Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d7nvISuWzOrMVciI49E603-Kpes.roa
File: d7nvISuWzOrMVciI49E603-Kpes.roa (raw, json)
Hash identifier: FuEMxuxXRsFXWv0Wr1h9lEsw6VN1ymF+vu4CjZ316Ng=
Subject key identifier: 77:B9:EF:21:2B:96:CC:EA:CC:55:C8:88:E3:D1:3A:D3:7F:8A:A5:EB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD009EAB7517291B5A9D03B12E8A47
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d7nvISuWzOrMVciI49E603-Kpes.roa
Signing time: Tue 02 Jan 2024 10:34:15 +0000
ROA not before: Tue 02 Jan 2024 10:34:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202747
IP address blocks: 2a10:2f00:189::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:00:9e:ab:75:17:29:1b:5a:9d:03:b1:2e:8a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77b9ef212b96cceacc55c888e3d13ad37f8aa5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:66:fa:ab:40:86:bd:6c:bf:58:ba:5f:95:4e:
0a:cf:ce:58:92:b3:8a:e4:11:c1:ba:04:ea:49:e0:
7e:91:71:9a:44:19:7e:f1:02:23:f1:b1:ab:db:c0:
8f:94:79:b1:92:14:a8:18:49:4e:f5:07:7d:48:41:
01:6f:df:bb:16:a3:39:ca:87:ad:a5:08:17:02:6f:
d9:f0:cd:8c:f8:40:8a:c7:b4:d6:b8:13:3d:16:92:
94:98:31:91:f3:de:f5:f2:8f:c3:1c:89:d7:36:f4:
db:33:45:69:b4:43:54:e8:fd:76:d7:4b:d4:5e:c2:
d4:78:31:ac:df:80:7c:30:47:a6:d4:5c:3f:43:03:
2f:ba:13:98:2f:b3:bb:a2:bb:7c:8c:61:1e:20:db:
5f:48:80:05:ca:86:f6:8d:e3:92:19:9f:ab:e4:5b:
df:90:74:ab:fc:f6:ab:0c:d0:07:03:3f:91:b6:eb:
f0:bd:67:d3:3f:d1:47:4e:f3:d3:48:fd:ec:8c:ea:
15:5c:1f:6b:24:c2:34:f5:c0:5c:f3:51:cf:22:8e:
3b:4c:d0:9f:68:1e:2a:9f:d0:e2:e1:95:e7:45:56:
73:05:9a:b1:e1:c5:1d:cc:cf:e8:55:e6:fa:af:0b:
84:be:b3:e9:00:d3:aa:b6:3a:fe:38:84:72:70:b9:
3a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B9:EF:21:2B:96:CC:EA:CC:55:C8:88:E3:D1:3A:D3:7F:8A:A5:EB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d7nvISuWzOrMVciI49E603-Kpes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:189::/48
Signature Algorithm: sha256WithRSAEncryption
a4:32:03:40:e8:a9:d6:cf:cb:3a:ea:5f:a4:31:75:4f:11:4d:
d0:8a:26:4c:75:56:8b:a4:8a:a3:7a:cc:36:12:94:66:55:a4:
f4:6a:a0:f4:6b:e2:47:db:19:55:0f:54:34:fa:cc:c9:14:da:
c1:c3:f9:92:5d:f1:ee:23:cb:6d:2e:e2:10:da:ec:5d:2b:6a:
69:3f:41:b8:81:fc:fa:91:d6:1b:8d:f5:26:8e:f8:08:b7:aa:
be:e3:d0:ca:ee:98:ca:58:e0:c7:13:4c:89:46:b6:eb:28:a0:
bb:ae:bf:81:27:d3:30:1b:8d:eb:62:b0:cb:68:84:52:e3:4d:
b0:30:48:54:ca:33:8a:25:e4:e1:b0:d1:14:8e:d0:f5:e4:88:
2e:f3:14:69:51:9b:c0:97:2d:01:23:55:a8:bf:c6:e2:53:dd:
c5:cc:66:42:8a:ae:e3:8b:74:b9:0a:cb:a7:a7:10:68:d9:7a:
21:dc:c9:f6:20:8a:0f:bc:d2:99:a2:f5:0a:26:ef:c4:a3:d6:
fb:51:cb:8e:ca:a3:7b:8c:d2:d8:bc:bc:72:35:3c:cc:ae:ca:
c6:6f:81:fd:1a:d1:a1:b9:92:03:24:63:d4:3a:51:33:84:90:
2b:ca:39:99:1f:00:c0:64:75:f7:2f:81:f2:bb:d4:cf:72:8a:
20:c0:ba:22
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvQCeq3UXKRtanQOxLopHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2I5ZWYyMTJiOTZjY2VhY2M1NWM4ODhlM2QxM2FkMzdmOGFhNWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGb6q0CGvWy/WLpflU4Kz85YkrOK
5BHBugTqSeB+kXGaRBl+8QIj8bGr28CPlHmxkhSoGElO9Qd9SEEBb9+7FqM5yoet
pQgXAm/Z8M2M+ECKx7TWuBM9FpKUmDGR89718o/DHInXNvTbM0VptENU6P1210vU
XsLUeDGs34B8MEem1Fw/QwMvuhOYL7O7ort8jGEeINtfSIAFyob2jeOSGZ+r5Fvf
kHSr/ParDNAHAz+RtuvwvWfTP9FHTvPTSP3sjOoVXB9rJMI09cBc81HPIo47TNCf
aB4qn9Di4ZXnRVZzBZqx4cUdzM/oVeb6rwuEvrPpANOqtjr+OIRycLk6rwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHe57yErlszqzFXIiOPROtN/iqXrMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZDdudklTdVd6T3JNVmNpSTQ5RTYwMy1LcGVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAGJ
MA0GCSqGSIb3DQEBCwUAA4IBAQCkMgNA6KnWz8s66l+kMXVPEU3QiiZMdVaLpIqj
esw2EpRmVaT0aqD0a+JH2xlVD1Q0+szJFNrBw/mSXfHuI8ttLuIQ2uxdK2ppP0G4
gfz6kdYbjfUmjvgIt6q+49DK7pjKWODHE0yJRrbrKKC7rr+BJ9MwG43rYrDLaIRS
402wMEhUyjOKJeThsNEUjtD15Igu8xRpUZvAly0BI1Wov8biU93FzGZCiq7ji3S5
CsunpxBo2Xoh3Mn2IIoPvNKZovUKJu/Eo9b7UcuOyqN7jNLYvLxyNTzMrsrGb4H9
GtGhuZIDJGPUOlEzhJAryjmZHwDAZHX3L4Hyu9TPcoogwLoi
-----END CERTIFICATE-----
Generated at Fri May 3 06:56:35 2024 by rpki-client on console-fra.rpki-client.org