Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Bo99xZSmZUdr3oGcuym9Uc8yA3g.roa
File: Bo99xZSmZUdr3oGcuym9Uc8yA3g.roa (raw, json)
Hash identifier: 0aAThAkStfZKPTp8DNRfQcGXDdV8E3GBraQx4CRF9w0=
Subject key identifier: 06:8F:7D:C5:94:A6:65:47:6B:DE:81:9C:BB:29:BD:51:CF:32:03:78
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCCCEA87D99DCB80E75D79A88C49F0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Bo99xZSmZUdr3oGcuym9Uc8yA3g.roa
Signing time: Tue 02 Jan 2024 10:34:02 +0000
ROA not before: Tue 02 Jan 2024 10:34:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47157
IP address blocks: 2a0e:b107:19f0::/48 maxlen: 48
2a0e:b107:19fd::/48 maxlen: 48
2a0e:b107:19fa::/48 maxlen: 48
2a0e:b107:19f2::/48 maxlen: 48
2a0e:b107:19ff::/48 maxlen: 48
2a0e:b107:19fc::/48 maxlen: 48
2a0e:b107:19f1::/48 maxlen: 48
2a0e:b107:19fe::/48 maxlen: 48
2a0e:b107:19fb::/48 maxlen: 48
2a0e:b107:19f3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:cc:ea:87:d9:9d:cb:80:e7:5d:79:a8:8c:49:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=068f7dc594a665476bde819cbb29bd51cf320378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:03:28:83:42:bb:ac:c8:f3:96:ce:79:1b:9e:
a3:e5:c3:14:e9:e0:5e:2f:c9:89:4f:ac:59:1c:e4:
5e:45:cc:b0:41:35:4a:77:a3:6c:cf:00:43:72:94:
8f:8e:0d:b7:02:e9:c5:ab:88:9e:0a:14:cb:9a:c3:
99:d7:46:f2:f3:40:5d:f7:e1:07:99:62:5e:1d:0f:
8e:f5:25:3c:fd:07:c9:07:6e:cb:1d:0b:22:eb:f9:
f4:8d:b7:d6:d9:85:8c:bc:a5:16:e7:f4:c4:15:65:
47:0c:a4:9c:6e:d7:77:4b:22:f7:70:86:40:15:f2:
3f:5e:99:76:f7:09:9f:5f:41:38:65:51:9e:5e:4d:
c1:32:c3:b5:73:7c:0d:19:18:be:64:25:e6:9c:e0:
25:6a:27:c6:4c:d7:e6:10:f3:f7:0e:10:a5:43:61:
fa:80:35:31:f6:3c:f1:47:d5:68:4d:27:20:40:ed:
5b:30:e4:51:0b:c4:a3:3a:4c:ac:dd:f4:89:65:b7:
00:ec:23:37:a5:30:63:55:6b:8e:e5:e3:b1:b1:31:
24:01:d1:74:2c:52:79:e1:79:e3:21:7a:21:b5:7d:
39:6c:ed:04:fb:b7:22:36:2a:e8:d6:88:f9:7f:b3:
55:0f:5b:2f:6f:69:62:a6:f9:c8:ff:4f:60:f5:31:
9f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8F:7D:C5:94:A6:65:47:6B:DE:81:9C:BB:29:BD:51:CF:32:03:78
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Bo99xZSmZUdr3oGcuym9Uc8yA3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:19f0::/46
2a0e:b107:19fa::-2a0e:b107:19ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1d:00:a4:d4:08:15:07:17:72:8d:5f:fc:e8:7d:6d:68:10:f6:
76:9b:0a:7f:fc:86:55:56:36:38:d3:26:f0:91:34:c3:9c:24:
bd:58:f7:2e:52:21:87:c7:34:de:ec:27:c3:1b:9f:e7:ca:15:
f5:9e:0d:a3:3a:65:ef:23:c2:04:cf:6e:2a:de:db:ed:e4:09:
ee:08:92:1e:a8:66:e2:80:af:2c:29:9c:5d:81:16:7d:91:0f:
59:59:aa:22:e7:58:94:ce:17:22:44:7b:6d:06:72:7e:84:3a:
90:b8:99:43:d2:7c:dd:dc:b7:54:5d:00:3b:44:e5:1e:06:d3:
ad:dc:93:df:0e:89:d1:e3:d4:c6:6d:07:89:b2:32:78:78:fc:
62:5f:90:1a:cb:43:74:df:2c:39:1d:32:1a:a8:fb:0d:55:ab:
db:15:e6:ea:05:97:31:1d:8e:b8:53:23:c5:f2:df:82:e1:9e:
60:4b:8a:97:50:65:de:35:61:43:5b:7b:aa:a7:01:05:c7:73:
bf:9b:5b:57:8f:e2:36:6b:90:06:0c:30:37:af:97:2c:8d:07:
b9:69:0b:32:74:28:08:50:81:be:bf:2f:99:9b:5a:46:f1:30:
b6:49:b5:41:a6:4d:76:d1:8f:ee:7b:a7:c1:51:ce:6d:96:81:
ce:30:6a:21
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYzJvMzqh9mdy4DnXXmojEnwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjhmN2RjNTk0YTY2NTQ3NmJkZTgxOWNiYjI5YmQ1MWNmMzIwMzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgMog0K7rMjzls55G56j5cMU6eBe
L8mJT6xZHOReRcywQTVKd6NszwBDcpSPjg23AunFq4ieChTLmsOZ10by80Bd9+EH
mWJeHQ+O9SU8/QfJB27LHQsi6/n0jbfW2YWMvKUW5/TEFWVHDKScbtd3SyL3cIZA
FfI/Xpl29wmfX0E4ZVGeXk3BMsO1c3wNGRi+ZCXmnOAlaifGTNfmEPP3DhClQ2H6
gDUx9jzxR9VoTScgQO1bMORRC8SjOkys3fSJZbcA7CM3pTBjVWuO5eOxsTEkAdF0
LFJ54XnjIXohtX05bO0E+7ciNiro1oj5f7NVD1svb2lipvnI/09g9TGflQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFAaPfcWUpmVHa96BnLspvVHPMgN4MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvQm85OXhaU21aVWRyM29HY3V5bTlVYzh5QTNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwcCKg6xBxnw
MBEDBwEqDrEHGfoDBgEqDrEHGDANBgkqhkiG9w0BAQsFAAOCAQEAHQCk1AgVBxdy
jV/86H1taBD2dpsKf/yGVVY2ONMm8JE0w5wkvVj3LlIhh8c03uwnwxuf58oV9Z4N
ozpl7yPCBM9uKt7b7eQJ7giSHqhm4oCvLCmcXYEWfZEPWVmqIudYlM4XIkR7bQZy
foQ6kLiZQ9J83dy3VF0AO0TlHgbTrdyT3w6J0ePUxm0HibIyeHj8Yl+QGstDdN8s
OR0yGqj7DVWr2xXm6gWXMR2OuFMjxfLfguGeYEuKl1Bl3jVhQ1t7qqcBBcdzv5tb
V4/iNmuQBgwwN6+XLI0HuWkLMnQoCFCBvr8vmZtaRvEwtkm1QaZNdtGP7nunwVHO
bZaBzjBqIQ==
-----END CERTIFICATE-----
Generated at Fri May 3 02:20:38 2024 by rpki-client on console-fra.rpki-client.org