Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IQHYD6dQ1_oFHmKASrXVR8EVMTQ.roa
File: IQHYD6dQ1_oFHmKASrXVR8EVMTQ.roa (raw, json)
Hash identifier: d9Aj1cr6ooX05wPIeF1QBJoCdQLA/JQgi8oIg1MxyMY=
Subject key identifier: 21:01:D8:0F:A7:50:D7:FA:05:1E:62:80:4A:B5:D5:47:C1:15:31:34
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018F19D3AD9FD331E01FFF7A7903F2C8AB20
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IQHYD6dQ1_oFHmKASrXVR8EVMTQ.roa
Signing time: Fri 26 Apr 2024 09:54:14 +0000
ROA not before: Fri 26 Apr 2024 09:54:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38255
IP address blocks: 2a0e:b107:740::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:d3:ad:9f:d3:31:e0:1f:ff:7a:79:03:f2:c8:ab:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 26 09:54:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2101d80fa750d7fa051e62804ab5d547c1153134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b8:e6:75:77:00:3f:11:c5:0d:48:b1:c4:27:
1c:31:cf:c5:c6:fd:13:de:9c:76:5b:0b:ee:61:95:
34:81:1a:e9:ed:70:dc:1e:c2:69:c9:40:15:ae:7e:
a7:9e:4e:34:55:a7:6c:20:1c:ba:9d:5b:09:c9:53:
8d:10:fb:62:a6:df:0f:58:66:96:55:5b:e7:4c:fe:
e1:f2:c6:6e:76:e7:ce:0d:79:ad:a9:85:ca:a0:7f:
88:9e:28:c2:44:88:28:3e:b9:66:4b:f0:a3:d1:06:
5f:c6:e8:a6:83:06:a8:1b:d8:35:30:68:40:1d:7c:
d6:d1:29:a5:05:41:96:c5:46:65:3c:08:72:2f:c8:
03:73:37:ba:e3:96:c0:7e:50:91:c5:15:c2:d3:69:
d9:d2:3f:63:99:b9:40:c1:be:b4:8e:6c:a5:80:85:
30:9a:83:33:8c:67:b9:31:f0:4a:68:41:8e:be:7f:
3d:01:05:67:f6:7a:1d:62:8e:b0:2c:ff:3d:4d:48:
4f:dc:77:28:11:6d:d0:e2:e7:fe:93:73:d9:77:a8:
ed:88:44:21:ed:2e:d8:4c:00:08:c9:f4:5d:2f:26:
2b:f5:7d:f9:1d:c7:b8:f1:7a:3b:54:3f:51:fe:31:
36:c3:88:2d:dc:e5:e3:6b:15:b7:6f:d3:ef:71:aa:
a7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:01:D8:0F:A7:50:D7:FA:05:1E:62:80:4A:B5:D5:47:C1:15:31:34
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IQHYD6dQ1_oFHmKASrXVR8EVMTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:740::/44
Signature Algorithm: sha256WithRSAEncryption
b6:f6:b4:6d:be:8a:f7:86:45:95:14:4d:1b:85:5c:c5:02:42:
e4:f9:66:d9:34:ed:38:1f:fa:9b:22:0a:ee:14:0f:5c:29:e0:
32:33:e2:e1:07:25:4f:e5:fb:9a:21:6f:1e:34:e5:b2:7a:23:
0e:ac:04:73:04:3f:9b:11:7b:52:7d:b5:58:26:1c:41:bf:87:
29:22:7c:44:a3:06:51:c9:20:c8:26:e0:76:07:a9:ab:a7:c2:
47:03:06:7f:17:a2:a9:07:71:a6:57:a5:41:d5:00:c3:3e:97:
bb:9e:28:52:65:82:f1:78:4c:66:93:7d:4c:75:cb:1b:30:45:
eb:56:c8:ea:c0:83:37:b4:a0:3f:1f:44:8a:74:c7:e7:d5:6f:
2f:0d:23:83:42:74:5c:22:25:0e:2f:df:c4:f9:f9:3c:bf:31:
a1:37:71:86:a3:95:7f:10:9a:d4:75:58:10:6d:0f:5b:58:4c:
4a:bb:c0:b7:2a:1b:d2:06:eb:e5:d6:7a:3c:d5:cb:43:61:98:
2d:bb:47:09:3a:22:4b:fa:68:61:68:ba:c3:f8:0f:fd:ed:95:
43:48:81:5b:2e:21:40:2a:99:d2:0d:41:56:d8:bb:25:c0:4d:
df:6e:39:31:19:e6:19:0e:0c:e3:e6:f7:6e:d2:87:2a:c1:b5:
d9:4a:2c:83
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY8Z062f0zHgH/96eQPyyKsgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwNDI2MDk1NDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTAxZDgwZmE3NTBkN2ZhMDUxZTYyODA0YWI1ZDU0N2MxMTUzMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirjmdXcAPxHFDUixxCccMc/Fxv0T
3px2WwvuYZU0gRrp7XDcHsJpyUAVrn6nnk40VadsIBy6nVsJyVONEPtipt8PWGaW
VVvnTP7h8sZudufODXmtqYXKoH+InijCRIgoPrlmS/Cj0QZfxuimgwaoG9g1MGhA
HXzW0SmlBUGWxUZlPAhyL8gDcze645bAflCRxRXC02nZ0j9jmblAwb60jmylgIUw
moMzjGe5MfBKaEGOvn89AQVn9nodYo6wLP89TUhP3HcoEW3Q4uf+k3PZd6jtiEQh
7S7YTAAIyfRdLyYr9X35Hce48Xo7VD9R/jE2w4gt3OXjaxW3b9PvcaqnhwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCEB2A+nUNf6BR5igEq11UfBFTE0MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvSVFIWUQ2ZFExX29GSG1LQVNyWFZSOEVWTVRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwdA
MA0GCSqGSIb3DQEBCwUAA4IBAQC29rRtvor3hkWVFE0bhVzFAkLk+WbZNO04H/qb
IgruFA9cKeAyM+LhByVP5fuaIW8eNOWyeiMOrARzBD+bEXtSfbVYJhxBv4cpInxE
owZRySDIJuB2B6mrp8JHAwZ/F6KpB3GmV6VB1QDDPpe7nihSZYLxeExmk31Mdcsb
MEXrVsjqwIM3tKA/H0SKdMfn1W8vDSODQnRcIiUOL9/E+fk8vzGhN3GGo5V/EJrU
dVgQbQ9bWExKu8C3KhvSBuvl1no81ctDYZgtu0cJOiJL+mhhaLrD+A/97ZVDSIFb
LiFAKpnSDUFW2LslwE3fbjkxGeYZDgzj5vdu0ocqwbXZSiyD
-----END CERTIFICATE-----
Generated at Wed May 8 15:37:18 2024 by rpki-client on console-ams.rpki-client.org