Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aMA4BCJQWcwpp3O0NSS-amGY3-o.roa
File: aMA4BCJQWcwpp3O0NSS-amGY3-o.roa (raw, json)
Hash identifier: 31fL2e5yrI8B4If94o6t5xnffls7d7+Uy1X6S7it6ho=
Subject key identifier: 68:C0:38:04:22:50:59:CC:29:A7:73:B4:35:24:BE:6A:61:98:DF:EA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD24F4B143BB6130B7A9683C3D20A0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aMA4BCJQWcwpp3O0NSS-amGY3-o.roa
Signing time: Tue 02 Jan 2024 10:34:25 +0000
ROA not before: Tue 02 Jan 2024 10:34:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210542
IP address blocks: 2a0e:97c0:332::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:24:f4:b1:43:bb:61:30:b7:a9:68:3c:3d:20:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68c03804225059cc29a773b43524be6a6198dfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:03:1c:61:db:78:69:a0:1d:62:4d:dd:c7:33:
95:fd:a3:a8:b1:60:6b:1a:22:70:48:da:5e:34:34:
c8:9a:24:91:37:b8:ff:29:73:55:a7:d5:9b:c4:ee:
2b:7c:8f:2c:83:09:8f:4e:71:2a:5f:29:c7:b6:fb:
04:c3:69:4f:7e:3a:08:73:da:fb:f8:03:a3:b9:65:
99:5e:e5:45:c2:dc:50:de:e8:81:53:b5:56:76:88:
11:32:f9:43:32:43:8f:d9:dd:c2:4c:e9:01:71:15:
d9:6d:08:0c:f6:0d:18:e9:a9:d4:fc:bd:d1:e8:b7:
c6:27:6a:84:2c:7c:c2:d3:7c:d0:4b:8f:90:7e:b6:
b4:e4:05:43:91:99:ff:89:ef:bb:08:8a:4d:8c:69:
cd:a5:63:c7:ed:af:99:6a:33:be:60:f0:7f:d9:30:
69:24:47:50:20:50:23:97:8c:4d:fc:23:27:bd:37:
af:db:ba:00:a9:4b:81:a6:6f:33:b9:97:f3:50:bf:
35:3e:10:62:39:ec:40:f8:13:7e:20:dc:50:91:39:
3b:86:80:47:c9:5e:be:57:fe:c5:71:b8:54:42:58:
4b:07:13:fb:d9:4d:9f:95:7f:95:f1:60:a1:54:29:
ea:43:ba:63:c2:04:cc:27:be:82:b8:41:99:64:a5:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C0:38:04:22:50:59:CC:29:A7:73:B4:35:24:BE:6A:61:98:DF:EA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aMA4BCJQWcwpp3O0NSS-amGY3-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:332::/48
Signature Algorithm: sha256WithRSAEncryption
4d:dd:10:0e:22:5f:63:d0:06:22:9e:a7:38:58:b5:0c:2d:c5:
c5:c2:bf:8a:39:a3:17:ca:72:ee:92:e5:15:51:00:2f:4f:f6:
ea:41:84:70:f2:a5:92:b8:78:e7:bd:d4:63:dc:e8:b4:89:6c:
2a:47:f6:26:54:0f:0b:fb:fe:87:b7:89:aa:3c:f9:09:63:24:
06:40:91:2f:0d:04:16:86:44:c5:8f:e8:7b:e6:2f:f5:1f:bf:
93:d6:30:26:e7:4c:f2:31:7a:3d:07:8b:bc:f2:5f:bc:44:3e:
b2:d2:b4:56:8e:8d:53:53:ba:d0:f6:3a:36:31:0e:9b:73:fe:
18:de:9e:fd:81:ec:ed:07:e6:a7:9f:72:d7:c6:bd:4d:5d:d5:
f5:04:56:55:bb:a3:96:80:87:43:5a:7c:e7:4a:28:1c:e8:5a:
26:c9:d6:2c:6c:e3:23:ef:f8:5a:72:96:7b:db:c1:e7:df:ad:
a1:3e:4e:1d:67:88:4c:01:f5:e2:3b:fb:17:0f:aa:4e:ad:d0:
4a:a1:46:c5:88:0a:c3:f7:3c:f6:e4:0a:21:9c:e1:9f:f6:27:
9a:44:3d:c4:a9:7c:6e:cf:51:f0:d3:b5:b1:37:48:de:90:41:
c3:27:7d:b2:9c:cd:1e:28:69:0e:47:cc:a3:11:82:0f:a6:5e:
96:77:18:a0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvST0sUO7YTC3qWg8PSCgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGMwMzgwNDIyNTA1OWNjMjlhNzczYjQzNTI0YmU2YTYxOThkZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAMcYdt4aaAdYk3dxzOV/aOosWBr
GiJwSNpeNDTImiSRN7j/KXNVp9WbxO4rfI8sgwmPTnEqXynHtvsEw2lPfjoIc9r7
+AOjuWWZXuVFwtxQ3uiBU7VWdogRMvlDMkOP2d3CTOkBcRXZbQgM9g0Y6anU/L3R
6LfGJ2qELHzC03zQS4+Qfra05AVDkZn/ie+7CIpNjGnNpWPH7a+ZajO+YPB/2TBp
JEdQIFAjl4xN/CMnvTev27oAqUuBpm8zuZfzUL81PhBiOexA+BN+INxQkTk7hoBH
yV6+V/7FcbhUQlhLBxP72U2flX+V8WChVCnqQ7pjwgTMJ76CuEGZZKX9DQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGjAOAQiUFnMKadztDUkvmphmN/qMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvYU1BNEJDSlFXY3dwcDNPME5TUy1hbUdZMy1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwAMy
MA0GCSqGSIb3DQEBCwUAA4IBAQBN3RAOIl9j0AYinqc4WLUMLcXFwr+KOaMXynLu
kuUVUQAvT/bqQYRw8qWSuHjnvdRj3Oi0iWwqR/YmVA8L+/6Ht4mqPPkJYyQGQJEv
DQQWhkTFj+h75i/1H7+T1jAm50zyMXo9B4u88l+8RD6y0rRWjo1TU7rQ9jo2MQ6b
c/4Y3p79geztB+ann3LXxr1NXdX1BFZVu6OWgIdDWnznSigc6FomydYsbOMj7/ha
cpZ728Hn362hPk4dZ4hMAfXiO/sXD6pOrdBKoUbFiArD9zz25AohnOGf9ieaRD3E
qXxuz1Hw07WxN0jekEHDJ32ynM0eKGkOR8yjEYIPpl6Wdxig
-----END CERTIFICATE-----
Generated at Fri May 3 12:39:05 2024 by rpki-client on console-fra.rpki-client.org