Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HPfpMYyFS79h86WiVGdl4QtroFk.roa
File: HPfpMYyFS79h86WiVGdl4QtroFk.roa (raw, json)
Hash identifier: 93y9CH4Iq+qNWiYnPWGWsmAzS8UaR3Xrr4ocgg5Mz8Q=
Subject key identifier: 1C:F7:E9:31:8C:85:4B:BF:61:F3:A5:A2:54:67:65:E1:0B:6B:A0:59
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01912864DF845658ABFD461DD299DC80DB67
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HPfpMYyFS79h86WiVGdl4QtroFk.roa
Signing time: Tue 06 Aug 2024 15:53:05 +0000
ROA not before: Tue 06 Aug 2024 15:53:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214645
IP address blocks: 2a0e:97c0:3b0::/48 maxlen: 48
2a0e:97c0:3b1::/48 maxlen: 48
2a0e:97c0:3b2::/48 maxlen: 48
2a0e:97c0:3b3::/48 maxlen: 48
2a0e:97c0:3b5::/48 maxlen: 48
2a0e:97c0:3b6::/48 maxlen: 48
2a0e:97c0:3b7::/48 maxlen: 48
2a0e:97c0:3b8::/48 maxlen: 48
2a0e:97c0:3b9::/48 maxlen: 48
2a0e:97c0:3ba::/48 maxlen: 48
2a0e:97c0:3bb::/48 maxlen: 48
2a0e:97c0:3bc::/48 maxlen: 48
2a0e:97c0:3be::/48 maxlen: 48
2a0e:97c0:3bf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:28:64:df:84:56:58:ab:fd:46:1d:d2:99:dc:80:db:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 6 15:53:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cf7e9318c854bbf61f3a5a2546765e10b6ba059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:54:aa:80:23:64:2e:e1:ca:8a:da:69:ed:
28:69:0b:91:08:a1:9e:83:96:50:c8:89:8b:72:62:
00:c5:47:d2:70:80:71:d9:b9:3d:1c:b1:9b:50:f8:
9c:2a:ea:33:28:e9:7a:63:91:2c:eb:7e:1a:97:11:
f8:c8:62:9a:92:fe:c7:ac:d9:19:92:e3:80:88:13:
99:68:eb:42:20:96:b7:84:82:f0:94:8c:8f:d8:8f:
9b:78:03:40:c0:9d:b6:a3:3c:eb:d6:10:ba:3e:87:
1d:08:78:7b:2c:8e:0f:bc:01:a3:00:9a:1e:39:ea:
cb:3f:2d:fd:49:79:c7:e1:c1:77:bb:fc:35:a1:e7:
36:2c:49:8e:c3:1a:a0:fb:51:55:b9:20:3e:1e:64:
c3:14:bd:c5:18:ca:95:7f:98:aa:d5:3f:c7:4c:e9:
3b:bf:a9:9f:9b:32:d0:6c:71:26:50:79:14:2b:80:
7e:e5:0f:92:30:81:4c:8d:dd:89:ae:1b:31:ef:3f:
56:81:6c:ae:54:41:c4:bd:93:79:51:7e:3d:c1:8a:
b0:18:97:4e:5b:a7:d2:16:30:95:5e:81:0c:43:85:
1e:c6:ec:7a:7b:5e:02:f8:cd:5a:3d:16:8a:07:90:
5a:90:b5:de:ec:58:48:59:80:bf:8c:cb:81:fb:dc:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F7:E9:31:8C:85:4B:BF:61:F3:A5:A2:54:67:65:E1:0B:6B:A0:59
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HPfpMYyFS79h86WiVGdl4QtroFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3b0::/46
2a0e:97c0:3b5::-2a0e:97c0:3bc:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:3be::/47
Signature Algorithm: sha256WithRSAEncryption
2a:8e:29:f3:82:76:27:90:da:fa:e8:6f:d8:d4:de:77:e1:df:
cb:51:c7:92:51:83:b2:2c:13:0b:18:ef:be:89:38:3b:22:d4:
dc:c6:30:39:9c:d3:b1:9d:cd:76:bd:d6:e0:53:ab:c9:b0:1e:
8a:a3:0a:86:1e:06:59:cf:c2:e2:12:30:da:3a:63:80:aa:bb:
a5:b3:f6:d9:03:20:75:af:85:71:b5:56:e6:10:47:7c:7e:f0:
0e:79:db:19:36:3a:08:b5:50:fc:d6:bb:b9:ed:3c:0f:80:b0:
cf:09:cf:60:cb:f9:ca:60:e3:cc:f1:d7:d9:5f:77:74:4a:89:
f0:ad:37:be:98:c6:29:dd:d0:62:14:63:34:1d:49:75:63:91:
68:ce:de:2b:69:35:fb:d7:ac:ae:55:9f:77:60:2b:bd:2d:71:
de:1a:5e:55:3c:17:a1:73:c7:9e:ef:2f:8b:23:f6:23:3a:9b:
58:52:62:2f:72:cc:e4:b8:ad:bb:45:36:8f:15:45:74:ad:c9:
72:3a:2f:73:c2:00:44:72:17:6e:06:a6:6a:c1:7d:fb:95:9c:
23:9e:66:68:b3:95:01:94:91:13:bd:09:f8:b9:4c:36:65:5a:
52:dd:5a:b0:29:cf:95:ad:5a:3a:af:08:ed:59:14:42:a6:66:
a1:67:da:04
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZEoZN+EVlir/UYd0pncgNtnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwODA2MTU1MzA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2Y3ZTkzMThjODU0YmJmNjFmM2E1YTI1NDY3NjVlMTBiNmJhMDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKlUqoAjZC7hyoraae0oaQuRCKGe
g5ZQyImLcmIAxUfScIBx2bk9HLGbUPicKuozKOl6Y5Es634alxH4yGKakv7HrNkZ
kuOAiBOZaOtCIJa3hILwlIyP2I+beANAwJ22ozzr1hC6PocdCHh7LI4PvAGjAJoe
OerLPy39SXnH4cF3u/w1oec2LEmOwxqg+1FVuSA+HmTDFL3FGMqVf5iq1T/HTOk7
v6mfmzLQbHEmUHkUK4B+5Q+SMIFMjd2Jrhsx7z9WgWyuVEHEvZN5UX49wYqwGJdO
W6fSFjCVXoEMQ4Uexux6e14C+M1aPRaKB5BakLXe7FhIWYC/jMuB+9wacQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFBz36TGMhUu/YfOlolRnZeELa6BZMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvSFBmcE1ZeUZTNzloODZXaVZHZGw0UXRyb0ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcCKg6XwAOw
MBIDBwAqDpfAA7UDBwAqDpfAA7wDBwEqDpfAA74wDQYJKoZIhvcNAQELBQADggEB
ACqOKfOCdieQ2vrob9jU3nfh38tRx5JRg7IsEwsY776JODsi1NzGMDmc07GdzXa9
1uBTq8mwHoqjCoYeBlnPwuISMNo6Y4Cqu6Wz9tkDIHWvhXG1VuYQR3x+8A552xk2
Ogi1UPzWu7ntPA+AsM8Jz2DL+cpg48zx19lfd3RKifCtN76Yxind0GIUYzQdSXVj
kWjO3itpNfvXrK5Vn3dgK70tcd4aXlU8F6Fzx57vL4sj9iM6m1hSYi9yzOS4rbtF
No8VRXStyXI6L3PCAERyF24GpmrBffuVnCOeZmizlQGUkRO9Cfi5TDZlWlLdWrAp
z5WtWjqvCO1ZFEKmZqFn2gQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:54 2024 by rpki-client on console-ams.rpki-client.org