Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Oeuhw1sVFBMd71NOas3xs9CebMI.roa
File: Oeuhw1sVFBMd71NOas3xs9CebMI.roa (raw, json)
Hash identifier: IEkn2dNempuHUgNNmtKQQEZZ7+OXISms7UWJGY6zvi4=
Subject key identifier: 39:EB:A1:C3:5B:15:14:13:1D:EF:53:4E:6A:CD:F1:B3:D0:9E:6C:C2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD15AF9A5715B89197E1FF3A633778
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Oeuhw1sVFBMd71NOas3xs9CebMI.roa
Signing time: Tue 02 Jan 2024 10:34:21 +0000
ROA not before: Tue 02 Jan 2024 10:34:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207726
IP address blocks: 2a0e:b107:1060::/48 maxlen: 48
2a0e:b107:ce0::/44 maxlen: 48
2a0e:b107:1050::/44 maxlen: 48
2a0e:b107:cf0::/44 maxlen: 48
2a0e:b107:1060::/44 maxlen: 48
2a0e:b107:560::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:15:af:9a:57:15:b8:91:97:e1:ff:3a:63:37:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39eba1c35b1514131def534e6acdf1b3d09e6cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:e3:f6:14:58:45:57:e0:6f:f1:b9:5f:50:
dd:ae:f9:52:a9:b4:90:76:33:aa:bd:bb:e6:d9:12:
af:b0:ba:32:71:d2:81:3b:f6:7f:24:63:27:1e:66:
e6:2f:2b:68:55:3b:64:87:d2:0d:56:42:f0:1b:25:
83:c1:a5:87:ee:fb:52:d4:fd:0d:99:61:65:ca:2b:
68:f6:64:99:ec:bf:96:df:18:56:02:e2:be:50:09:
f1:20:66:aa:a0:aa:15:63:38:6c:07:c2:0b:79:5b:
b2:fd:9b:81:a5:02:bc:f3:56:59:29:43:1f:f7:a4:
ed:b4:1f:ed:ee:71:a3:0f:b8:c1:9f:0a:22:0b:83:
97:4f:37:5b:fa:1b:e2:8c:1e:ea:79:b4:a6:c1:b3:
72:7d:1a:d5:54:2d:e9:cd:d3:da:57:31:27:be:ce:
af:f6:c5:c9:f4:2a:f5:f8:73:6b:f7:95:27:70:48:
36:7a:cc:2e:9c:9d:b8:00:f5:c3:cc:37:81:86:2d:
be:33:36:5a:59:86:cd:0d:cc:26:9a:94:2b:b2:b5:
df:c3:6d:62:a3:89:e5:0c:1e:c7:5c:41:29:0a:a3:
68:fe:40:0e:f4:d7:7c:ad:8b:0d:b8:b5:de:b6:80:
24:84:de:38:1b:5a:ed:12:de:94:33:7b:8a:51:1e:
7e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EB:A1:C3:5B:15:14:13:1D:EF:53:4E:6A:CD:F1:B3:D0:9E:6C:C2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Oeuhw1sVFBMd71NOas3xs9CebMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:560::/44
2a0e:b107:ce0::/43
2a0e:b107:1050::-2a0e:b107:106f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ad:86:b6:41:f5:5b:20:9f:61:28:99:2c:58:7e:fb:8b:60:19:
9c:15:07:c6:9b:98:59:5a:c1:f2:42:a9:69:25:9a:a9:a8:2c:
af:33:9c:c0:27:32:36:24:f4:fe:fc:f5:90:37:dc:8a:28:02:
86:50:a5:1b:2d:b0:6d:d6:7c:c6:12:f2:5b:dc:07:3b:6b:4c:
00:ad:87:41:7b:68:57:d0:f8:f6:11:95:de:29:22:26:96:a2:
15:d8:59:2d:29:e9:31:07:00:3f:d1:e1:23:f5:64:79:01:dc:
86:15:a2:94:2e:51:94:74:e0:f5:63:3e:67:85:61:be:ed:b0:
96:5d:85:35:36:01:87:62:c8:a4:7d:1e:95:53:e6:7d:ca:5e:
f8:b9:07:27:64:75:e3:70:fd:82:8f:de:99:fe:30:81:0c:28:
49:75:48:ce:f6:d1:95:d9:49:a5:94:be:04:00:f5:29:a4:27:
6f:ac:f9:89:c9:e6:c1:ec:2a:81:db:ed:b1:01:4d:fe:d4:8d:
93:ae:51:6b:a8:9a:0b:2a:30:e8:72:f8:28:47:11:3b:d9:fc:
02:e5:9e:a9:b0:cd:1b:dd:11:7f:2c:b7:93:e3:48:27:fa:24:
dd:22:40:2a:85:58:56:d0:fa:6e:bc:ac:29:52:32:9e:fa:7c:
22:77:ad:47
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYzJvRWvmlcVuJGX4f86Yzd4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWViYTFjMzViMTUxNDEzMWRlZjUzNGU2YWNkZjFiM2QwOWU2Y2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbvj9hRYRVfgb/G5X1DdrvlSqbSQ
djOqvbvm2RKvsLoycdKBO/Z/JGMnHmbmLytoVTtkh9INVkLwGyWDwaWH7vtS1P0N
mWFlyito9mSZ7L+W3xhWAuK+UAnxIGaqoKoVYzhsB8ILeVuy/ZuBpQK881ZZKUMf
96TttB/t7nGjD7jBnwoiC4OXTzdb+hvijB7qebSmwbNyfRrVVC3pzdPaVzEnvs6v
9sXJ9Cr1+HNr95UncEg2eswunJ24APXDzDeBhi2+MzZaWYbNDcwmmpQrsrXfw21i
o4nlDB7HXEEpCqNo/kAO9Nd8rYsNuLXetoAkhN44G1rtEt6UM3uKUR5+MwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFDnrocNbFRQTHe9TTmrN8bPQnmzCMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvT2V1aHcxc1ZGQk1kNzFOT2FzM3hzOUNlYk1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcEKg6xBwVg
AwcFKg6xBwzgMBIDBwQqDrEHEFADBwQqDrEHEGAwDQYJKoZIhvcNAQELBQADggEB
AK2GtkH1WyCfYSiZLFh++4tgGZwVB8abmFlawfJCqWklmqmoLK8znMAnMjYk9P78
9ZA33IooAoZQpRstsG3WfMYS8lvcBztrTACth0F7aFfQ+PYRld4pIiaWohXYWS0p
6TEHAD/R4SP1ZHkB3IYVopQuUZR04PVjPmeFYb7tsJZdhTU2AYdiyKR9HpVT5n3K
Xvi5BydkdeNw/YKP3pn+MIEMKEl1SM720ZXZSaWUvgQA9SmkJ2+s+YnJ5sHsKoHb
7bEBTf7UjZOuUWuomgsqMOhy+ChHETvZ/ALlnqmwzRvdEX8st5PjSCf6JN0iQCqF
WFbQ+m68rClSMp76fCJ3rUc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:30 2024 by rpki-client on console-fra.rpki-client.org