Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3OM-w-vH47MKiuXt9IC5sNomH_M.roa
File: 3OM-w-vH47MKiuXt9IC5sNomH_M.roa (raw, json)
Hash identifier: KTSMgw1DlmhaKqudEJJ5FNACnX15bEKEhte3JjLbrA8=
Subject key identifier: DC:E3:3E:C3:EB:C7:E3:B3:0A:8A:E5:ED:F4:80:B9:B0:DA:26:1F:F3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD4DB635A37C0FFD1B00DE209430D2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3OM-w-vH47MKiuXt9IC5sNomH_M.roa
Signing time: Tue 02 Jan 2024 10:34:35 +0000
ROA not before: Tue 02 Jan 2024 10:34:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213263
IP address blocks: 2a0e:b107:980::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:4d:b6:35:a3:7c:0f:fd:1b:00:de:20:94:30:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dce33ec3ebc7e3b30a8ae5edf480b9b0da261ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dd:bf:52:a9:41:ef:4f:0b:23:6d:06:c0:3b:
ff:a2:d5:3b:74:19:35:c7:e8:b3:14:5b:02:f5:db:
e0:23:53:02:28:50:73:6d:54:e9:56:dc:58:92:14:
8a:32:44:cc:03:f3:21:1e:b2:7e:8f:9a:5c:ae:b4:
63:8f:26:bb:68:4b:35:4d:58:e1:4f:96:86:5e:9c:
40:1e:22:fd:16:10:58:c6:41:b3:57:c0:7c:54:7d:
d7:73:92:f0:bd:f8:ef:c8:25:43:a2:98:f8:67:7c:
90:c1:57:b1:54:0e:da:91:bb:6a:8e:0b:26:b3:8b:
a5:a5:81:90:8b:ab:15:a8:97:66:9d:f4:79:4b:13:
90:54:d0:d6:bb:bc:f2:81:58:1e:8d:27:81:be:0e:
2e:dc:dd:00:a8:a2:2c:b9:c7:cf:60:53:2e:80:46:
d3:9b:56:79:b6:45:7f:94:d5:1e:da:88:b1:c7:0b:
db:4f:f8:75:21:58:bf:d8:93:29:9e:a9:52:ac:0d:
3c:a6:ba:09:bc:26:9a:9c:39:35:c8:d7:9f:c0:e1:
4a:34:a2:ca:1f:c0:45:5a:63:8b:1e:3d:10:bc:a0:
c2:1f:fc:05:72:43:91:e6:d5:a3:69:1d:fa:38:02:
cf:96:95:a7:3e:02:4f:22:6b:c2:05:38:69:d0:2f:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E3:3E:C3:EB:C7:E3:B3:0A:8A:E5:ED:F4:80:B9:B0:DA:26:1F:F3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3OM-w-vH47MKiuXt9IC5sNomH_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:980::/44
Signature Algorithm: sha256WithRSAEncryption
20:18:16:93:f2:f8:a6:d0:c0:66:a2:47:b2:d5:3f:50:a6:38:
a5:4d:ca:91:56:16:d8:fa:51:10:fa:03:e6:3e:c6:c8:65:ab:
30:53:82:e2:28:4f:4e:7d:6a:92:93:22:93:b7:dc:87:79:b4:
3f:08:af:d8:6b:01:b8:92:36:cf:88:fc:13:e6:60:d7:9a:e5:
5b:59:41:8c:9b:e9:79:60:61:92:70:03:39:a7:bf:c0:26:0d:
ee:03:6a:9d:06:28:85:a0:8e:97:b2:c1:61:e7:16:5f:00:aa:
1d:2b:02:1c:8c:9d:0a:e5:c3:bc:f2:59:3d:95:70:12:3a:58:
07:d5:b3:39:6f:dc:cd:0d:2c:8e:2c:f2:52:56:f3:b5:e0:19:
64:fc:49:96:c9:26:9d:b3:fc:be:34:da:e4:ce:44:af:4b:6e:
db:1a:d6:92:b6:e8:1d:37:75:63:aa:46:71:b7:a8:cd:3b:ee:
e6:bc:68:a0:e9:ee:99:ef:23:c3:75:38:7e:15:00:49:bc:3b:
04:c7:9a:f8:16:1b:3e:a1:2b:ad:70:a4:70:33:21:b7:63:84:
d0:84:df:c5:d5:27:10:e2:20:6b:79:79:87:15:b9:f8:22:7e:
47:ae:cd:c9:ac:0a:4c:5a:01:40:65:db:f4:1c:c6:9d:a0:a7:
aa:96:bb:46
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvU22NaN8D/0bAN4glDDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2UzM2VjM2ViYzdlM2IzMGE4YWU1ZWRmNDgwYjliMGRhMjYxZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN2/UqlB708LI20GwDv/otU7dBk1
x+izFFsC9dvgI1MCKFBzbVTpVtxYkhSKMkTMA/MhHrJ+j5pcrrRjjya7aEs1TVjh
T5aGXpxAHiL9FhBYxkGzV8B8VH3Xc5LwvfjvyCVDopj4Z3yQwVexVA7akbtqjgsm
s4ulpYGQi6sVqJdmnfR5SxOQVNDWu7zygVgejSeBvg4u3N0AqKIsucfPYFMugEbT
m1Z5tkV/lNUe2oixxwvbT/h1IVi/2JMpnqlSrA08proJvCaanDk1yNefwOFKNKLK
H8BFWmOLHj0QvKDCH/wFckOR5tWjaR36OALPlpWnPgJPImvCBThp0C+NzwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNzjPsPrx+OzCorl7fSAubDaJh/zMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvM09NLXctdkg0N01LaXVYdDlJQzVzTm9tSF9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwmA
MA0GCSqGSIb3DQEBCwUAA4IBAQAgGBaT8vim0MBmokey1T9QpjilTcqRVhbY+lEQ
+gPmPsbIZaswU4LiKE9OfWqSkyKTt9yHebQ/CK/YawG4kjbPiPwT5mDXmuVbWUGM
m+l5YGGScAM5p7/AJg3uA2qdBiiFoI6XssFh5xZfAKodKwIcjJ0K5cO88lk9lXAS
OlgH1bM5b9zNDSyOLPJSVvO14Blk/EmWySads/y+NNrkzkSvS27bGtaStugdN3Vj
qkZxt6jNO+7mvGig6e6Z7yPDdTh+FQBJvDsEx5r4Fhs+oSutcKRwMyG3Y4TQhN/F
1ScQ4iBreXmHFbn4In5Hrs3JrApMWgFAZdv0HMadoKeqlrtG
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:29 2024 by rpki-client on console-fra.rpki-client.org