Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0etLmoix5Un8K9NGnVKLWKkh800.roa
File: 0etLmoix5Un8K9NGnVKLWKkh800.roa (raw, json)
Hash identifier: 5KMh7akyIFQMdK3QEdg95yiMlMwufn4zxplecqpdR00=
Subject key identifier: D1:EB:4B:9A:88:B1:E5:49:FC:2B:D3:46:9D:52:8B:58:A9:21:F3:4D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD348D740C01D03FE7C37DEC66E2F3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0etLmoix5Un8K9NGnVKLWKkh800.roa
Signing time: Tue 02 Jan 2024 10:34:29 +0000
ROA not before: Tue 02 Jan 2024 10:34:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211350
IP address blocks: 2a0e:97c0:1c8::/48 maxlen: 48
2a0e:97c0:1c0::/45 maxlen: 48
2a0e:b107:1668::/45 maxlen: 48
2a0e:b107:1660::/45 maxlen: 48
2a0e:b107:1670::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:34:8d:74:0c:01:d0:3f:e7:c3:7d:ec:66:e2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1eb4b9a88b1e549fc2bd3469d528b58a921f34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:13:37:b3:64:7b:29:35:c3:92:92:d9:83:70:
c3:81:ec:68:67:39:cc:0c:c8:46:d7:dc:3b:6d:0b:
f2:97:a3:2a:4f:48:da:5c:59:33:92:32:1e:0d:8f:
42:66:b5:16:ad:70:19:91:93:d5:d0:36:1f:27:68:
64:cb:a6:06:81:9e:0e:35:ee:09:e6:ec:b6:27:c2:
2b:65:2b:61:0d:1b:84:05:cc:99:85:01:07:6e:1a:
0b:fb:fc:e4:c8:8b:a6:2a:36:1b:05:c8:01:29:19:
16:9b:95:36:4d:1a:f5:8d:bc:8f:db:da:13:88:2c:
64:8e:9d:48:80:19:a5:00:c3:21:44:7f:dd:f7:09:
70:92:fd:17:9d:49:a9:f9:ec:01:6b:65:34:99:db:
52:c4:1f:d2:99:0b:e6:f5:80:a4:ee:ab:b4:e6:fa:
4f:d2:65:0b:45:d5:1e:ef:50:86:b8:61:ce:78:d9:
62:80:fa:a4:63:ea:84:9c:c9:bf:f8:e7:06:36:6d:
76:63:7b:49:ed:9f:a3:04:2a:99:a5:2f:85:f4:53:
2c:64:8e:6c:74:00:c9:ce:a5:10:61:63:54:a1:a7:
d7:a4:ca:58:ed:83:2c:b5:da:df:80:cf:1b:83:6f:
e6:f4:1d:89:ea:85:94:83:f9:11:ce:bd:3e:0d:e2:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EB:4B:9A:88:B1:E5:49:FC:2B:D3:46:9D:52:8B:58:A9:21:F3:4D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0etLmoix5Un8K9NGnVKLWKkh800.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:1c0::-2a0e:97c0:1c8:ffff:ffff:ffff:ffff:ffff
2a0e:b107:1660::-2a0e:b107:1677:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5e:83:d5:a2:c5:e9:35:84:01:69:67:ed:b0:00:31:6a:49:9f:
95:7e:32:99:1c:7c:f8:2d:c7:ae:95:4b:f3:ed:76:ca:d9:73:
3f:4c:7c:b9:bf:c7:da:06:e6:6b:8e:2f:4e:55:5c:aa:af:14:
eb:98:f0:ef:10:69:42:39:15:43:24:82:8d:01:47:d2:86:19:
dd:24:3f:d1:e2:78:b5:e7:b8:2b:30:4b:13:d5:cb:82:01:c8:
af:6c:4f:59:e1:3d:f8:de:2b:b5:c9:9c:07:5a:9b:82:a9:78:
70:4e:02:ea:7a:6b:66:de:71:e5:af:ce:6b:32:7d:ed:19:5e:
4c:a4:86:9d:06:4a:2e:4d:51:12:5f:78:d0:35:1b:d2:75:fb:
f5:7c:9c:73:ff:f1:47:69:25:31:89:59:82:61:48:0f:27:6a:
28:ad:4f:f1:ed:10:db:88:0a:92:66:d8:d3:6d:7a:54:c0:b1:
39:9d:e9:5e:d5:78:b6:b9:d8:de:4f:83:93:d4:28:66:9d:89:
29:05:44:a6:0b:cc:72:7d:70:5a:fc:d0:5a:04:c4:13:26:7d:
65:e7:23:06:93:5c:d0:f1:0e:77:d8:23:e2:57:1a:e3:36:ac:
21:73:69:04:3a:03:e7:de:4e:f5:2f:69:9b:87:c7:9c:02:87:
b5:cc:6c:1d
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYzJvTSNdAwB0D/nw33sZuLzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWViNGI5YTg4YjFlNTQ5ZmMyYmQzNDY5ZDUyOGI1OGE5MjFmMzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBM3s2R7KTXDkpLZg3DDgexoZznM
DMhG19w7bQvyl6MqT0jaXFkzkjIeDY9CZrUWrXAZkZPV0DYfJ2hky6YGgZ4ONe4J
5uy2J8IrZSthDRuEBcyZhQEHbhoL+/zkyIumKjYbBcgBKRkWm5U2TRr1jbyP29oT
iCxkjp1IgBmlAMMhRH/d9wlwkv0XnUmp+ewBa2U0mdtSxB/SmQvm9YCk7qu05vpP
0mULRdUe71CGuGHOeNligPqkY+qEnMm/+OcGNm12Y3tJ7Z+jBCqZpS+F9FMsZI5s
dADJzqUQYWNUoafXpMpY7YMstdrfgM8bg2/m9B2J6oWUg/kRzr0+DeJb2wIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFNHrS5qIseVJ/CvTRp1Si1ipIfNNMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvMGV0TG1vaXg1VW44SzlOR25WS0xXS2toODAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAAjAoMBIDBwYqDpfA
AcADBwAqDpfAAcgwEgMHBSoOsQcWYAMHAyoOsQcWcDANBgkqhkiG9w0BAQsFAAOC
AQEAXoPVosXpNYQBaWftsAAxakmflX4ymRx8+C3HrpVL8+12ytlzP0x8ub/H2gbm
a44vTlVcqq8U65jw7xBpQjkVQySCjQFH0oYZ3SQ/0eJ4tee4KzBLE9XLggHIr2xP
WeE9+N4rtcmcB1qbgql4cE4C6nprZt5x5a/OazJ97RleTKSGnQZKLk1REl940DUb
0nX79Xycc//xR2klMYlZgmFIDydqKK1P8e0Q24gKkmbY0216VMCxOZ3pXtV4trnY
3k+Dk9QoZp2JKQVEpgvMcn1wWvzQWgTEEyZ9ZecjBpNc0PEOd9gj4lca4zasIXNp
BDoD595O9S9pm4fHnAKHtcxsHQ==
-----END CERTIFICATE-----
Generated at Fri May 3 05:22:00 2024 by rpki-client on console-fra.rpki-client.org