Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7Op4oJDOC457uJCW-pVl1rsbIcQ.roa
File: 7Op4oJDOC457uJCW-pVl1rsbIcQ.roa (raw, json)
Hash identifier: Y0mM6HViqGXusf1czGe+8mkRhijlGXj6vpzIsRL1fgE=
Subject key identifier: EC:EA:78:A0:90:CE:0B:8E:7B:B8:90:96:FA:95:65:D6:BB:1B:21:C4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01924E359DB909119CAB423B5079D5A3F158
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7Op4oJDOC457uJCW-pVl1rsbIcQ.roa
Signing time: Wed 02 Oct 2024 17:09:49 +0000
ROA not before: Wed 02 Oct 2024 17:09:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214243
IP address blocks: 2a06:de00:7f1::/48 maxlen: 48
2a0e:97c0:4c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4e:35:9d:b9:09:11:9c:ab:42:3b:50:79:d5:a3:f1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 2 17:09:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecea78a090ce0b8e7bb89096fa9565d6bb1b21c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:ba:7a:7a:b1:3b:06:36:0c:f5:24:2a:71:
9c:dc:94:c7:a7:5e:b4:99:ab:21:f8:c7:35:0d:1e:
f0:7c:f6:27:90:26:b3:eb:4a:c0:0a:94:8f:35:8d:
4f:98:8b:8a:22:fa:1e:24:60:ba:74:34:3b:81:38:
51:9f:28:69:c1:1c:32:ea:98:95:85:f0:cb:6e:d4:
74:ce:82:07:c9:8d:68:5a:f2:7e:ed:1b:9e:d7:ee:
d4:9b:35:da:fb:90:a8:42:99:0f:7c:89:b9:64:bd:
89:6b:d8:14:8d:44:13:76:ab:b0:8c:cf:a4:d8:f6:
15:dc:bc:8b:16:85:ca:d2:c3:1b:7c:19:ce:f4:4a:
14:33:fc:5d:df:af:88:82:e8:0a:c6:21:18:48:8f:
a9:c2:4c:c0:c2:75:35:de:a0:d5:94:c2:7f:28:89:
09:fa:13:6b:6b:08:7b:be:43:be:75:81:e7:30:27:
ca:7d:84:f7:b1:eb:86:38:02:98:59:4d:ce:da:91:
f0:d8:42:13:00:6b:83:97:25:ac:cd:ca:9d:34:df:
9e:9f:f8:ad:48:3f:b0:3a:32:cd:60:eb:ee:9b:fd:
29:b8:63:e8:ec:be:11:9c:d7:68:50:e7:3e:0b:ac:
d1:c0:16:77:73:c8:32:2f:9e:6e:b4:29:e8:3c:8b:
49:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EA:78:A0:90:CE:0B:8E:7B:B8:90:96:FA:95:65:D6:BB:1B:21:C4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7Op4oJDOC457uJCW-pVl1rsbIcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:7f1::/48
2a0e:97c0:4c1::/48
Signature Algorithm: sha256WithRSAEncryption
08:50:68:75:c7:8a:f6:a2:60:21:de:ff:99:81:0e:86:fa:b1:
c0:37:b9:9b:e0:a3:57:0d:86:ed:a7:f5:9a:d8:9c:e1:e8:55:
da:a2:ff:3b:ab:e4:15:1b:98:db:ff:69:7e:ff:8a:d7:34:a1:
ff:2a:c9:ba:ce:86:96:86:f2:8d:8f:13:3a:d6:ae:80:41:fc:
20:85:81:86:80:c4:ed:be:3e:11:73:e2:e0:48:fd:e9:48:ea:
c8:8a:96:aa:5a:df:53:d8:73:1f:a7:a6:18:e5:13:f2:3e:cf:
c6:c9:50:c3:6d:d3:6f:c2:6b:22:0b:56:92:37:c7:1c:31:d1:
94:37:78:5e:c3:4e:b3:e7:44:f0:0d:6e:f7:a1:bc:18:68:c4:
ab:b1:66:58:f6:15:5f:25:7d:78:34:58:47:ac:da:65:4a:5e:
0f:d7:37:d3:6c:77:75:b1:f7:fc:20:e1:c0:fe:73:04:28:f5:
d6:fb:75:6a:e9:81:aa:b2:f7:21:8d:a7:36:aa:b9:26:da:be:
7f:69:4e:63:d8:d7:f4:a6:f3:eb:10:76:f3:91:93:ab:98:b1:
ab:b1:50:03:db:d8:67:10:53:1c:5f:63:9f:09:5a:9e:62:e7:
37:e4:d5:12:33:17:80:43:38:fc:f6:e4:aa:a0:7e:00:de:19:
c4:17:00:97
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZJONZ25CRGcq0I7UHnVo/FYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQxMDAyMTcwOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2VhNzhhMDkwY2UwYjhlN2JiODkwOTZmYTk1NjVkNmJiMWIyMWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvny6enqxOwY2DPUkKnGc3JTHp160
mash+Mc1DR7wfPYnkCaz60rACpSPNY1PmIuKIvoeJGC6dDQ7gThRnyhpwRwy6piV
hfDLbtR0zoIHyY1oWvJ+7Rue1+7UmzXa+5CoQpkPfIm5ZL2Ja9gUjUQTdquwjM+k
2PYV3LyLFoXK0sMbfBnO9EoUM/xd36+IgugKxiEYSI+pwkzAwnU13qDVlMJ/KIkJ
+hNrawh7vkO+dYHnMCfKfYT3seuGOAKYWU3O2pHw2EITAGuDlyWszcqdNN+en/it
SD+wOjLNYOvum/0puGPo7L4RnNdoUOc+C6zRwBZ3c8gyL55utCnoPItJVQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOzqeKCQzguOe7iQlvqVZda7GyHEMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvN09wNG9KRE9DNDU3dUpDVy1wVmwxcnNiSWNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgbeAAfx
AwcAKg6XwATBMA0GCSqGSIb3DQEBCwUAA4IBAQAIUGh1x4r2omAh3v+ZgQ6G+rHA
N7mb4KNXDYbtp/Wa2Jzh6FXaov87q+QVG5jb/2l+/4rXNKH/Ksm6zoaWhvKNjxM6
1q6AQfwghYGGgMTtvj4Rc+LgSP3pSOrIipaqWt9T2HMfp6YY5RPyPs/GyVDDbdNv
wmsiC1aSN8ccMdGUN3hew06z50TwDW73obwYaMSrsWZY9hVfJX14NFhHrNplSl4P
1zfTbHd1sff8IOHA/nMEKPXW+3Vq6YGqsvchjac2qrkm2r5/aU5j2Nf0pvPrEHbz
kZOrmLGrsVAD29hnEFMcX2OfCVqeYuc35NUSMxeAQzj89uSqoH4A3hnEFwCX
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:29 2024 by rpki-client on console-fra.rpki-client.org