Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Q_4mSmAkjjqAr1HbLW8fk1L6XL0.roa
File: Q_4mSmAkjjqAr1HbLW8fk1L6XL0.roa (raw, json)
Hash identifier: 3BX0e2qXQW+Vk2vP7+si/O9O6UAJDRdZ2qSlTYt3nOg=
Subject key identifier: 43:FE:26:4A:60:24:8E:3A:80:AF:51:DB:2D:6F:1F:93:52:FA:5C:BD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCFD20C1657B742CB8E069D1D27C69
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Q_4mSmAkjjqAr1HbLW8fk1L6XL0.roa
Signing time: Tue 02 Jan 2024 10:34:15 +0000
ROA not before: Tue 02 Jan 2024 10:34:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202222
IP address blocks: 2a0e:b107:1ea0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:fd:20:c1:65:7b:74:2c:b8:e0:69:d1:d2:7c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43fe264a60248e3a80af51db2d6f1f9352fa5cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:e1:bc:3a:1c:e2:49:27:8b:9c:d3:b6:ea:
7d:bb:43:2d:61:66:d0:17:8f:7d:ba:d6:3b:07:92:
8e:c9:a1:32:bc:b9:6d:36:74:78:ed:05:99:03:02:
91:6d:07:8e:a8:ba:b1:f9:7b:fb:cf:3c:10:28:7f:
e7:2b:d2:aa:c8:fa:62:67:be:87:d9:c8:70:ab:66:
83:a1:71:42:c1:a5:e8:7a:71:30:34:b6:13:ef:ad:
e2:8d:a3:f6:98:ac:a3:8a:54:98:fb:e4:0f:c3:ac:
e4:d8:06:47:0d:3d:6b:5a:d6:8c:ab:f3:7b:d4:ef:
65:a7:77:cb:c4:05:0a:ba:c4:9b:b7:da:63:5d:fa:
67:f8:e2:6b:69:0c:c7:d8:a2:32:43:bc:17:52:ff:
76:cb:1d:d0:c1:2d:b3:4f:97:7d:b3:42:7f:c5:f7:
32:9b:10:14:dd:fe:1a:94:d9:9a:06:bd:f6:76:ec:
00:3e:c1:93:de:43:2a:0e:55:e3:d4:e7:f3:5c:8d:
88:d9:61:2f:71:6c:f2:48:02:30:01:be:f9:52:6f:
10:bb:d8:92:3d:14:5e:7d:d9:ce:24:03:fa:ec:99:
fc:99:d7:de:b2:56:38:84:92:94:3b:b6:48:5e:cd:
cb:b6:58:33:da:cc:6b:88:0e:10:0e:91:3e:ba:d6:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FE:26:4A:60:24:8E:3A:80:AF:51:DB:2D:6F:1F:93:52:FA:5C:BD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Q_4mSmAkjjqAr1HbLW8fk1L6XL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1ea0::/44
Signature Algorithm: sha256WithRSAEncryption
1e:10:d0:8d:f1:9d:aa:a2:b3:ca:68:47:8c:e0:ce:f3:98:9b:
c9:66:d6:38:39:5f:c9:ac:0b:7e:7a:f0:a5:5d:61:3c:07:bc:
cb:4e:0e:32:7e:db:7f:cb:aa:70:bd:6e:5f:91:0f:93:41:5e:
a5:ae:0d:72:89:a0:61:75:bc:f8:7a:0f:db:5a:4a:75:3d:57:
d8:70:5b:8d:74:3b:ca:cd:c9:9a:4d:de:9a:51:5b:a7:bb:d8:
a1:3f:9e:e7:c6:4c:d9:e4:d8:1b:d9:c7:5e:11:a1:64:44:eb:
93:92:8e:47:20:bc:17:ca:6e:87:cc:2f:90:59:40:3f:90:be:
a2:8f:c7:9b:51:55:3f:c0:e1:c0:19:e9:3a:fd:0c:33:cf:86:
5c:81:29:11:a8:76:f6:52:bc:99:b1:ae:16:22:a0:86:22:4a:
94:a8:48:18:1e:c4:4f:5c:e1:aa:b1:9d:ec:cb:00:12:76:91:
74:46:7a:9d:b5:bf:da:17:b2:8b:8b:c4:29:d0:b8:b9:3c:87:
96:4f:59:1f:58:b3:ac:d5:d2:16:e1:51:8b:c6:f5:b8:4d:17:
c7:7d:5a:63:49:a4:47:00:ef:73:15:07:5b:42:39:a6:9f:89:
6e:0e:99:a9:cb:ae:41:4c:4b:5f:e8:ec:e5:a8:f7:fa:f2:50:
65:1f:d5:4a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvP0gwWV7dCy44GnR0nxpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2ZlMjY0YTYwMjQ4ZTNhODBhZjUxZGIyZDZmMWY5MzUyZmE1Y2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotnhvDoc4kkni5zTtup9u0MtYWbQ
F499utY7B5KOyaEyvLltNnR47QWZAwKRbQeOqLqx+Xv7zzwQKH/nK9KqyPpiZ76H
2chwq2aDoXFCwaXoenEwNLYT763ijaP2mKyjilSY++QPw6zk2AZHDT1rWtaMq/N7
1O9lp3fLxAUKusSbt9pjXfpn+OJraQzH2KIyQ7wXUv92yx3QwS2zT5d9s0J/xfcy
mxAU3f4alNmaBr32duwAPsGT3kMqDlXj1OfzXI2I2WEvcWzySAIwAb75Um8Qu9iS
PRRefdnOJAP67Jn8mdfeslY4hJKUO7ZIXs3Ltlgz2sxriA4QDpE+utZ4IwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEP+JkpgJI46gK9R2y1vH5NS+ly9MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvUV80bVNtQWtqanFBcjFIYkxXOGZrMUw2WEwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBx6g
MA0GCSqGSIb3DQEBCwUAA4IBAQAeENCN8Z2qorPKaEeM4M7zmJvJZtY4OV/JrAt+
evClXWE8B7zLTg4yftt/y6pwvW5fkQ+TQV6lrg1yiaBhdbz4eg/bWkp1PVfYcFuN
dDvKzcmaTd6aUVunu9ihP57nxkzZ5Ngb2cdeEaFkROuTko5HILwXym6HzC+QWUA/
kL6ij8ebUVU/wOHAGek6/Qwzz4ZcgSkRqHb2UryZsa4WIqCGIkqUqEgYHsRPXOGq
sZ3sywASdpF0Rnqdtb/aF7KLi8Qp0Li5PIeWT1kfWLOs1dIW4VGLxvW4TRfHfVpj
SaRHAO9zFQdbQjmmn4luDpmpy65BTEtf6OzlqPf68lBlH9VK
-----END CERTIFICATE-----
Generated at Fri May 3 12:39:04 2024 by rpki-client on console-fra.rpki-client.org