Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eJZSehiwvzA0hpOgLePFtBASkQ4.roa
File: eJZSehiwvzA0hpOgLePFtBASkQ4.roa (raw, json)
Hash identifier: TYciaNpMCKN/Q5iKrO+R4eJiUIxyoleS/q6XlLu5RUw=
Subject key identifier: 78:96:52:7A:18:B0:BF:30:34:86:93:A0:2D:E3:C5:B4:10:12:91:0E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCD30D29FA074484288A1D4B2E96E4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eJZSehiwvzA0hpOgLePFtBASkQ4.roa
Signing time: Tue 02 Jan 2024 10:34:04 +0000
ROA not before: Tue 02 Jan 2024 10:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56758
IP address blocks: 2a0e:97c0:660::/44 maxlen: 48
2a0e:b107:17a0::/44 maxlen: 48
2a10:cc40:b000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d3:0d:29:fa:07:44:84:28:8a:1d:4b:2e:96:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7896527a18b0bf30348693a02de3c5b41012910e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6c:68:08:8b:7e:f3:b9:15:cd:17:32:7c:8f:
00:b0:d8:5d:71:61:35:98:6f:dd:ff:44:70:d9:ef:
a2:a1:6c:f9:1b:b1:98:eb:5d:ae:8f:a7:43:38:cd:
9d:31:b1:5d:e8:d6:29:22:e6:5a:a7:66:5f:b0:ba:
25:33:50:ac:e9:9c:92:a4:ff:14:28:5e:33:e9:d4:
39:69:93:4a:dd:cf:be:73:99:73:71:1a:39:57:d1:
af:7e:d5:f9:09:11:f2:40:13:8d:11:18:d3:de:b6:
4d:7f:ac:f3:cd:8a:59:85:a0:f6:f2:09:78:7c:3f:
0c:34:4e:66:8f:28:35:e5:bf:dc:10:4b:83:7d:91:
b7:4b:2b:02:57:91:26:0b:97:da:6a:14:68:64:b9:
cb:89:23:ed:0a:7e:c3:24:dd:a7:bd:8d:7e:b2:cd:
d8:c3:2e:ca:6a:76:3d:f9:79:82:2c:c9:45:a4:ec:
56:df:fd:22:a4:83:c7:40:93:a8:8d:5a:d6:01:1d:
e3:f1:a2:d7:b8:6e:07:07:e2:44:b4:62:ef:ea:36:
73:f2:9f:66:6b:67:6e:aa:6f:ef:0a:1f:77:fc:d0:
65:66:f2:fe:02:a0:b1:18:1d:76:cf:99:eb:e0:26:
18:0c:de:60:f8:28:dd:1f:84:75:9a:56:e3:98:7a:
c2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:96:52:7A:18:B0:BF:30:34:86:93:A0:2D:E3:C5:B4:10:12:91:0E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eJZSehiwvzA0hpOgLePFtBASkQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:660::/44
2a0e:b107:17a0::/44
2a10:cc40:b000::/44
Signature Algorithm: sha256WithRSAEncryption
63:33:ea:c7:29:a8:70:a3:28:5c:50:98:2c:14:70:9b:24:9e:
1b:1f:a2:31:30:34:20:59:1c:2f:88:c5:54:93:1d:3d:92:f5:
09:6f:cf:36:71:ae:a8:43:de:3e:de:e2:fe:49:ae:36:c8:e7:
9a:78:04:8c:45:c5:27:99:0d:01:5a:02:c9:e1:b2:5a:13:7b:
a5:18:e8:f8:07:19:4b:96:8b:5b:46:ea:89:53:01:12:bf:18:
66:b0:4f:bd:a0:af:44:f5:9c:c9:24:73:6a:d5:9e:d5:02:98:
14:4c:3f:b2:68:9f:ad:fe:f8:c9:f4:f6:5d:32:5d:f0:1f:40:
d8:54:89:bc:fb:49:40:51:71:2b:89:36:75:53:57:24:f0:b1:
fa:02:90:00:b0:18:d8:82:09:9e:1a:02:03:43:61:ed:4d:12:
c2:c3:b8:81:db:ea:2f:fa:a4:a7:ba:8a:50:db:32:c1:6a:b3:
d2:28:1e:8b:6c:e2:e0:e0:66:34:b5:12:4d:47:ac:f0:c2:09:
8c:8f:26:b2:ae:8b:60:dd:5a:7a:f1:38:f8:27:0c:83:f6:7a:
83:28:2d:26:b8:dd:c1:18:56:7a:b6:39:82:28:ae:88:89:61:
c5:91:c0:97:e8:a9:9d:dd:6d:e1:31:3a:2c:f4:2f:d8:50:38:
49:ad:10:43
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzJvNMNKfoHRIQoih1LLpbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODk2NTI3YTE4YjBiZjMwMzQ4NjkzYTAyZGUzYzViNDEwMTI5MTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2xoCIt+87kVzRcyfI8AsNhdcWE1
mG/d/0Rw2e+ioWz5G7GY612uj6dDOM2dMbFd6NYpIuZap2ZfsLolM1Cs6ZySpP8U
KF4z6dQ5aZNK3c++c5lzcRo5V9GvftX5CRHyQBONERjT3rZNf6zzzYpZhaD28gl4
fD8MNE5mjyg15b/cEEuDfZG3SysCV5EmC5faahRoZLnLiSPtCn7DJN2nvY1+ss3Y
wy7KanY9+XmCLMlFpOxW3/0ipIPHQJOojVrWAR3j8aLXuG4HB+JEtGLv6jZz8p9m
a2duqm/vCh93/NBlZvL+AqCxGB12z5nr4CYYDN5g+CjdH4R1mlbjmHrCiwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHiWUnoYsL8wNIaToC3jxbQQEpEOMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZUpaU2VoaXd2ekEwaHBPZ0xlUEZ0QkFTa1E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKg6XwAZg
AwcEKg6xBxegAwcEKhDMQLAAMA0GCSqGSIb3DQEBCwUAA4IBAQBjM+rHKahwoyhc
UJgsFHCbJJ4bH6IxMDQgWRwviMVUkx09kvUJb882ca6oQ94+3uL+Sa42yOeaeASM
RcUnmQ0BWgLJ4bJaE3ulGOj4BxlLlotbRuqJUwESvxhmsE+9oK9E9ZzJJHNq1Z7V
ApgUTD+yaJ+t/vjJ9PZdMl3wH0DYVIm8+0lAUXEriTZ1U1ck8LH6ApAAsBjYggme
GgIDQ2HtTRLCw7iB2+ov+qSnuopQ2zLBarPSKB6LbOLg4GY0tRJNR6zwwgmMjyay
rotg3Vp68Tj4JwyD9nqDKC0muN3BGFZ6tjmCKK6IiWHFkcCX6Kmd3W3hMTos9C/Y
UDhJrRBD
-----END CERTIFICATE-----
Generated at Fri May 3 12:39:05 2024 by rpki-client on console-fra.rpki-client.org