Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9PeAoH6TsG-gu2saZ6aRyQezn5o.roa
File: 9PeAoH6TsG-gu2saZ6aRyQezn5o.roa (raw, json)
Hash identifier: dSgbU6qbIAzyk1ccGLUrOuq8HjFRSkBi7GdXM0Yf7/s=
Subject key identifier: F4:F7:80:A0:7E:93:B0:6F:A0:BB:6B:1A:67:A6:91:C9:07:B3:9F:9A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD078491110DA9044BB70D26239095
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9PeAoH6TsG-gu2saZ6aRyQezn5o.roa
Signing time: Tue 02 Jan 2024 10:34:17 +0000
ROA not before: Tue 02 Jan 2024 10:34:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204307
IP address blocks: 2a0e:b107:ac0::/48 maxlen: 48
2a0e:b107:ac2::/48 maxlen: 48
2a0f:e401:110::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:07:84:91:11:0d:a9:04:4b:b7:0d:26:23:90:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4f780a07e93b06fa0bb6b1a67a691c907b39f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:73:a0:3c:aa:a2:f7:bd:9d:66:90:fb:90:
87:35:94:aa:ce:dc:30:79:32:4e:0f:d1:09:83:de:
61:f1:07:2e:0a:89:2a:ea:e3:9a:98:44:74:c8:3a:
3e:37:3a:60:08:64:d8:27:48:01:93:1a:60:e3:88:
f6:c5:ff:77:19:b6:ae:7d:41:06:08:52:71:b9:d0:
83:68:fb:f6:19:62:25:ca:8f:8b:1c:f2:a5:ec:25:
7c:fc:be:81:35:19:5c:f2:c9:a2:58:ad:8e:8d:e7:
ff:cd:21:29:0c:17:f5:69:d0:7e:17:8c:7f:6e:a5:
9d:b1:c0:8a:9b:5a:0d:08:72:c8:69:87:7a:b7:11:
76:53:8e:f3:dc:f9:61:19:16:bf:5e:97:dc:87:7d:
54:bc:18:fd:57:6e:40:46:ab:76:46:91:92:4b:6d:
e3:46:1f:ff:01:bf:6d:a8:e3:a6:11:f8:6f:13:ef:
b0:91:97:c5:a5:4c:f6:28:ec:f8:48:e0:de:66:7e:
05:d1:75:eb:38:96:04:7c:80:f4:c6:1c:85:a3:8e:
bf:d9:d7:77:70:0f:37:8f:a9:e9:4f:89:05:7d:59:
ce:12:64:18:d7:bb:13:c8:e0:5d:c7:a9:d7:55:77:
09:68:61:bf:c8:db:c3:a7:7a:e5:83:95:d5:eb:41:
a7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F7:80:A0:7E:93:B0:6F:A0:BB:6B:1A:67:A6:91:C9:07:B3:9F:9A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9PeAoH6TsG-gu2saZ6aRyQezn5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:ac0::/48
2a0e:b107:ac2::/48
2a0f:e401:110::/44
Signature Algorithm: sha256WithRSAEncryption
3b:cb:24:93:c5:47:67:e4:13:24:1a:f4:7a:c8:60:39:93:5a:
ef:19:f4:0c:77:51:05:c1:1a:b0:f1:b4:bf:4e:dc:f2:26:29:
c1:e9:ae:6e:67:cc:5c:3e:59:6f:86:c3:56:2d:1b:66:18:3d:
5a:c1:3b:76:c1:06:96:4a:70:57:ae:8f:2b:76:0b:ec:cf:89:
8b:20:69:68:44:cb:e4:9c:0f:d8:72:ae:5c:4e:4e:f8:24:52:
b8:62:e5:c1:ea:ca:fb:68:9f:7f:98:7e:83:62:08:cb:fa:d4:
90:c3:e5:3d:01:31:86:f9:05:8a:7d:98:3e:39:4b:43:99:e8:
59:c0:9e:7a:5e:6c:2c:84:55:b1:c5:ac:7f:1e:5d:d9:36:87:
b1:cc:94:8e:fb:7d:55:83:2e:e4:90:08:87:8f:27:6c:52:46:
64:8d:48:fe:6f:e7:65:d9:3e:d9:18:5a:7d:b8:5e:15:52:12:
b4:8c:33:7b:ef:11:ee:db:e6:cc:00:af:42:c6:aa:6b:e7:53:
5e:80:58:0d:09:0b:fe:8d:14:f4:cb:7c:60:ad:e1:0d:b5:17:
47:51:63:1a:e6:f3:73:55:6d:16:f7:71:22:e6:96:ad:9a:13:
4c:ee:09:eb:08:bf:7b:15:cb:5f:67:0f:2d:c6:b8:10:4c:9b:
bb:57:0a:f0
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzJvQeEkRENqQRLtw0mI5CVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGY3ODBhMDdlOTNiMDZmYTBiYjZiMWE2N2E2OTFjOTA3YjM5ZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXJzoDyqove9nWaQ+5CHNZSqztww
eTJOD9EJg95h8QcuCokq6uOamER0yDo+NzpgCGTYJ0gBkxpg44j2xf93GbaufUEG
CFJxudCDaPv2GWIlyo+LHPKl7CV8/L6BNRlc8smiWK2Ojef/zSEpDBf1adB+F4x/
bqWdscCKm1oNCHLIaYd6txF2U47z3PlhGRa/Xpfch31UvBj9V25ARqt2RpGSS23j
Rh//Ab9tqOOmEfhvE++wkZfFpUz2KOz4SODeZn4F0XXrOJYEfID0xhyFo46/2dd3
cA83j6npT4kFfVnOEmQY17sTyOBdx6nXVXcJaGG/yNvDp3rlg5XV60Gn9QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFPT3gKB+k7BvoLtrGmemkckHs5+aMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvOVBlQW9INlRzRy1ndTJzYVo2YVJ5UWV6bjVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKg6xBwrA
AwcAKg6xBwrCAwcEKg/kAQEQMA0GCSqGSIb3DQEBCwUAA4IBAQA7yySTxUdn5BMk
GvR6yGA5k1rvGfQMd1EFwRqw8bS/TtzyJinB6a5uZ8xcPllvhsNWLRtmGD1awTt2
wQaWSnBXro8rdgvsz4mLIGloRMvknA/Ycq5cTk74JFK4YuXB6sr7aJ9/mH6DYgjL
+tSQw+U9ATGG+QWKfZg+OUtDmehZwJ56XmwshFWxxax/Hl3ZNoexzJSO+31Vgy7k
kAiHjydsUkZkjUj+b+dl2T7ZGFp9uF4VUhK0jDN77xHu2+bMAK9Cxqpr51NegFgN
CQv+jRT0y3xgreENtRdHUWMa5vNzVW0W93Ei5patmhNM7gnrCL97FctfZw8txrgQ
TJu7Vwrw
-----END CERTIFICATE-----
Generated at Fri May 3 03:33:15 2024 by rpki-client on console-ams.rpki-client.org