Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/xNTESewj1fWM6d1Hb8X-0SluzCQ.roa
File: xNTESewj1fWM6d1Hb8X-0SluzCQ.roa (raw, json)
Hash identifier: 51LTUjI4G8BVQEu/gP25/W1DcZEumrKJux9t340AIfA=
Subject key identifier: C4:D4:C4:49:EC:23:D5:F5:8C:E9:DD:47:6F:C5:FE:D1:29:6E:CC:24
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 018CC49368B81D6BF10F087F644D7A1FA21A
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/xNTESewj1fWM6d1Hb8X-0SluzCQ.roa
Signing time: Mon 01 Jan 2024 10:30:44 +0000
ROA not before: Mon 01 Jan 2024 10:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198448
IP address blocks: 2a10:4646:350::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:68:b8:1d:6b:f1:0f:08:7f:64:4d:7a:1f:a2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 1 10:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4d4c449ec23d5f58ce9dd476fc5fed1296ecc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:b2:5a:a9:6e:fa:ed:ed:27:0d:b8:55:74:
c9:eb:93:d5:26:b1:37:78:75:30:d7:28:95:36:24:
59:03:da:6b:85:25:b1:24:fa:a8:6c:f4:f1:8a:08:
33:10:2a:57:59:ad:55:cd:14:7b:d9:36:1d:54:7c:
18:e7:8f:e2:8e:f8:27:aa:56:11:9a:80:a8:3b:30:
86:19:c1:da:54:a3:d2:71:40:46:25:7e:86:0b:de:
81:51:37:95:da:b5:42:1a:fb:81:56:a4:58:47:78:
e0:da:ff:f6:17:9e:e5:fb:2c:f8:2d:8e:20:f8:bd:
96:74:fb:de:7c:1a:d2:cf:87:ae:5e:2d:89:75:94:
64:69:2a:b7:e0:a0:b9:4e:c2:10:6a:80:db:74:77:
16:31:fa:f9:15:81:6d:69:8a:d7:d8:e6:7f:2f:8e:
ef:c1:a1:73:37:e1:9f:e8:ae:3f:6a:d4:22:e1:ac:
cf:d8:d6:1d:23:ec:4d:50:67:b5:b6:9c:13:6c:62:
b3:c6:56:7f:c6:bb:04:12:bc:b3:23:e4:04:e6:c1:
7f:2e:24:d5:e5:89:bc:63:d3:ce:1b:74:39:2a:3e:
08:56:4e:3a:c1:3a:65:58:01:f7:35:ed:61:9c:58:
c5:a9:65:b1:73:8c:8e:5d:62:49:ae:21:73:33:85:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D4:C4:49:EC:23:D5:F5:8C:E9:DD:47:6F:C5:FE:D1:29:6E:CC:24
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/xNTESewj1fWM6d1Hb8X-0SluzCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:350::/44
Signature Algorithm: sha256WithRSAEncryption
7d:bf:95:64:6e:e1:b9:36:7b:f5:86:f8:f5:50:8d:c1:46:f7:
64:ba:79:c1:05:f3:2b:43:fe:80:99:d1:2f:19:91:74:0c:54:
73:de:13:32:cd:f4:04:b1:f7:3b:0d:d1:ff:1a:e6:1e:49:29:
38:dc:3a:ec:46:86:f1:da:57:d8:e4:20:6f:98:1f:50:dd:76:
48:14:28:4f:d6:9f:b7:93:a4:d5:24:81:5f:d2:24:88:3c:75:
a3:97:90:56:3c:ca:77:d2:39:66:8d:96:29:4e:12:16:dd:94:
8c:b3:72:a4:c5:fd:2c:58:73:b8:4f:70:e2:0c:9d:96:d1:35:
02:2a:c5:17:97:62:01:74:46:7e:65:d6:07:0a:9f:5f:87:22:
3c:c2:0a:72:42:b2:28:8c:fa:62:7d:57:88:1a:5f:88:68:64:
96:f8:bb:8a:94:1e:e3:38:3d:dd:f5:22:f2:15:be:43:99:11:
5c:da:13:38:c8:3f:5b:07:b5:0f:ae:33:89:8c:8e:01:26:93:
d1:83:1e:5e:8e:d7:1a:c4:a7:66:bc:a0:7b:c0:22:5f:cc:5c:
20:f6:48:13:6d:15:ad:de:2a:2c:0a:63:33:c9:1d:e9:5e:cd:
f0:de:1c:77:20:35:fa:88:fe:77:63:97:b8:33:84:d0:46:8d:
86:15:19:92
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzEk2i4HWvxDwh/ZE16H6IaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2
N2RmMDIwHhcNMjQwMTAxMTAzMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGQ0YzQ0OWVjMjNkNWY1OGNlOWRkNDc2ZmM1ZmVkMTI5NmVjYzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtouyWqlu+u3tJw24VXTJ65PVJrE3
eHUw1yiVNiRZA9prhSWxJPqobPTxiggzECpXWa1VzRR72TYdVHwY54/ijvgnqlYR
moCoOzCGGcHaVKPScUBGJX6GC96BUTeV2rVCGvuBVqRYR3jg2v/2F57l+yz4LY4g
+L2WdPvefBrSz4euXi2JdZRkaSq34KC5TsIQaoDbdHcWMfr5FYFtaYrX2OZ/L47v
waFzN+Gf6K4/atQi4azP2NYdI+xNUGe1tpwTbGKzxlZ/xrsEEryzI+QE5sF/LiTV
5Ym8Y9POG3Q5Kj4IVk46wTplWAH3Ne1hnFjFqWWxc4yOXWJJriFzM4X51wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMTUxEnsI9X1jOndR2/F/tEpbswkMB8GA1UdIwQY
MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEveE5URVNld2oxZldNNmQxSGI4WC0wU2x1ekNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgNQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB9v5VkbuG5Nnv1hvj1UI3BRvdkunnBBfMrQ/6A
mdEvGZF0DFRz3hMyzfQEsfc7DdH/GuYeSSk43DrsRobx2lfY5CBvmB9Q3XZIFChP
1p+3k6TVJIFf0iSIPHWjl5BWPMp30jlmjZYpThIW3ZSMs3Kkxf0sWHO4T3DiDJ2W
0TUCKsUXl2IBdEZ+ZdYHCp9fhyI8wgpyQrIojPpifVeIGl+IaGSW+LuKlB7jOD3d
9SLyFb5DmRFc2hM4yD9bB7UPrjOJjI4BJpPRgx5ejtcaxKdmvKB7wCJfzFwg9kgT
bRWt3iosCmMzyR3pXs3w3hx3IDX6iP53Y5e4M4TQRo2GFRmS
-----END CERTIFICATE-----
Generated at Sat Jun 8 08:51:36 2024 by rpki-client on console-ams.rpki-client.org