Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8cvJHfvrFZ8erm82__onPsGIhCs.roa
File: 8cvJHfvrFZ8erm82__onPsGIhCs.roa (raw, json)
Hash identifier: 13dcTbcEhAtxDnyO+qU8aevh3G10E1lOLw79nHoBy3g=
Subject key identifier: F1:CB:C9:1D:FB:EB:15:9F:1E:AE:6F:36:FF:FA:27:3E:C1:88:84:2B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCFB090859D45BA41A28E24DBDB406
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8cvJHfvrFZ8erm82__onPsGIhCs.roa
Signing time: Tue 02 Jan 2024 10:34:14 +0000
ROA not before: Tue 02 Jan 2024 10:34:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200993
IP address blocks: 2a0e:97c0:5d0::/44 maxlen: 48
2a0e:b107:279d::/48 maxlen: 48
2a0e:b107:279a::/48 maxlen: 48
2a0e:b107:278a::/48 maxlen: 48
2a0e:b107:279f::/48 maxlen: 48
2a0e:97c1::/40 maxlen: 48
2a0e:b107:2691::/48 maxlen: 48
2a0e:b107:2799::/48 maxlen: 48
2a0e:b107:279e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:fb:09:08:59:d4:5b:a4:1a:28:e2:4d:bd:b4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1cbc91dfbeb159f1eae6f36fffa273ec188842b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:37:10:80:2b:7b:45:67:73:2c:08:3d:a0:
80:14:eb:45:ad:7c:66:81:46:2b:0d:c0:e4:3a:9f:
7c:87:49:88:27:fb:ef:52:f5:b0:e7:12:aa:f5:86:
3d:ee:b0:58:1c:bf:a6:c1:0d:4b:b2:5a:1d:b7:8e:
0e:e3:1d:8e:0a:1b:de:27:f2:65:37:67:52:87:4e:
61:f4:23:bd:f1:75:89:2c:60:53:04:d6:4e:16:59:
11:58:5a:e2:a3:79:20:d2:93:43:8e:fb:dd:67:9c:
6f:f9:41:22:fc:a2:28:b1:4d:1d:07:c5:fd:63:55:
a5:ec:2a:4c:d1:b3:15:7e:50:2a:6c:f0:33:5b:15:
1b:e8:d7:d2:2a:af:91:40:52:26:f8:8a:45:d8:2b:
52:11:ef:2c:5f:e6:a5:24:6e:ad:39:e1:1e:84:eb:
d6:89:32:c6:8d:62:c2:c5:66:cf:ee:03:11:7a:b3:
af:95:03:c6:4b:9b:87:e6:88:7f:d7:b4:ab:85:f9:
fb:1a:45:20:f3:50:ce:55:2d:0f:95:93:ff:ae:d2:
ed:77:48:ba:11:c2:0c:9e:5c:ae:fb:6b:36:74:09:
44:0f:7e:dd:73:fc:82:93:ed:21:93:b9:68:38:80:
cc:68:f8:82:fc:05:27:ab:39:e9:21:77:f6:de:14:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CB:C9:1D:FB:EB:15:9F:1E:AE:6F:36:FF:FA:27:3E:C1:88:84:2B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8cvJHfvrFZ8erm82__onPsGIhCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5d0::/44
2a0e:97c1::/40
2a0e:b107:2691::/48
2a0e:b107:278a::/48
2a0e:b107:2799::-2a0e:b107:279a:ffff:ffff:ffff:ffff:ffff
2a0e:b107:279d::-2a0e:b107:279f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4e:c5:ae:21:11:ee:91:a5:f8:0b:dd:d1:0e:19:cf:f3:22:a4:
33:89:ff:d3:fe:d7:24:e6:c6:dd:c0:68:28:3c:d1:b1:ad:78:
c9:ba:84:17:72:2c:b8:ed:10:33:42:4b:c2:79:6f:40:bc:be:
e8:1e:98:da:97:09:80:c3:ba:f2:38:df:2f:74:42:39:64:25:
54:a4:8e:45:00:2a:f3:1a:54:e6:56:ae:bd:b0:45:ae:58:59:
6f:35:f2:32:73:7f:2b:20:35:3a:cb:da:0f:3b:e6:44:b6:5d:
0b:0c:35:ae:08:d6:c2:69:26:10:c1:39:d7:ac:16:ae:18:94:
f4:49:b2:8a:fa:3c:40:06:a7:cd:f0:13:55:28:14:41:ed:89:
97:f4:64:fe:49:b4:3c:60:4e:fc:54:ad:f2:d9:4e:ac:43:2b:
08:c8:e3:c0:68:98:a2:7f:8b:0f:ad:57:95:46:2f:d0:31:e7:
c7:e8:1d:12:39:0f:18:42:71:6a:a3:6e:04:ea:81:43:a2:44:
07:d3:da:5e:7f:a1:ad:46:40:5f:b3:05:6c:4b:7f:1f:b0:82:
6e:2c:6d:a5:6e:b8:62:15:2f:4c:2d:ab:ed:da:7c:82:43:9b:
10:9b:10:01:12:fb:09:98:b9:0e:24:70:b1:a3:be:ca:74:22:
08:55:c6:54
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAYzJvPsJCFnUW6QaKOJNvbQGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWNiYzkxZGZiZWIxNTlmMWVhZTZmMzZmZmZhMjczZWMxODg4NDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtk3EIAre0VncywIPaCAFOtFrXxm
gUYrDcDkOp98h0mIJ/vvUvWw5xKq9YY97rBYHL+mwQ1Lslodt44O4x2OChveJ/Jl
N2dSh05h9CO98XWJLGBTBNZOFlkRWFrio3kg0pNDjvvdZ5xv+UEi/KIosU0dB8X9
Y1Wl7CpM0bMVflAqbPAzWxUb6NfSKq+RQFIm+IpF2CtSEe8sX+alJG6tOeEehOvW
iTLGjWLCxWbP7gMRerOvlQPGS5uH5oh/17Srhfn7GkUg81DOVS0PlZP/rtLtd0i6
EcIMnlyu+2s2dAlED37dc/yCk+0hk7loOIDMaPiC/AUnqznpIXf23hQUSwIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFPHLyR376xWfHq5vNv/6Jz7BiIQrMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvOGN2SkhmdnJGWjhlcm04Ml9fb25Qc0dJaENzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBRBAIAAjBLAwcEKg6XwAXQ
AwYAKg6XwQADBwAqDrEHJpEDBwAqDrEHJ4owEgMHACoOsQcnmQMHACoOsQcnmjAS
AwcAKg6xByedAwcFKg6xByeAMA0GCSqGSIb3DQEBCwUAA4IBAQBOxa4hEe6RpfgL
3dEOGc/zIqQzif/T/tck5sbdwGgoPNGxrXjJuoQXciy47RAzQkvCeW9AvL7oHpja
lwmAw7ryON8vdEI5ZCVUpI5FACrzGlTmVq69sEWuWFlvNfIyc38rIDU6y9oPO+ZE
tl0LDDWuCNbCaSYQwTnXrBauGJT0SbKK+jxABqfN8BNVKBRB7YmX9GT+SbQ8YE78
VK3y2U6sQysIyOPAaJiif4sPrVeVRi/QMefH6B0SOQ8YQnFqo24E6oFDokQH09pe
f6GtRkBfswVsS38fsIJuLG2lbrhiFS9MLavt2nyCQ5sQmxABEvsJmLkOJHCxo77K
dCIIVcZU
-----END CERTIFICATE-----
Generated at Fri May 3 11:06:40 2024 by rpki-client on console-ams.rpki-client.org