Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dyQPJtD05dpiM50JBiPqaqECcRM.roa
File: dyQPJtD05dpiM50JBiPqaqECcRM.roa (raw, json)
Hash identifier: kX/4edKYI8p85+StI/6Jdo6+lBs8ckS2lMoQ6PAyUjY=
Subject key identifier: 77:24:0F:26:D0:F4:E5:DA:62:33:9D:09:06:23:EA:6A:A1:02:71:13
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCEC7861083F5EECC33B5769068092
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dyQPJtD05dpiM50JBiPqaqECcRM.roa
Signing time: Tue 02 Jan 2024 10:34:10 +0000
ROA not before: Tue 02 Jan 2024 10:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199183
IP address blocks: 2a0e:b107:b13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ec:78:61:08:3f:5e:ec:c3:3b:57:69:06:80:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77240f26d0f4e5da62339d090623ea6aa1027113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:5f:80:5e:77:ae:96:99:e2:71:5b:15:93:
ed:63:8d:26:b1:e3:7b:57:f7:a8:ff:22:53:cb:1d:
20:7e:a6:70:0e:49:36:0c:64:94:6b:37:9b:fc:e7:
ce:54:20:d1:4b:09:e0:0e:de:e1:10:22:a7:7b:e5:
c5:87:b1:63:02:ab:ba:4c:1b:a5:dc:de:d3:8c:9e:
bb:62:ad:86:e2:00:8b:fd:df:65:8a:a7:e0:e8:c0:
b2:27:79:7c:f5:04:03:a4:6f:12:f2:47:9a:8a:ff:
f1:73:28:54:45:04:01:e0:60:5c:27:8b:19:2c:46:
c5:9d:2b:f5:2a:65:e2:46:01:8f:98:bb:42:d0:c3:
aa:ed:19:29:40:1c:90:6b:06:61:eb:34:65:11:54:
1a:1a:26:46:22:47:91:54:23:0a:5a:72:71:99:c3:
8b:2f:74:57:4b:82:4b:16:db:f2:df:2f:fe:27:ed:
46:d1:bb:cb:e4:5a:c0:e8:f1:9a:27:83:84:a9:ed:
c8:0a:20:18:d3:d8:fb:a0:79:3d:2b:31:02:b5:5f:
9c:07:f3:f0:dd:ad:70:91:ce:dd:7d:b2:70:5e:10:
07:97:c1:a5:83:5c:89:f4:90:c6:bc:35:28:84:6e:
ae:c7:cc:84:7e:7a:ad:68:2d:32:99:86:90:dc:1e:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:24:0F:26:D0:F4:E5:DA:62:33:9D:09:06:23:EA:6A:A1:02:71:13
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dyQPJtD05dpiM50JBiPqaqECcRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:b13::/48
Signature Algorithm: sha256WithRSAEncryption
91:6b:42:94:3d:2e:1d:fc:1b:cd:50:18:6a:3a:b8:49:bc:68:
07:14:c6:41:dd:ce:e7:7d:8b:b8:05:a0:76:f8:72:d5:d7:cb:
ba:cf:d0:f2:21:c5:1f:f4:28:98:e4:23:fa:97:f4:9f:4d:63:
2e:c1:d1:a3:f2:f5:00:5e:cb:84:02:ea:66:74:1a:33:dc:7d:
99:01:10:d3:e6:68:84:80:12:18:29:ec:67:4e:74:80:9e:21:
04:dc:ed:0e:e7:70:77:38:56:64:ed:ae:ca:64:b1:5a:65:b5:
d9:5a:c4:c3:3d:b5:93:89:c6:27:9a:a7:98:9d:80:db:6b:94:
2f:93:09:02:bf:69:26:08:35:79:8d:de:7c:12:08:a9:37:9b:
6c:8a:b4:0f:25:6a:64:cd:3d:6b:70:2d:8b:4b:0c:a2:54:8d:
b1:72:72:e3:d7:32:e6:48:27:9d:02:f2:f2:4a:8e:80:bf:50:
03:29:d0:86:b8:31:e0:5f:a4:8a:2e:1e:f8:4f:51:73:1f:03:
ac:d0:d6:ab:11:ae:49:51:ad:59:d8:18:46:b5:47:b9:00:52:
74:6b:32:69:55:0c:75:4e:c5:b0:6b:6c:7d:b0:df:53:73:95:
d8:31:1e:ec:96:05:69:29:09:53:bf:46:40:51:31:8c:7f:88:
47:24:26:3b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvOx4YQg/XuzDO1dpBoCSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzI0MGYyNmQwZjRlNWRhNjIzMzlkMDkwNjIzZWE2YWExMDI3MTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqxfgF53rpaZ4nFbFZPtY40mseN7
V/eo/yJTyx0gfqZwDkk2DGSUazeb/OfOVCDRSwngDt7hECKne+XFh7FjAqu6TBul
3N7TjJ67Yq2G4gCL/d9liqfg6MCyJ3l89QQDpG8S8keaiv/xcyhURQQB4GBcJ4sZ
LEbFnSv1KmXiRgGPmLtC0MOq7RkpQByQawZh6zRlEVQaGiZGIkeRVCMKWnJxmcOL
L3RXS4JLFtvy3y/+J+1G0bvL5FrA6PGaJ4OEqe3ICiAY09j7oHk9KzECtV+cB/Pw
3a1wkc7dfbJwXhAHl8Glg1yJ9JDGvDUohG6ux8yEfnqtaC0ymYaQ3B7QLwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHckDybQ9OXaYjOdCQYj6mqhAnETMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZHlRUEp0RDA1ZHBpTTUwSkJpUHFhcUVDY1JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwsT
MA0GCSqGSIb3DQEBCwUAA4IBAQCRa0KUPS4d/BvNUBhqOrhJvGgHFMZB3c7nfYu4
BaB2+HLV18u6z9DyIcUf9CiY5CP6l/SfTWMuwdGj8vUAXsuEAupmdBoz3H2ZARDT
5miEgBIYKexnTnSAniEE3O0O53B3OFZk7a7KZLFaZbXZWsTDPbWTicYnmqeYnYDb
a5QvkwkCv2kmCDV5jd58EgipN5tsirQPJWpkzT1rcC2LSwyiVI2xcnLj1zLmSCed
AvLySo6Av1ADKdCGuDHgX6SKLh74T1FzHwOs0NarEa5JUa1Z2BhGtUe5AFJ0azJp
VQx1TsWwa2x9sN9Tc5XYMR7slgVpKQlTv0ZAUTGMf4hHJCY7
-----END CERTIFICATE-----
Generated at Fri May 3 09:37:08 2024 by rpki-client on console-fra.rpki-client.org