Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VEXFarjdG0RQtUbjfi0V2VBJzBo.roa
File: VEXFarjdG0RQtUbjfi0V2VBJzBo.roa (raw, json)
Hash identifier: YU1bKyAMXQCnv7v6Uz7k03RIfbCqlGTP68dJFVHQu7U=
Subject key identifier: 54:45:C5:6A:B8:DD:1B:44:50:B5:46:E3:7E:2D:15:D9:50:49:CC:1A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01909D4AFA411D8165588CA3B0D4FB4CCBD0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VEXFarjdG0RQtUbjfi0V2VBJzBo.roa
Signing time: Wed 10 Jul 2024 15:37:34 +0000
ROA not before: Wed 10 Jul 2024 15:37:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214598
IP address blocks: 2a0e:97c0:3a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9d:4a:fa:41:1d:81:65:58:8c:a3:b0:d4:fb:4c:cb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 10 15:37:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5445c56ab8dd1b4450b546e37e2d15d95049cc1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:3b:4f:93:ce:61:95:de:98:62:37:af:09:
6e:a7:1f:7b:0f:45:40:7f:db:7e:27:48:91:1f:66:
82:e2:c5:e1:f5:35:b5:cb:17:fe:6a:8e:f0:63:5d:
cb:43:c0:8d:df:59:d6:d3:cb:c3:03:9e:94:9e:86:
57:be:05:68:c9:ab:aa:36:75:90:b3:ff:f8:1e:54:
48:fc:3d:df:74:cd:d0:f3:07:bb:5b:82:cb:76:5c:
db:42:ab:d7:b2:ac:21:c0:b3:4a:f8:db:f3:ab:89:
4d:24:95:ac:7e:fb:0b:c1:77:e1:5b:d5:e4:9f:ce:
3b:44:e3:1a:e5:99:55:33:0a:72:56:7f:9a:76:cf:
18:a9:ec:da:4f:a7:bd:d5:44:f1:f6:cf:54:c8:b5:
9c:ae:77:7e:70:d5:b2:d8:a5:f7:13:df:e4:60:98:
05:c3:f4:00:72:82:28:1b:86:35:c3:18:29:a7:6f:
07:0d:c0:79:d0:2f:fc:5f:7f:14:79:e7:34:07:0e:
54:82:71:0b:03:b6:72:af:e8:01:8d:df:57:c8:b5:
f9:84:43:ac:e3:28:83:14:be:06:b3:5d:09:3e:43:
c8:e4:0c:91:37:4d:56:6c:38:29:b0:fb:6d:7e:50:
a9:eb:f5:13:0a:8a:b3:f2:48:25:79:dc:6a:a5:89:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:45:C5:6A:B8:DD:1B:44:50:B5:46:E3:7E:2D:15:D9:50:49:CC:1A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VEXFarjdG0RQtUbjfi0V2VBJzBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3a0::/44
Signature Algorithm: sha256WithRSAEncryption
17:b3:62:00:e6:87:ff:93:c5:50:49:38:59:ed:2d:92:47:b5:
8a:0d:bc:27:56:a9:c5:7c:fe:cf:54:b7:78:e5:58:33:66:0b:
01:75:58:2e:e7:22:17:97:fa:46:d4:12:09:d5:68:6b:14:2b:
84:23:27:1f:b3:8f:0d:9b:37:b5:bc:d6:5d:80:a3:2a:18:c8:
91:f2:df:c0:f6:bf:90:b6:80:ae:c5:3e:80:85:cb:27:a8:ef:
b7:61:b6:fa:dc:ce:3f:6c:6c:72:29:15:c0:71:3b:c8:b1:d0:
38:e6:af:2d:d4:a5:5e:84:72:7f:42:40:ff:0f:c7:bc:37:24:
26:ce:e1:14:86:6d:ce:dd:64:af:03:e3:97:be:a5:f2:9e:6a:
b9:e6:b2:4a:9b:88:92:6a:bc:a0:9f:67:a0:a1:8a:0e:63:4c:
79:5f:fe:d0:28:9c:a0:98:41:2b:8e:a1:6b:87:2c:44:48:2c:
c6:f7:dd:9a:2e:0c:a6:66:b3:64:bf:da:ce:90:40:90:34:a6:
8c:13:7b:b1:21:25:95:50:52:10:d2:e8:ce:a1:0d:43:23:28:
35:8a:0f:cf:f4:2c:c6:16:9a:bd:4a:f4:d3:46:8b:63:ad:1f:
b6:f1:a4:c7:ad:d7:e0:5e:60:26:14:a8:bf:32:c6:8b:97:68:
77:ef:8e:74
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZCdSvpBHYFlWIyjsNT7TMvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwNzEwMTUzNzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDQ1YzU2YWI4ZGQxYjQ0NTBiNTQ2ZTM3ZTJkMTVkOTUwNDljYzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS47T5POYZXemGI3rwlupx97D0VA
f9t+J0iRH2aC4sXh9TW1yxf+ao7wY13LQ8CN31nW08vDA56UnoZXvgVoyauqNnWQ
s//4HlRI/D3fdM3Q8we7W4LLdlzbQqvXsqwhwLNK+Nvzq4lNJJWsfvsLwXfhW9Xk
n847ROMa5ZlVMwpyVn+ads8YqezaT6e91UTx9s9UyLWcrnd+cNWy2KX3E9/kYJgF
w/QAcoIoG4Y1wxgpp28HDcB50C/8X38Ueec0Bw5UgnELA7Zyr+gBjd9XyLX5hEOs
4yiDFL4Gs10JPkPI5AyRN01WbDgpsPttflCp6/UTCoqz8kgledxqpYk+bQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFRFxWq43RtEULVG434tFdlQScwaMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvVkVYRmFyamRHMFJRdFViamZpMFYyVkJKekJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAOg
MA0GCSqGSIb3DQEBCwUAA4IBAQAXs2IA5of/k8VQSThZ7S2SR7WKDbwnVqnFfP7P
VLd45VgzZgsBdVgu5yIXl/pG1BIJ1WhrFCuEIycfs48Nmze1vNZdgKMqGMiR8t/A
9r+QtoCuxT6AhcsnqO+3Ybb63M4/bGxyKRXAcTvIsdA45q8t1KVehHJ/QkD/D8e8
NyQmzuEUhm3O3WSvA+OXvqXynmq55rJKm4iSarygn2egoYoOY0x5X/7QKJygmEEr
jqFrhyxESCzG992aLgymZrNkv9rOkECQNKaME3uxISWVUFIQ0ujOoQ1DIyg1ig/P
9CzGFpq9SvTTRotjrR+28aTHrdfgXmAmFKi/MsaLl2h37450
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:30 2024 by rpki-client on console-fra.rpki-client.org