Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ahK7L23rrrPn0gcdEQwD-kgxqi4.roa
File: ahK7L23rrrPn0gcdEQwD-kgxqi4.roa (raw, json)
Hash identifier: NdQRWSYdYSGp52SqM6vf4KBhoU+whjMltDnOCeOw9iw=
Subject key identifier: 6A:12:BB:2F:6D:EB:AE:B3:E7:D2:07:1D:11:0C:03:FA:48:31:AA:2E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0192418842CE8EC194492697B63D4D1DDC7F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ahK7L23rrrPn0gcdEQwD-kgxqi4.roa
Signing time: Mon 30 Sep 2024 06:05:01 +0000
ROA not before: Mon 30 Sep 2024 06:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205043
IP address blocks: 2a0e:97c0:b10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:41:88:42:ce:8e:c1:94:49:26:97:b6:3d:4d:1d:dc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 30 06:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a12bb2f6debaeb3e7d2071d110c03fa4831aa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:75:dd:40:ba:e4:00:3b:c4:42:60:74:e3:
f2:ca:73:58:d3:c3:71:d6:22:48:52:56:dd:37:85:
89:d8:e0:ee:38:38:0d:6a:ea:6a:5e:e7:09:bb:22:
62:76:db:43:51:6f:21:5a:35:43:4b:4c:74:58:47:
f4:47:af:25:2d:a4:ac:20:9d:71:6e:32:b8:78:f9:
13:dc:82:6d:46:1a:d3:37:50:76:53:ee:b7:0e:ca:
08:72:ba:5f:92:00:69:8e:70:a9:22:0e:42:15:8b:
dc:38:47:64:80:6b:f4:4b:ab:c8:07:0d:45:a4:23:
54:70:05:6e:33:a6:38:3c:dc:f8:65:f2:c4:1b:99:
26:88:f2:af:92:53:31:e6:ef:9b:91:a8:b7:e2:54:
d4:20:83:b7:08:cf:d4:75:42:b4:7e:e8:b1:f5:06:
bc:77:37:74:c2:7b:ce:ca:5a:c8:e0:75:37:3c:e3:
be:a1:e7:21:a5:36:47:20:71:c4:ea:89:09:d3:91:
49:f7:cc:7e:2c:de:5e:4c:73:b1:f2:80:e6:49:7c:
b7:50:9c:86:fe:ab:7b:c8:c4:8e:46:05:12:4b:09:
9b:63:35:fb:5c:15:c0:52:23:d6:43:f2:db:53:25:
3a:b0:e5:dd:f1:ec:2d:37:92:2d:20:95:bb:7f:bb:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:12:BB:2F:6D:EB:AE:B3:E7:D2:07:1D:11:0C:03:FA:48:31:AA:2E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ahK7L23rrrPn0gcdEQwD-kgxqi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b10::/44
Signature Algorithm: sha256WithRSAEncryption
33:c0:5a:79:1e:8e:9a:bf:5a:45:b3:d0:47:cb:61:ff:a7:40:
9c:a8:44:cc:d5:8f:fd:09:fc:fa:75:bd:a1:15:d9:41:6e:6f:
10:9b:d7:91:89:de:54:11:8e:e7:ee:33:98:7d:96:15:99:d4:
b6:82:ff:d7:b3:51:36:b9:16:87:71:41:cc:b2:c2:fe:69:22:
c0:60:b3:dc:9b:aa:99:23:30:b2:fc:32:be:30:26:01:9a:07:
89:f4:81:69:69:21:52:7a:c8:ba:cc:6c:bf:a1:3a:43:e5:58:
b1:68:e1:0f:cc:97:46:4f:80:12:18:09:07:7e:a9:f0:26:dd:
70:9c:4d:c0:9b:09:74:78:2d:09:d5:e2:1f:34:c6:30:47:8b:
a7:23:bc:da:b9:81:c7:dd:a5:33:a6:74:81:53:31:7d:c1:22:
9c:fb:ed:b5:49:05:de:0c:c1:42:3c:95:a3:90:a4:15:30:62:
21:c3:9f:c4:90:a2:d1:24:0b:70:09:24:87:af:3a:80:9a:08:
36:0f:b1:a8:62:be:0d:69:d6:8d:90:ba:a0:ae:89:74:21:e5:
01:16:8b:1e:18:10:8c:16:fe:78:f1:72:d1:80:24:8c:b2:36:
88:4b:eb:09:be:7d:d1:d0:7a:42:8d:fa:23:40:29:cd:bb:45:
e2:a3:fb:71
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZJBiELOjsGUSSaXtj1NHdx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwOTMwMDYwNTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTEyYmIyZjZkZWJhZWIzZTdkMjA3MWQxMTBjMDNmYTQ4MzFhYTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAh13UC65AA7xEJgdOPyynNY08Nx
1iJIUlbdN4WJ2ODuODgNaupqXucJuyJidttDUW8hWjVDS0x0WEf0R68lLaSsIJ1x
bjK4ePkT3IJtRhrTN1B2U+63DsoIcrpfkgBpjnCpIg5CFYvcOEdkgGv0S6vIBw1F
pCNUcAVuM6Y4PNz4ZfLEG5kmiPKvklMx5u+bkai34lTUIIO3CM/UdUK0fuix9Qa8
dzd0wnvOylrI4HU3POO+oechpTZHIHHE6okJ05FJ98x+LN5eTHOx8oDmSXy3UJyG
/qt7yMSORgUSSwmbYzX7XBXAUiPWQ/LbUyU6sOXd8ewtN5ItIJW7f7szOQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGoSuy9t666z59IHHREMA/pIMaouMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvYWhLN0wyM3JyclBuMGdjZEVRd0Qta2d4cWk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAsQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAzwFp5Ho6av1pFs9BHy2H/p0CcqETM1Y/9Cfz6
db2hFdlBbm8Qm9eRid5UEY7n7jOYfZYVmdS2gv/Xs1E2uRaHcUHMssL+aSLAYLPc
m6qZIzCy/DK+MCYBmgeJ9IFpaSFSesi6zGy/oTpD5VixaOEPzJdGT4ASGAkHfqnw
Jt1wnE3Amwl0eC0J1eIfNMYwR4unI7zauYHH3aUzpnSBUzF9wSKc++21SQXeDMFC
PJWjkKQVMGIhw5/EkKLRJAtwCSSHrzqAmgg2D7GoYr4NadaNkLqgrol0IeUBFose
GBCMFv548XLRgCSMsjaIS+sJvn3R0HpCjfojQCnNu0Xio/tx
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:31 2024 by rpki-client on console-fra.rpki-client.org