Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NYeunx5mvBD4-eaJucxy6-Nd15k.roa
File: NYeunx5mvBD4-eaJucxy6-Nd15k.roa (raw, json)
Hash identifier: /ZWJCCAWr5L7QpWmqrHsJlNKGjtIm4QkefpyuFR/QMw=
Subject key identifier: 35:87:AE:9F:1E:66:BC:10:F8:F9:E6:89:B9:CC:72:EB:E3:5D:D7:99
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCFB9C7608D099C006F5593B082674
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NYeunx5mvBD4-eaJucxy6-Nd15k.roa
Signing time: Tue 02 Jan 2024 10:34:14 +0000
ROA not before: Tue 02 Jan 2024 10:34:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201412
IP address blocks: 2a0e:97c0:c70::/44 maxlen: 48
2a0e:b107:1cf0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:fb:9c:76:08:d0:99:c0:06:f5:59:3b:08:26:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3587ae9f1e66bc10f8f9e689b9cc72ebe35dd799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2d:c3:93:e0:63:47:96:29:3f:6d:1d:6e:cc:
56:f7:45:28:65:47:32:6a:ae:1f:e5:05:53:d6:f5:
64:9f:42:ca:98:9e:93:10:62:78:56:77:4e:da:03:
d5:a0:1c:92:fe:de:4b:02:5e:45:42:3e:89:43:18:
1a:dc:5e:14:e1:25:b9:3c:c4:6f:a1:b6:cd:0c:fa:
6e:85:a8:3e:e3:32:53:8b:d2:3b:53:ee:63:ca:ca:
67:0d:02:57:5a:56:c0:d5:87:17:c2:04:65:94:cb:
e9:e6:17:68:a8:f2:0b:3b:da:ce:53:e6:df:88:22:
93:e7:13:35:50:49:35:f8:4b:db:a9:a4:99:6d:df:
d8:51:c0:55:7e:eb:fb:31:d3:43:12:95:cc:07:1f:
c4:e1:30:17:6e:d0:99:e1:04:53:af:70:ce:7e:d8:
e9:79:ad:69:7f:34:4d:76:f4:10:0a:b1:a3:e9:24:
30:25:20:78:2e:4c:25:ca:72:2d:9f:6a:64:c6:9c:
37:14:6f:17:32:ed:7d:8c:86:52:c0:8d:10:14:9c:
5c:11:e4:2f:ae:f6:1b:7f:7e:68:6e:a4:5f:29:cd:
37:32:e6:32:27:e7:d2:a1:64:92:e5:a9:cd:5a:cb:
3e:22:ff:80:36:64:d4:a2:1c:9c:f3:7e:d6:28:e3:
a4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:87:AE:9F:1E:66:BC:10:F8:F9:E6:89:B9:CC:72:EB:E3:5D:D7:99
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NYeunx5mvBD4-eaJucxy6-Nd15k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:c70::/44
2a0e:b107:1cf0::/44
Signature Algorithm: sha256WithRSAEncryption
ac:15:32:2e:4d:20:31:4f:1d:61:15:34:7d:10:e2:8d:df:48:
94:10:61:86:f6:eb:c9:7e:09:43:5f:89:bb:88:c3:a7:a6:8f:
e5:07:6c:2a:3d:2c:c6:31:37:af:11:a0:75:f5:31:78:0d:ea:
79:20:cd:9c:8b:57:8f:ea:28:da:61:ba:49:1f:a7:cd:d8:65:
d6:88:f0:36:33:4b:6d:c9:ec:42:44:99:1d:60:fb:db:9d:f9:
c9:30:a1:13:61:df:6b:50:e4:6f:44:d4:89:3e:34:bf:80:2b:
16:a6:f9:8f:39:98:f5:b3:c9:01:e7:30:e5:f1:12:f7:a1:55:
f4:a4:82:19:ca:6b:7a:ec:88:9e:7e:dd:c4:7a:c1:31:65:36:
f0:52:d7:bd:d7:ec:8c:7e:3c:71:f5:94:1b:bd:0d:c4:e4:c0:
12:29:16:4c:ad:52:6c:1c:18:37:54:19:67:1e:b9:6f:ec:4c:
6e:2a:7e:e5:5a:49:ba:04:fb:2f:9a:4a:22:ee:c7:4f:a5:b3:
0a:37:b4:c4:7c:a9:a2:bf:5d:a8:4d:09:89:f3:15:47:bd:e7:
15:a9:4a:39:bf:d7:e6:7e:d5:30:03:7e:b2:bc:fa:4f:48:f5:
c2:ea:fd:3f:72:0c:e7:79:55:65:13:87:9c:61:66:88:10:47:
ab:7d:21:50
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzJvPucdgjQmcAG9Vk7CCZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTg3YWU5ZjFlNjZiYzEwZjhmOWU2ODliOWNjNzJlYmUzNWRkNzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS3Dk+BjR5YpP20dbsxW90UoZUcy
aq4f5QVT1vVkn0LKmJ6TEGJ4VndO2gPVoByS/t5LAl5FQj6JQxga3F4U4SW5PMRv
obbNDPpuhag+4zJTi9I7U+5jyspnDQJXWlbA1YcXwgRllMvp5hdoqPILO9rOU+bf
iCKT5xM1UEk1+EvbqaSZbd/YUcBVfuv7MdNDEpXMBx/E4TAXbtCZ4QRTr3DOftjp
ea1pfzRNdvQQCrGj6SQwJSB4LkwlynItn2pkxpw3FG8XMu19jIZSwI0QFJxcEeQv
rvYbf35obqRfKc03MuYyJ+fSoWSS5anNWss+Iv+ANmTUohyc837WKOOkfQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDWHrp8eZrwQ+PnmibnMcuvjXdeZMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTllldW54NW12QkQ0LWVhSnVjeHk2LU5kMTVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6XwAxw
AwcEKg6xBxzwMA0GCSqGSIb3DQEBCwUAA4IBAQCsFTIuTSAxTx1hFTR9EOKN30iU
EGGG9uvJfglDX4m7iMOnpo/lB2wqPSzGMTevEaB19TF4Dep5IM2ci1eP6ijaYbpJ
H6fN2GXWiPA2M0ttyexCRJkdYPvbnfnJMKETYd9rUORvRNSJPjS/gCsWpvmPOZj1
s8kB5zDl8RL3oVX0pIIZymt67Iieft3EesExZTbwUte91+yMfjxx9ZQbvQ3E5MAS
KRZMrVJsHBg3VBlnHrlv7ExuKn7lWkm6BPsvmkoi7sdPpbMKN7TEfKmiv12oTQmJ
8xVHvecVqUo5v9fmftUwA36yvPpPSPXC6v0/cgzneVVlE4ecYWaIEEerfSFQ
-----END CERTIFICATE-----
Generated at Fri May 3 12:39:04 2024 by rpki-client on console-fra.rpki-client.org