Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2QAY0-Ssh9DkhiNe6lPHBG-lH5o.roa
File: 2QAY0-Ssh9DkhiNe6lPHBG-lH5o.roa (raw, json)
Hash identifier: PWj9/gxGyapG09Z1GN2DVIEl05EYiH+dLZ3ZoJH7D9g=
Subject key identifier: D9:00:18:D3:E4:AC:87:D0:E4:86:23:5E:EA:53:C7:04:6F:A5:1F:9A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCE21828AB3EA2C4E804CEF020879E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2QAY0-Ssh9DkhiNe6lPHBG-lH5o.roa
Signing time: Tue 02 Jan 2024 10:34:08 +0000
ROA not before: Tue 02 Jan 2024 10:34:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147041
IP address blocks: 2a10:cc44:100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e2:18:28:ab:3e:a2:c4:e8:04:ce:f0:20:87:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d90018d3e4ac87d0e486235eea53c7046fa51f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:35:cc:02:2a:06:db:04:10:72:e1:9d:f0:
f6:85:72:3a:a5:c3:aa:88:f8:44:a2:40:d9:04:df:
c3:3f:28:b7:96:f2:49:cd:ce:d8:e4:2c:a8:ec:00:
d1:15:fc:a6:03:5f:76:2e:f9:82:75:bc:10:c0:bf:
6f:36:7b:22:cb:c6:f9:53:0a:75:51:99:8c:6b:1a:
80:3b:7a:2a:08:ec:6e:37:d0:3c:fb:07:26:2f:c4:
2c:a6:3f:90:ba:9d:9e:52:77:89:49:60:46:7b:6c:
d9:99:65:0b:59:c4:47:72:e5:db:55:ef:36:7d:bf:
67:a8:6b:2e:33:16:86:dc:1c:94:93:e5:21:d3:2a:
26:dc:4b:54:b7:67:39:8f:d1:74:e4:fc:08:a8:39:
ab:f2:b6:30:f2:89:e0:0f:db:23:af:bb:3d:50:10:
26:b4:75:2b:bc:90:b9:0f:bc:61:c4:fe:d0:ad:b4:
c3:46:69:12:85:4a:c4:49:d7:8b:77:83:96:92:3b:
aa:6a:be:66:5f:0a:3d:00:17:fd:af:f8:ce:2f:3a:
a5:dc:82:18:a9:a0:d2:77:5f:fc:f3:50:66:aa:10:
6f:66:6d:9e:1f:be:64:28:ad:95:17:64:17:5c:c0:
b9:55:06:4c:c5:c9:9a:db:8e:1b:22:6f:66:c3:d5:
f7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:00:18:D3:E4:AC:87:D0:E4:86:23:5E:EA:53:C7:04:6F:A5:1F:9A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2QAY0-Ssh9DkhiNe6lPHBG-lH5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc44:100::/44
Signature Algorithm: sha256WithRSAEncryption
5f:60:d1:23:cd:d2:42:05:c6:39:4e:42:51:7e:7b:de:06:0e:
e0:53:31:de:5b:07:38:38:f1:6a:2d:5d:cd:fe:10:bf:0c:6c:
2e:1c:f7:af:c9:60:90:e2:00:0a:92:3d:65:46:e0:89:c9:91:
98:d7:8d:94:d7:19:cd:cd:ca:21:95:f4:ef:0f:c6:2c:91:6b:
4c:cd:fe:af:f7:38:be:d1:10:07:71:e9:86:88:ac:fb:c9:d3:
b3:6c:24:f2:5e:a0:1b:f3:fe:d1:e7:e7:95:60:0a:05:28:36:
4d:dc:30:dd:80:39:3d:1a:d9:42:15:60:7b:62:43:ff:03:32:
22:18:16:69:98:86:2e:4a:6e:23:25:f9:79:f1:6b:20:83:26:
06:1b:1a:64:c3:96:bc:61:70:96:ec:64:39:da:11:77:13:02:
63:82:e6:07:0c:a9:c6:33:17:70:4b:91:80:a3:9c:44:68:81:
a3:a8:26:2d:c0:08:ea:2d:f5:51:2f:d6:6d:f2:e4:68:cc:d1:
6d:44:1a:a1:eb:14:a3:7b:bc:1a:1b:c0:fc:a3:6d:7c:69:44:
bd:a6:0c:f1:15:30:19:0c:4c:9f:76:3f:48:fb:f1:d8:94:9e:
a4:6f:03:bd:5b:b7:69:7e:9c:5e:f8:a8:4c:de:3e:58:32:5f:
85:5c:f1:3f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvOIYKKs+osToBM7wIIeeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTAwMThkM2U0YWM4N2QwZTQ4NjIzNWVlYTUzYzcwNDZmYTUxZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwc1zAIqBtsEEHLhnfD2hXI6pcOq
iPhEokDZBN/DPyi3lvJJzc7Y5Cyo7ADRFfymA192LvmCdbwQwL9vNnsiy8b5Uwp1
UZmMaxqAO3oqCOxuN9A8+wcmL8Qspj+Qup2eUneJSWBGe2zZmWULWcRHcuXbVe82
fb9nqGsuMxaG3ByUk+Uh0yom3EtUt2c5j9F05PwIqDmr8rYw8ongD9sjr7s9UBAm
tHUrvJC5D7xhxP7QrbTDRmkShUrESdeLd4OWkjuqar5mXwo9ABf9r/jOLzql3IIY
qaDSd1/881BmqhBvZm2eH75kKK2VF2QXXMC5VQZMxcma244bIm9mw9X3KwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNkAGNPkrIfQ5IYjXupTxwRvpR+aMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvMlFBWTAtU3NoOURraGlOZTZsUEhCRy1sSDVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMRAEA
MA0GCSqGSIb3DQEBCwUAA4IBAQBfYNEjzdJCBcY5TkJRfnveBg7gUzHeWwc4OPFq
LV3N/hC/DGwuHPevyWCQ4gAKkj1lRuCJyZGY142U1xnNzcohlfTvD8YskWtMzf6v
9zi+0RAHcemGiKz7ydOzbCTyXqAb8/7R5+eVYAoFKDZN3DDdgDk9GtlCFWB7YkP/
AzIiGBZpmIYuSm4jJfl58WsggyYGGxpkw5a8YXCW7GQ52hF3EwJjguYHDKnGMxdw
S5GAo5xEaIGjqCYtwAjqLfVRL9Zt8uRozNFtRBqh6xSje7waG8D8o218aUS9pgzx
FTAZDEyfdj9I+/HYlJ6kbwO9W7dpfpxe+KhM3j5YMl+FXPE/
-----END CERTIFICATE-----
Generated at Fri May 3 09:37:03 2024 by rpki-client on console-fra.rpki-client.org