Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7iQ4HRBb0oJtcJdP85QPekWcN7k.roa
File: 7iQ4HRBb0oJtcJdP85QPekWcN7k.roa (raw, json)
Hash identifier: hvjnt7Wc913PIz1tPfHCUOhbq1SvyY+1kfCjB+UyDV4=
Subject key identifier: EE:24:38:1D:10:5B:D2:82:6D:70:97:4F:F3:94:0F:7A:45:9C:37:B9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018DFBB65C378B70CD75D68DF6E7906F930E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7iQ4HRBb0oJtcJdP85QPekWcN7k.roa
Signing time: Fri 01 Mar 2024 20:30:48 +0000
ROA not before: Fri 01 Mar 2024 20:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212359
IP address blocks: 2a0e:b107:1340::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fb:b6:5c:37:8b:70:cd:75:d6:8d:f6:e7:90:6f:93:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 1 20:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee24381d105bd2826d70974ff3940f7a459c37b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f9:d3:28:a9:5d:fc:97:2e:86:f5:e4:f7:9c:
eb:12:f7:3d:79:8e:06:c1:1e:73:4c:c6:48:3e:6e:
c4:83:0d:71:4e:47:b1:8e:90:1a:4b:d8:1d:de:ba:
3c:ed:1c:3b:4d:fb:d1:c2:ac:a3:33:4e:44:70:dc:
de:be:35:0c:a6:94:43:a3:c3:d7:44:9b:ef:a7:12:
b1:79:5c:19:8a:56:53:9d:1b:2d:dd:87:4c:62:4b:
5d:84:30:92:31:f6:b4:d0:25:8f:2f:a2:d1:34:3d:
2f:08:1d:84:f8:b2:fa:c1:b6:f6:c8:2a:1e:4e:e2:
23:85:27:e5:dd:d2:65:a8:02:8d:ca:96:1d:7f:54:
69:e0:37:41:43:4e:98:cb:3b:15:c0:e0:fe:b7:15:
52:b7:04:dc:50:10:db:5c:dc:95:2e:82:8d:1b:05:
7d:34:ab:e1:9c:fd:0f:6d:7e:bf:7a:6d:66:10:bd:
ea:9a:c6:3e:62:ce:07:6e:ec:a6:25:bc:3d:bf:6d:
4e:66:5b:cb:1d:60:bc:fa:17:85:dd:c9:1d:31:52:
3d:11:c5:85:da:96:d0:7a:03:35:32:93:38:2f:ed:
39:bb:33:1e:2a:d8:e1:07:d0:29:fb:ba:e4:e3:3f:
d8:0b:23:e4:c1:7f:41:62:f6:22:85:48:fe:94:8c:
0d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:24:38:1D:10:5B:D2:82:6D:70:97:4F:F3:94:0F:7A:45:9C:37:B9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7iQ4HRBb0oJtcJdP85QPekWcN7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1340::/44
Signature Algorithm: sha256WithRSAEncryption
58:69:d5:96:9b:fc:c4:65:b0:dd:16:81:89:7c:f5:d7:7a:4d:
e0:71:be:ca:6e:f1:9d:8f:f1:3b:da:41:78:c9:5e:7f:58:79:
a0:bb:58:15:3a:65:62:79:d2:83:88:94:40:04:0a:11:a2:1c:
15:1d:79:27:e8:ac:fb:cb:57:6f:dd:5e:37:e6:85:41:5c:b1:
16:81:d5:b8:bd:54:31:01:89:88:bb:6b:68:6e:fa:26:97:d3:
32:4d:69:ef:ce:05:4c:2a:1a:57:de:56:74:3d:39:7d:59:03:
ba:7b:62:98:96:a0:9b:c7:e9:61:7a:be:ec:dd:71:ea:f4:b4:
7d:55:cc:5f:6a:58:44:67:11:db:b9:4c:06:a5:34:0a:5d:3f:
9d:4e:68:07:df:34:85:ee:41:a8:62:fc:d3:43:34:57:60:ab:
31:73:c9:a9:1d:f7:77:eb:fb:6a:76:59:cb:20:7d:95:17:46:
be:e8:5a:e2:48:98:10:ab:6d:ad:7f:f1:16:a1:84:fa:9d:81:
c5:be:55:bd:5a:c5:ef:f1:d1:b7:c6:8e:ca:dc:42:29:11:fe:
01:a4:1c:bb:0c:45:5c:8c:72:fe:9b:dd:d7:33:44:fe:e4:2f:
ad:40:60:0b:5b:0d:e4:c3:52:5f:5d:e3:8f:00:31:bd:51:28:
81:a3:81:ad
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY37tlw3i3DNddaN9ueQb5MOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMzAxMjAzMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTI0MzgxZDEwNWJkMjgyNmQ3MDk3NGZmMzk0MGY3YTQ1OWMzN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fnTKKld/JcuhvXk95zrEvc9eY4G
wR5zTMZIPm7Egw1xTkexjpAaS9gd3ro87Rw7TfvRwqyjM05EcNzevjUMppRDo8PX
RJvvpxKxeVwZilZTnRst3YdMYktdhDCSMfa00CWPL6LRND0vCB2E+LL6wbb2yCoe
TuIjhSfl3dJlqAKNypYdf1Rp4DdBQ06YyzsVwOD+txVStwTcUBDbXNyVLoKNGwV9
NKvhnP0PbX6/em1mEL3qmsY+Ys4HbuymJbw9v21OZlvLHWC8+heF3ckdMVI9EcWF
2pbQegM1MpM4L+05uzMeKtjhB9Ap+7rk4z/YCyPkwX9BYvYihUj+lIwNNwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO4kOB0QW9KCbXCXT/OUD3pFnDe5MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvN2lRNEhSQmIwb0p0Y0pkUDg1UVBla1djTjdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxNA
MA0GCSqGSIb3DQEBCwUAA4IBAQBYadWWm/zEZbDdFoGJfPXXek3gcb7KbvGdj/E7
2kF4yV5/WHmgu1gVOmViedKDiJRABAoRohwVHXkn6Kz7y1dv3V435oVBXLEWgdW4
vVQxAYmIu2tobvoml9MyTWnvzgVMKhpX3lZ0PTl9WQO6e2KYlqCbx+lher7s3XHq
9LR9VcxfalhEZxHbuUwGpTQKXT+dTmgH3zSF7kGoYvzTQzRXYKsxc8mpHfd36/tq
dlnLIH2VF0a+6FriSJgQq22tf/EWoYT6nYHFvlW9WsXv8dG3xo7K3EIpEf4BpBy7
DEVcjHL+m93XM0T+5C+tQGALWw3kw1JfXeOPADG9USiBo4Gt
-----END CERTIFICATE-----
Generated at Fri May 3 05:22:00 2024 by rpki-client on console-fra.rpki-client.org