Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/b8d4IZA87p9-JAsPUctmpZRNJnE.roa
File: b8d4IZA87p9-JAsPUctmpZRNJnE.roa (raw, json)
Hash identifier: juAVy/wi6z91vriRmn3bCA88qwZpd339JBmnxJpwYGg=
Subject key identifier: 6F:C7:78:21:90:3C:EE:9F:7E:24:0B:0F:51:CB:66:A5:94:4D:26:71
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01924E359E625E2EFE861E3748C85E45A835
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/b8d4IZA87p9-JAsPUctmpZRNJnE.roa
Signing time: Wed 02 Oct 2024 17:09:49 +0000
ROA not before: Wed 02 Oct 2024 17:09:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215738
IP address blocks: 2a06:de00:700::/44 maxlen: 48
2a06:de00:7f0::/48 maxlen: 48
2a06:de00:7f1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4e:35:9e:62:5e:2e:fe:86:1e:37:48:c8:5e:45:a8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 2 17:09:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fc77821903cee9f7e240b0f51cb66a5944d2671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:47:24:93:3a:78:41:c4:a9:33:6e:18:6e:
bd:f8:43:dd:9c:98:ff:3f:08:0e:cb:fa:de:67:dc:
d2:ed:4f:e3:81:17:5c:dd:1b:66:f1:c9:97:62:59:
1e:78:3f:88:b5:42:67:44:ec:1a:98:9b:0c:3c:1d:
74:4e:3d:be:91:03:f6:bf:32:a8:a7:f5:d6:4b:b3:
f2:d3:67:2c:da:d3:89:f4:14:90:41:f8:5c:04:b0:
a9:8b:ac:3f:71:3f:2a:11:bc:d4:9e:4c:c4:9a:ff:
c3:3d:4d:0c:00:35:67:5f:a1:83:00:76:c8:df:7d:
04:80:1c:04:cb:30:d1:bf:55:ba:53:09:e9:70:ad:
b5:20:42:bb:fa:2c:da:8e:5c:43:ed:ad:13:5e:ec:
a2:ca:4b:f6:ec:90:fb:b0:b7:d4:36:3e:6a:61:a8:
c9:0a:57:ea:56:e0:a4:65:9e:de:71:2c:29:fc:89:
8c:50:1e:81:97:c2:2c:51:7e:fb:40:66:a6:ea:09:
c1:62:33:36:e1:90:4e:c5:21:51:68:0a:4f:5b:ea:
55:35:92:e0:25:cc:6a:18:82:9d:75:a3:14:60:60:
40:9e:97:3e:36:9c:cd:35:8f:23:a4:12:16:81:ea:
8b:44:21:44:68:11:31:4a:5c:7a:6e:9d:f7:f9:2e:
3d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C7:78:21:90:3C:EE:9F:7E:24:0B:0F:51:CB:66:A5:94:4D:26:71
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/b8d4IZA87p9-JAsPUctmpZRNJnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:700::/44
2a06:de00:7f0::/47
Signature Algorithm: sha256WithRSAEncryption
c2:b8:f8:b8:83:a7:53:8e:18:f5:93:14:0e:41:cb:63:27:44:
49:28:2c:de:cc:55:b2:aa:7c:e5:05:c0:7f:1e:eb:3f:ac:a5:
21:36:dd:22:8f:7a:56:ad:14:a2:29:38:2a:4f:d3:b4:fd:e2:
65:ab:96:c7:ab:84:fb:d4:f3:12:0f:cc:c1:ed:26:ea:d1:81:
1c:70:b3:2f:13:a8:14:a6:23:39:4a:7d:a7:61:5e:9a:c8:0c:
8c:25:82:92:a2:ee:1e:07:9c:c8:12:17:70:38:bd:33:26:2b:
6a:88:b6:f9:f2:43:b5:c8:0c:a9:37:65:11:49:70:c8:9d:68:
ab:54:50:a5:87:71:0a:ea:ed:fc:34:d5:c5:34:79:68:09:76:
8b:c3:db:f7:92:39:86:7f:b7:7e:36:e6:dc:44:ec:ba:72:f7:
8d:99:d5:f6:c5:2f:0e:b8:06:53:fa:fd:34:04:9d:35:12:ab:
c8:e7:27:ff:ff:0c:24:f0:92:20:1e:5b:b5:33:bd:a5:45:ee:
2b:5f:d0:80:64:56:60:69:bc:85:c4:2c:ee:53:7c:42:9b:a7:
57:de:41:9d:bb:b9:00:f4:ca:58:99:c3:62:ad:b3:c3:c1:b2:
82:1e:fe:bd:1d:b4:9f:c3:66:06:e9:ba:85:c9:a7:29:dc:66:
08:fb:be:31
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZJONZ5iXi7+hh43SMheRag1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQxMDAyMTcwOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmM3NzgyMTkwM2NlZTlmN2UyNDBiMGY1MWNiNjZhNTk0NGQyNjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubJHJJM6eEHEqTNuGG69+EPdnJj/
PwgOy/reZ9zS7U/jgRdc3Rtm8cmXYlkeeD+ItUJnROwamJsMPB10Tj2+kQP2vzKo
p/XWS7Py02cs2tOJ9BSQQfhcBLCpi6w/cT8qEbzUnkzEmv/DPU0MADVnX6GDAHbI
330EgBwEyzDRv1W6UwnpcK21IEK7+izajlxD7a0TXuyiykv27JD7sLfUNj5qYajJ
ClfqVuCkZZ7ecSwp/ImMUB6Bl8IsUX77QGam6gnBYjM24ZBOxSFRaApPW+pVNZLg
JcxqGIKddaMUYGBAnpc+NpzNNY8jpBIWgeqLRCFEaBExSlx6bp33+S49cQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG/HeCGQPO6ffiQLD1HLZqWUTSZxMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvYjhkNElaQTg3cDktSkFzUFVjdG1wWlJOSm5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeAAcA
AwcBKgbeAAfwMA0GCSqGSIb3DQEBCwUAA4IBAQDCuPi4g6dTjhj1kxQOQctjJ0RJ
KCzezFWyqnzlBcB/Hus/rKUhNt0ij3pWrRSiKTgqT9O0/eJlq5bHq4T71PMSD8zB
7Sbq0YEccLMvE6gUpiM5Sn2nYV6ayAyMJYKSou4eB5zIEhdwOL0zJitqiLb58kO1
yAypN2URSXDInWirVFClh3EK6u38NNXFNHloCXaLw9v3kjmGf7d+NubcROy6cveN
mdX2xS8OuAZT+v00BJ01EqvI5yf//wwk8JIgHlu1M72lRe4rX9CAZFZgabyFxCzu
U3xCm6dX3kGdu7kA9MpYmcNirbPDwbKCHv69HbSfw2YG6bqFyacp3GYI+74x
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:31 2024 by rpki-client on console-fra.rpki-client.org