Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R3Bc1A3Y5kY7OnDOGCNtQm75PRc.roa
File: R3Bc1A3Y5kY7OnDOGCNtQm75PRc.roa (raw, json)
Hash identifier: Qt+Vs2hdL4drIYlRxB/ncydDVZZ/6Tc9qpMtsOjpBCA=
Subject key identifier: 47:70:5C:D4:0D:D8:E6:46:3B:3A:70:CE:18:23:6D:42:6E:F9:3D:17
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD1414517386007664AC7CC478CEC4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R3Bc1A3Y5kY7OnDOGCNtQm75PRc.roa
Signing time: Tue 02 Jan 2024 10:34:20 +0000
ROA not before: Tue 02 Jan 2024 10:34:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207650
IP address blocks: 2a10:cc40:160::/44 maxlen: 48
2a10:2f00:109::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:14:14:51:73:86:00:76:64:ac:7c:c4:78:ce:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47705cd40dd8e6463b3a70ce18236d426ef93d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:3f:06:69:8e:d6:d9:47:84:8c:c0:82:de:
73:b4:e4:ce:d0:d3:96:1e:9b:13:a5:fd:e2:ce:68:
68:6a:3f:0b:60:75:0f:3a:17:57:77:40:cc:b5:57:
a9:04:a2:53:05:c1:f9:ac:7c:df:dd:ba:40:b7:87:
83:fe:56:4f:90:2e:43:ec:28:15:7d:33:3c:f9:76:
1b:40:4e:f8:3d:79:eb:06:7f:02:f0:fe:62:77:dd:
a7:4a:0a:19:8c:85:e0:df:0e:67:9c:84:c9:d5:b4:
5d:a7:78:51:d5:7e:d3:fc:83:8a:07:3b:c3:89:85:
b4:d3:a0:47:1c:a2:dc:28:a3:e3:bd:21:57:09:15:
62:e2:ae:a3:38:8f:db:40:c5:29:4c:2b:23:c2:1c:
69:75:f0:09:78:38:19:a3:51:ff:63:2d:0b:4b:ef:
d7:02:32:57:96:7a:b8:a6:b4:a3:f2:64:12:38:74:
c5:36:a6:a4:0f:ad:69:a7:b5:07:04:91:51:ab:e9:
bc:2f:8d:64:ba:aa:a8:78:07:32:ed:38:14:12:14:
d9:98:fe:66:2e:ab:38:66:c7:6b:4d:75:ab:2c:45:
00:38:91:10:e8:f8:be:41:12:0a:32:3e:3e:02:a5:
07:10:99:2d:c8:c8:73:d7:f1:fb:77:ff:cb:3b:92:
e2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:70:5C:D4:0D:D8:E6:46:3B:3A:70:CE:18:23:6D:42:6E:F9:3D:17
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R3Bc1A3Y5kY7OnDOGCNtQm75PRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:109::/48
2a10:cc40:160::/44
Signature Algorithm: sha256WithRSAEncryption
9e:3c:7d:08:f4:de:17:b7:88:20:b8:2d:79:12:05:21:c5:77:
1c:1b:b7:ad:41:70:a3:55:90:41:7f:1d:d1:26:87:ff:c2:00:
26:5a:3e:93:77:85:9b:31:7a:3f:50:28:31:81:7c:58:16:78:
22:82:8d:38:6d:bc:95:a4:99:62:f1:bc:b4:03:b7:83:ce:e4:
f7:93:ee:78:4a:27:be:03:f0:ae:39:20:32:cb:6d:f5:20:a6:
b0:03:7b:e0:8d:23:62:7a:c3:16:f8:b7:18:c6:06:bc:71:06:
79:c2:e4:2f:bb:45:76:ae:4e:24:26:e0:34:04:fd:2e:63:e5:
32:0a:8f:c7:66:88:3b:c2:3f:97:37:e5:6b:16:56:7e:b8:2b:
01:4f:92:17:5e:45:88:9b:7d:fc:a9:c5:ac:ca:ba:b9:d1:cb:
11:b5:b4:26:7a:a2:bd:fa:98:6e:2a:44:4f:e0:7e:e2:1e:0c:
4a:d8:01:d1:0a:e6:95:5a:86:70:73:4f:c0:66:f8:05:69:a4:
36:11:37:41:20:f0:dc:58:c3:51:19:0e:09:27:ae:33:e6:f9:
cc:25:21:d9:c3:17:e4:af:0c:77:d7:50:5b:ec:bc:05:4d:69:
54:26:42:49:7a:c2:58:7d:93:1f:4f:aa:79:79:fa:76:80:a1:
80:f6:c1:df
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzJvRQUUXOGAHZkrHzEeM7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzcwNWNkNDBkZDhlNjQ2M2IzYTcwY2UxODIzNmQ0MjZlZjkzZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI8/BmmO1tlHhIzAgt5ztOTO0NOW
HpsTpf3izmhoaj8LYHUPOhdXd0DMtVepBKJTBcH5rHzf3bpAt4eD/lZPkC5D7CgV
fTM8+XYbQE74PXnrBn8C8P5id92nSgoZjIXg3w5nnITJ1bRdp3hR1X7T/IOKBzvD
iYW006BHHKLcKKPjvSFXCRVi4q6jOI/bQMUpTCsjwhxpdfAJeDgZo1H/Yy0LS+/X
AjJXlnq4prSj8mQSOHTFNqakD61pp7UHBJFRq+m8L41kuqqoeAcy7TgUEhTZmP5m
Lqs4ZsdrTXWrLEUAOJEQ6Pi+QRIKMj4+AqUHEJktyMhz1/H7d//LO5LiiQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEdwXNQN2OZGOzpwzhgjbUJu+T0XMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvUjNCYzFBM1k1a1k3T25ET0dDTnRRbTc1UFJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhAvAAEJ
AwcEKhDMQAFgMA0GCSqGSIb3DQEBCwUAA4IBAQCePH0I9N4Xt4gguC15EgUhxXcc
G7etQXCjVZBBfx3RJof/wgAmWj6Td4WbMXo/UCgxgXxYFngigo04bbyVpJli8by0
A7eDzuT3k+54Sie+A/CuOSAyy231IKawA3vgjSNiesMW+LcYxga8cQZ5wuQvu0V2
rk4kJuA0BP0uY+UyCo/HZog7wj+XN+VrFlZ+uCsBT5IXXkWIm338qcWsyrq50csR
tbQmeqK9+phuKkRP4H7iHgxK2AHRCuaVWoZwc0/AZvgFaaQ2ETdBIPDcWMNRGQ4J
J64z5vnMJSHZwxfkrwx311Bb7LwFTWlUJkJJesJYfZMfT6p5efp2gKGA9sHf
-----END CERTIFICATE-----
Generated at Fri May 3 03:33:16 2024 by rpki-client on console-ams.rpki-client.org