Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bT3UcqMrjRosf0TTw_bc4-du1SM.roa
File: bT3UcqMrjRosf0TTw_bc4-du1SM.roa (raw, json)
Hash identifier: P4v+Wxak3tap4KOXbhfbyIUFVOxybgbp0K7KAweYfUk=
Subject key identifier: 6D:3D:D4:72:A3:2B:8D:1A:2C:7F:44:D3:C3:F6:DC:E3:E7:6E:D5:23
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD531D8483862EB7E04A8F8E903761
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bT3UcqMrjRosf0TTw_bc4-du1SM.roa
Signing time: Tue 02 Jan 2024 10:34:37 +0000
ROA not before: Tue 02 Jan 2024 10:34:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215887
IP address blocks: 2a06:de06:e660::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:53:1d:84:83:86:2e:b7:e0:4a:8f:8e:90:37:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d3dd472a32b8d1a2c7f44d3c3f6dce3e76ed523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:a1:94:b8:6b:eb:45:89:32:f5:47:26:57:
f7:5e:d4:03:d4:fc:ba:8b:f0:5b:ff:e9:78:16:87:
9e:88:6f:82:1a:b7:4e:03:49:4a:e7:73:a4:e6:72:
d7:a3:b1:4a:d4:fe:e8:75:68:52:04:7d:bd:31:16:
37:87:fd:81:5b:38:7a:54:15:a7:15:bc:b0:99:c2:
0f:11:1e:95:c2:00:78:75:46:55:f8:99:12:79:69:
32:d3:53:b6:ee:b0:b0:33:00:a6:e7:91:a5:d7:7f:
75:00:fd:ad:28:43:91:2f:32:94:b4:fb:17:fe:6e:
7a:8e:7c:e7:75:57:82:6d:86:ba:14:d7:fc:49:34:
84:69:31:f8:50:39:e6:43:e4:7d:6d:fe:00:22:27:
3c:98:74:7e:1f:44:de:b2:8f:e6:35:c8:8f:56:08:
9c:ae:8f:cc:f4:2e:fe:19:d5:25:f1:d5:da:d4:b2:
57:34:bc:aa:33:7f:36:f6:5a:fc:18:89:bb:5d:14:
ed:54:43:1b:81:c0:20:52:2d:05:f7:02:69:c3:7c:
89:35:ad:00:1e:7e:5b:dc:b7:09:5f:1f:0b:50:a8:
30:7e:ce:ae:a4:00:a4:c1:f7:70:c0:8d:2b:a2:31:
8f:27:5f:5f:b8:d6:59:07:9a:44:a1:e6:e3:b9:76:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3D:D4:72:A3:2B:8D:1A:2C:7F:44:D3:C3:F6:DC:E3:E7:6E:D5:23
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bT3UcqMrjRosf0TTw_bc4-du1SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de06:e660::/44
Signature Algorithm: sha256WithRSAEncryption
9d:c3:79:4e:0b:ff:a1:5f:d4:fe:f7:1c:c8:c9:7e:60:45:39:
86:a0:b4:90:1b:0a:61:27:9f:a7:c2:13:1b:6b:42:f7:e5:bf:
ef:f1:88:ff:36:5b:5c:d7:b3:8b:ae:35:72:8c:39:77:f9:55:
6c:6a:68:e6:24:07:c5:63:ea:7d:71:81:04:07:05:14:32:ca:
96:8a:9b:63:16:dc:30:78:2d:99:2d:46:74:a6:ea:e4:41:2e:
33:74:48:cc:62:38:77:f0:55:11:45:3b:65:94:b2:1a:f7:81:
b3:fa:b9:cb:3f:7e:72:55:43:71:a3:f0:de:b8:17:8f:23:f0:
6c:0c:5a:75:40:9b:66:2b:a5:9e:9b:68:bb:eb:a2:08:c0:5f:
26:25:d5:68:68:4f:d0:71:74:6c:65:4a:cc:16:06:22:49:cb:
b0:03:a5:f1:d5:4a:ad:f1:64:d1:48:dc:be:fa:f5:da:66:fc:
e6:ad:3b:65:ba:9f:80:07:9f:bc:87:32:a2:b0:9f:06:0c:f8:
65:58:5c:90:20:88:cf:e5:e9:d3:97:ce:f6:0e:3b:0d:fe:09:
c3:e6:75:a6:6d:f1:32:d5:23:e5:cc:c9:bd:fb:e4:75:75:c9:
e2:0b:74:5b:80:46:85:25:49:d5:99:79:fe:12:e4:57:75:47:
6a:7e:78:24
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvVMdhIOGLrfgSo+OkDdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDNkZDQ3MmEzMmI4ZDFhMmM3ZjQ0ZDNjM2Y2ZGNlM2U3NmVkNTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSehlLhr60WJMvVHJlf3XtQD1Py6
i/Bb/+l4FoeeiG+CGrdOA0lK53Ok5nLXo7FK1P7odWhSBH29MRY3h/2BWzh6VBWn
FbywmcIPER6VwgB4dUZV+JkSeWky01O27rCwMwCm55Gl1391AP2tKEORLzKUtPsX
/m56jnzndVeCbYa6FNf8STSEaTH4UDnmQ+R9bf4AIic8mHR+H0Teso/mNciPVgic
ro/M9C7+GdUl8dXa1LJXNLyqM3829lr8GIm7XRTtVEMbgcAgUi0F9wJpw3yJNa0A
Hn5b3LcJXx8LUKgwfs6upACkwfdwwI0rojGPJ19fuNZZB5pEoebjuXZKHwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFG091HKjK40aLH9E08P23OPnbtUjMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvYlQzVWNxTXJqUm9zZjBUVHdfYmM0LWR1MVNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbeBuZg
MA0GCSqGSIb3DQEBCwUAA4IBAQCdw3lOC/+hX9T+9xzIyX5gRTmGoLSQGwphJ5+n
whMba0L35b/v8Yj/Nltc17OLrjVyjDl3+VVsamjmJAfFY+p9cYEEBwUUMsqWiptj
FtwweC2ZLUZ0purkQS4zdEjMYjh38FURRTtllLIa94Gz+rnLP35yVUNxo/DeuBeP
I/BsDFp1QJtmK6Wem2i766IIwF8mJdVoaE/QcXRsZUrMFgYiScuwA6Xx1Uqt8WTR
SNy++vXaZvzmrTtlup+AB5+8hzKisJ8GDPhlWFyQIIjP5enTl872DjsN/gnD5nWm
bfEy1SPlzMm9++R1dcniC3RbgEaFJUnVmXn+EuRXdUdqfngk
-----END CERTIFICATE-----
Generated at Fri May 3 03:33:17 2024 by rpki-client on console-ams.rpki-client.org