Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dyKzbFWRHgMavZ91jq_EVW-DNb8.roa
File: dyKzbFWRHgMavZ91jq_EVW-DNb8.roa (raw, json)
Hash identifier: k8RzAkrvfOXI6UDxByJ/ycyZBI5GCJQWVNIK4H7QBMs=
Subject key identifier: 77:22:B3:6C:55:91:1E:03:1A:BD:9F:75:8E:AF:C4:55:6F:83:35:BF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD3593AC5482257137B96A41B7D31C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dyKzbFWRHgMavZ91jq_EVW-DNb8.roa
Signing time: Tue 02 Jan 2024 10:34:29 +0000
ROA not before: Tue 02 Jan 2024 10:34:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211479
IP address blocks: 2a0e:b107:1220::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:35:93:ac:54:82:25:71:37:b9:6a:41:b7:d3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7722b36c55911e031abd9f758eafc4556f8335bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a8:3f:28:b3:38:3a:43:e7:1d:de:ac:fc:22:
fd:6b:64:f3:8c:b7:b2:2a:4a:17:b0:a2:d5:74:e2:
d7:f1:bc:c1:35:49:60:a2:af:bb:98:c7:6c:19:d2:
92:01:97:0f:33:79:3d:a3:83:c3:07:97:9d:3f:21:
8e:0c:8f:be:2d:94:2d:4c:4a:7f:93:2b:b7:d5:2c:
d1:f5:f7:b9:f8:d0:f4:88:78:14:b9:24:58:23:6e:
d8:c5:2b:15:e4:f6:60:b3:3c:3c:5c:9c:9f:68:67:
5d:54:31:d8:dd:42:f0:06:71:08:5f:50:63:b5:15:
17:24:af:ec:86:71:b0:d8:60:2c:ec:b2:b5:d3:0e:
cf:b1:3f:3a:56:5d:68:46:ee:e1:81:2f:8f:ce:2e:
6e:9a:47:9f:14:5d:62:d0:6a:44:dc:04:94:e4:4d:
23:bc:cd:19:17:53:61:5e:46:43:dd:5d:d7:f8:e0:
1c:12:7c:06:db:76:1d:dc:8c:59:e7:55:c0:f8:b4:
80:b1:81:e0:6d:85:1a:d5:5c:0a:eb:de:e5:ee:90:
d2:d8:8f:41:9b:b4:52:99:92:b6:c6:ed:15:31:34:
80:c3:a8:e5:01:13:75:21:b4:be:fb:07:54:f0:3d:
3e:c3:53:b4:5c:1a:c2:a4:a1:4c:32:e8:2c:48:a1:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:22:B3:6C:55:91:1E:03:1A:BD:9F:75:8E:AF:C4:55:6F:83:35:BF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dyKzbFWRHgMavZ91jq_EVW-DNb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1220::/44
Signature Algorithm: sha256WithRSAEncryption
86:f1:bd:79:e6:01:da:19:43:86:68:e3:af:24:f0:6b:c8:70:
58:99:9f:ab:64:25:1c:e8:e3:54:62:7a:5a:8b:1c:2e:76:0a:
10:80:c3:d9:e5:6b:55:07:c3:58:21:8a:17:29:4d:34:ed:47:
da:82:ba:27:19:61:a7:29:c2:fb:f6:fd:b5:92:c9:6f:49:0d:
9e:2e:e6:a6:4c:74:ea:f9:52:59:69:4c:e1:40:95:e9:ca:95:
6a:42:9f:0b:d2:bf:49:68:03:10:a7:89:89:e5:23:3c:38:1b:
c5:30:d6:fb:32:6e:05:0f:31:2b:47:4d:3c:09:a1:6f:23:81:
8d:2b:ba:da:75:7f:43:d9:4c:ff:7d:23:fb:4a:d7:df:42:d0:
1f:11:f5:a5:b2:f9:01:75:54:f1:3c:59:f5:61:89:5c:20:fa:
1d:4d:a2:3a:56:dc:9e:0c:57:9a:3d:3f:2f:2e:66:14:ca:ef:
dd:75:18:7c:5a:ab:52:5f:46:af:cb:50:c2:f8:0e:58:03:c9:
c9:93:24:01:56:a3:6e:26:ea:06:13:ef:03:84:11:7c:7a:d0:
13:bb:d9:fe:b2:50:83:95:af:6a:af:2a:58:46:6c:3f:aa:4e:
18:67:f4:2f:b9:14:21:1b:5f:c1:ba:53:7d:de:34:77:17:e0:
b6:33:8e:b6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvTWTrFSCJXE3uWpBt9McMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzIyYjM2YzU1OTExZTAzMWFiZDlmNzU4ZWFmYzQ1NTZmODMzNWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKg/KLM4OkPnHd6s/CL9a2TzjLey
KkoXsKLVdOLX8bzBNUlgoq+7mMdsGdKSAZcPM3k9o4PDB5edPyGODI++LZQtTEp/
kyu31SzR9fe5+ND0iHgUuSRYI27YxSsV5PZgszw8XJyfaGddVDHY3ULwBnEIX1Bj
tRUXJK/shnGw2GAs7LK10w7PsT86Vl1oRu7hgS+Pzi5umkefFF1i0GpE3ASU5E0j
vM0ZF1NhXkZD3V3X+OAcEnwG23Yd3IxZ51XA+LSAsYHgbYUa1VwK697l7pDS2I9B
m7RSmZK2xu0VMTSAw6jlARN1IbS++wdU8D0+w1O0XBrCpKFMMugsSKH2VwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHcis2xVkR4DGr2fdY6vxFVvgzW/MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZHlLemJGV1JIZ01hdlo5MWpxX0VWVy1ETmI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxIg
MA0GCSqGSIb3DQEBCwUAA4IBAQCG8b155gHaGUOGaOOvJPBryHBYmZ+rZCUc6ONU
YnpaixwudgoQgMPZ5WtVB8NYIYoXKU007UfagronGWGnKcL79v21kslvSQ2eLuam
THTq+VJZaUzhQJXpypVqQp8L0r9JaAMQp4mJ5SM8OBvFMNb7Mm4FDzErR008CaFv
I4GNK7radX9D2Uz/fSP7StffQtAfEfWlsvkBdVTxPFn1YYlcIPodTaI6VtyeDFea
PT8vLmYUyu/ddRh8WqtSX0avy1DC+A5YA8nJkyQBVqNuJuoGE+8DhBF8etATu9n+
slCDla9qrypYRmw/qk4YZ/QvuRQhG1/BulN93jR3F+C2M462
-----END CERTIFICATE-----
Generated at Fri May 3 06:56:35 2024 by rpki-client on console-fra.rpki-client.org