Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5SiHO2E_WRqTC89cY8huKwDQq9s.roa
File: 5SiHO2E_WRqTC89cY8huKwDQq9s.roa (raw, json)
Hash identifier: t1oMIwjbvvkyewmUa3GysfqgP7Y8vb6fwe6R7IknCMY=
Subject key identifier: E5:28:87:3B:61:3F:59:1A:93:0B:CF:5C:63:C8:6E:2B:00:D0:AB:DB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD2F85AC96C9649F692337ABFE83B4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5SiHO2E_WRqTC89cY8huKwDQq9s.roa
Signing time: Tue 02 Jan 2024 10:34:28 +0000
ROA not before: Tue 02 Jan 2024 10:34:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211042
IP address blocks: 2a0e:b107:14c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:2f:85:ac:96:c9:64:9f:69:23:37:ab:fe:83:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e528873b613f591a930bcf5c63c86e2b00d0abdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:68:7d:44:e7:2e:16:6f:b9:67:12:ce:63:
4f:aa:3c:8b:f5:29:2d:9c:c4:b4:0e:e0:40:5a:8e:
53:f0:1f:48:10:f9:05:83:cb:ce:fb:8c:18:a4:40:
55:c3:f5:74:fb:ae:bc:82:fa:68:30:68:08:73:89:
04:ac:02:50:de:5b:26:7f:8f:f2:18:f4:43:1c:df:
c0:12:b8:c0:a8:bb:86:fb:a0:e8:45:f5:47:19:95:
53:4b:27:30:5f:80:d6:d3:c7:56:b4:f7:10:f9:5d:
b9:bd:b1:27:80:09:c4:fc:d6:1a:17:7b:b4:26:16:
8b:ec:17:de:b6:e2:7e:51:fe:0c:9f:8b:1d:27:92:
cf:ef:c2:60:e3:c9:5a:35:29:45:9e:0b:3e:f1:13:
70:40:bf:d7:e0:ed:3c:ef:3d:4b:e6:75:6c:1b:7d:
11:8f:39:1a:32:27:88:02:d4:b1:33:c1:2b:80:47:
e2:39:e9:76:da:85:77:ce:5f:41:92:d3:f9:44:a6:
23:82:a4:63:1c:ca:d1:f3:33:2d:1f:e1:c9:d9:47:
36:44:b9:b3:f2:59:16:50:50:6f:82:da:28:6b:aa:
1f:3c:a0:26:05:ab:8f:4e:7a:37:0c:93:9c:d6:8e:
73:2e:ee:d9:81:71:2b:e9:24:0f:27:9b:ec:ac:64:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:28:87:3B:61:3F:59:1A:93:0B:CF:5C:63:C8:6E:2B:00:D0:AB:DB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5SiHO2E_WRqTC89cY8huKwDQq9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:14c0::/44
Signature Algorithm: sha256WithRSAEncryption
84:f0:08:04:ea:74:76:30:b2:ea:8d:23:af:d3:47:1c:9e:fa:
d5:45:9b:4b:ac:14:be:6e:cc:87:91:dc:69:4c:0d:cd:56:91:
b8:0e:39:3e:ec:e7:7f:1b:fc:b2:45:10:20:95:fa:e5:79:78:
52:31:1f:51:8b:86:ac:35:cd:51:6e:f6:bc:8b:33:58:a3:79:
82:c5:3c:d3:2f:3d:22:b8:df:af:e9:70:2a:20:c4:7a:b2:5f:
0f:55:69:3a:64:66:f9:cf:40:65:c8:80:1e:6d:84:82:3c:74:
23:09:59:96:b6:db:36:95:99:55:63:1c:13:3c:f0:3d:a2:e8:
e5:79:dd:86:ae:d3:3d:bb:22:96:93:b4:fc:8d:7d:37:bd:87:
37:b5:48:06:f5:71:a4:3c:39:c4:22:04:1e:5b:71:ad:cb:4c:
29:bc:bb:6d:68:5a:64:f3:4d:8e:f9:27:a8:ea:52:ea:91:2b:
0c:f8:62:9c:81:cb:48:37:08:fa:0a:1b:1e:a4:dd:fd:01:2a:
dd:9a:f4:f8:24:8c:9b:67:ac:a4:7d:a9:23:01:e1:54:86:63:
bf:ee:4d:f2:20:03:b7:38:66:4d:2a:81:dd:36:88:2e:37:56:
e5:44:aa:8e:59:1a:dc:25:73:a0:86:6f:77:b3:07:36:1e:8d:
44:71:23:c3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvS+FrJbJZJ9pIzer/oO0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTI4ODczYjYxM2Y1OTFhOTMwYmNmNWM2M2M4NmUyYjAwZDBhYmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+9ofUTnLhZvuWcSzmNPqjyL9Skt
nMS0DuBAWo5T8B9IEPkFg8vO+4wYpEBVw/V0+668gvpoMGgIc4kErAJQ3lsmf4/y
GPRDHN/AErjAqLuG+6DoRfVHGZVTSycwX4DW08dWtPcQ+V25vbEngAnE/NYaF3u0
JhaL7BfetuJ+Uf4Mn4sdJ5LP78Jg48laNSlFngs+8RNwQL/X4O087z1L5nVsG30R
jzkaMieIAtSxM8ErgEfiOel22oV3zl9BktP5RKYjgqRjHMrR8zMtH+HJ2Uc2RLmz
8lkWUFBvgtooa6ofPKAmBauPTno3DJOc1o5zLu7ZgXEr6SQPJ5vsrGTt9QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOUohzthP1kakwvPXGPIbisA0KvbMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNVNpSE8yRV9XUnFUQzg5Y1k4aHVLd0RRcTlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxTA
MA0GCSqGSIb3DQEBCwUAA4IBAQCE8AgE6nR2MLLqjSOv00ccnvrVRZtLrBS+bsyH
kdxpTA3NVpG4Djk+7Od/G/yyRRAglfrleXhSMR9Ri4asNc1Rbva8izNYo3mCxTzT
Lz0iuN+v6XAqIMR6sl8PVWk6ZGb5z0BlyIAebYSCPHQjCVmWtts2lZlVYxwTPPA9
oujled2GrtM9uyKWk7T8jX03vYc3tUgG9XGkPDnEIgQeW3Gty0wpvLttaFpk802O
+Seo6lLqkSsM+GKcgctINwj6ChsepN39ASrdmvT4JIybZ6ykfakjAeFUhmO/7k3y
IAO3OGZNKoHdNoguN1blRKqOWRrcJXOghm93swc2Ho1EcSPD
-----END CERTIFICATE-----
Generated at Fri May 3 08:41:02 2024 by rpki-client on console-ams.rpki-client.org