaqPEC
NdJkIv/bNteomLcT2uRSlh9Zi2WBQylRXerMgAPZw8dboyBPY/6flvJxB1tFOZEt
BO0xFTCtUFn3ynzpX2DQR/a84F8DPj2Fu4CDsp+X/eXsslrL9IYewSleXiSs1Ku4
+OXaJyRPPX2zDTEaLa/MCoOrEEi9ZvZluO0999EhOAe5NeL/ZWfeuHgrgAogZGbx
TvPrZGiftC2DLYPwAJpeXa39Vpgg1VpgessMHpi0eOjTx3Y5GblZTht4eYHf9fJv
+5VAmw==
-----END CERTIFICATE-----
Generated at Sun May 19 21:12:34 2024 by rpki-client on console-ams.rpki-client.org