Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VhocjDnvcwOyccsF7Gmnt5RfDkg.roa
File: VhocjDnvcwOyccsF7Gmnt5RfDkg.roa (raw, json)
Hash identifier: 43aCkGU7ZycUPMNOXqOATqQq5k/dwrQCq/o2WGHCZOQ=
Subject key identifier: 56:1A:1C:8C:39:EF:73:03:B2:71:CB:05:EC:69:A7:B7:94:5F:0E:48
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD5924556B4E6F4CE9996F8B6247D5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VhocjDnvcwOyccsF7Gmnt5RfDkg.roa
Signing time: Tue 02 Jan 2024 10:34:38 +0000
ROA not before: Tue 02 Jan 2024 10:34:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216411
IP address blocks: 2a0e:b107:2050::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:59:24:55:6b:4e:6f:4c:e9:99:6f:8b:62:47:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=561a1c8c39ef7303b271cb05ec69a7b7945f0e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:27:c9:f7:c1:89:39:4e:71:51:39:1c:b8:c9:
38:09:a3:2f:16:5b:af:5e:e5:13:24:d2:d7:f9:a8:
d0:62:56:80:b4:37:5e:90:8e:29:a5:eb:cd:63:91:
08:0f:4f:21:08:4e:6b:b9:c4:be:bc:99:e0:40:31:
cd:2e:57:42:92:57:ca:3e:da:a6:4f:a3:fb:32:e6:
d0:25:9d:3a:5f:77:5f:1e:08:44:e8:19:f9:40:0c:
61:c3:bc:07:0c:90:42:2a:b2:14:eb:cd:4e:c8:54:
2b:fa:94:26:09:59:4e:7f:f6:00:e2:f3:35:79:da:
05:b2:0b:be:b4:d4:39:2e:1d:bd:fd:51:b1:ce:e7:
0d:26:58:ac:af:67:83:a3:38:06:51:ad:65:d1:09:
70:30:d9:d9:3a:37:57:05:d8:b4:7f:98:1f:b3:3c:
44:de:2e:65:ef:dc:63:6a:bb:eb:b6:a0:32:c8:92:
93:ed:8b:91:bf:b8:fa:a8:73:e4:ae:2d:a7:95:70:
a5:9b:5d:f8:78:5d:b6:85:66:d2:dc:4d:e6:ba:66:
59:c7:67:fb:a6:40:c5:ac:3d:fd:1b:4c:c9:3f:04:
4a:84:ee:c7:99:15:9c:9c:74:38:7b:b5:8f:35:66:
70:b3:30:f1:4e:c8:ac:06:0c:fc:30:b4:98:8f:8b:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1A:1C:8C:39:EF:73:03:B2:71:CB:05:EC:69:A7:B7:94:5F:0E:48
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VhocjDnvcwOyccsF7Gmnt5RfDkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2050::/48
Signature Algorithm: sha256WithRSAEncryption
43:eb:27:e4:e0:de:eb:6c:ed:45:19:6b:f6:a9:1a:96:09:80:
50:4b:20:eb:7e:ff:9f:a7:1f:9a:12:bc:2a:b9:12:cf:91:0c:
78:00:86:6a:2a:76:05:10:32:f0:e5:ad:d4:63:c7:58:4a:cf:
49:1e:0a:c0:fb:e4:3e:ca:44:4e:cf:2f:cd:aa:67:99:51:3d:
fb:2e:e3:fa:dc:f3:7b:97:50:9b:f9:6c:f8:54:82:9e:89:0c:
e3:db:e1:1a:a1:5e:f6:5e:c4:59:8f:c1:44:c1:3e:76:26:02:
5c:97:49:7c:97:c7:35:2b:46:b1:51:99:2d:61:49:0f:9b:ab:
46:f0:ec:9c:be:26:b3:24:27:cc:2f:02:e5:55:05:88:4d:7c:
52:d9:35:17:00:e7:36:1f:37:54:2c:f4:9e:04:80:e4:c6:4d:
82:bd:27:a6:5b:40:4e:4e:02:83:39:3e:3f:b8:a3:91:b6:cd:
9b:9b:3e:b5:10:ac:1b:2f:2c:60:29:4b:28:62:26:57:2d:20:
8a:e2:b1:f4:2c:7e:17:df:b9:b5:40:ad:03:80:2f:05:a0:de:
10:e0:52:b4:3b:3f:78:70:99:37:04:e0:04:8c:7a:6c:36:1f:
29:0d:14:32:6a:a3:c8:fd:bb:b4:78:a9:4f:52:3b:72:13:48:
81:16:97:36
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvVkkVWtOb0zpmW+LYkfVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjFhMWM4YzM5ZWY3MzAzYjI3MWNiMDVlYzY5YTdiNzk0NWYwZTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlifJ98GJOU5xUTkcuMk4CaMvFluv
XuUTJNLX+ajQYlaAtDdekI4ppevNY5EID08hCE5rucS+vJngQDHNLldCklfKPtqm
T6P7MubQJZ06X3dfHghE6Bn5QAxhw7wHDJBCKrIU681OyFQr+pQmCVlOf/YA4vM1
edoFsgu+tNQ5Lh29/VGxzucNJlisr2eDozgGUa1l0QlwMNnZOjdXBdi0f5gfszxE
3i5l79xjarvrtqAyyJKT7YuRv7j6qHPkri2nlXClm134eF22hWbS3E3mumZZx2f7
pkDFrD39G0zJPwRKhO7HmRWcnHQ4e7WPNWZwszDxTsisBgz8MLSYj4ufXQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFYaHIw573MDsnHLBexpp7eUXw5IMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvVmhvY2pEbnZjd095Y2NzRjdHbW50NVJmRGtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xByBQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBD6yfk4N7rbO1FGWv2qRqWCYBQSyDrfv+fpx+a
ErwquRLPkQx4AIZqKnYFEDLw5a3UY8dYSs9JHgrA++Q+ykROzy/NqmeZUT37LuP6
3PN7l1Cb+Wz4VIKeiQzj2+EaoV72XsRZj8FEwT52JgJcl0l8l8c1K0axUZktYUkP
m6tG8OycviazJCfMLwLlVQWITXxS2TUXAOc2HzdULPSeBIDkxk2CvSemW0BOTgKD
OT4/uKORts2bmz61EKwbLyxgKUsoYiZXLSCK4rH0LH4X37m1QK0DgC8FoN4Q4FK0
Oz94cJk3BOAEjHpsNh8pDRQyaqPI/bu0eKlPUjtyE0iBFpc2
-----END CERTIFICATE-----
Generated at Fri May 3 09:37:07 2024 by rpki-client on console-fra.rpki-client.org