Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/euYudGOk4o_S4GYHCMa49i1x3Cg.roa
File: euYudGOk4o_S4GYHCMa49i1x3Cg.roa (raw, json)
Hash identifier: /OynhFKMr11vA4wq52exhaxFSUqye8fInZy9+vcTzLs=
Subject key identifier: 7A:E6:2E:74:63:A4:E2:8F:D2:E0:66:07:08:C6:B8:F6:2D:71:DC:28
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCFFA1C411BEB276F50755D7E0CB47
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/euYudGOk4o_S4GYHCMa49i1x3Cg.roa
Signing time: Tue 02 Jan 2024 10:34:15 +0000
ROA not before: Tue 02 Jan 2024 10:34:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202647
IP address blocks: 2a10:2f00:18c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ff:a1:c4:11:be:b2:76:f5:07:55:d7:e0:cb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ae62e7463a4e28fd2e0660708c6b8f62d71dc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:5c:c3:54:16:38:22:f5:e0:23:46:4c:e5:
ac:00:76:f8:0a:e5:6e:7f:0e:95:0d:b4:a8:31:28:
02:da:f8:da:ad:7e:57:0c:8e:5e:a3:16:32:a2:ef:
88:f4:e3:5c:ae:37:96:7e:26:cf:ba:81:b7:2d:67:
18:39:f5:ca:31:9f:9b:9e:17:ab:a6:18:f3:ff:c5:
4b:7c:3c:8e:d5:d7:0a:e2:db:66:70:a9:97:30:61:
62:92:9e:de:dd:1c:ac:c3:0f:98:6b:9c:fe:36:69:
4a:e7:be:06:4a:29:4c:68:4d:f2:5c:a6:13:2c:00:
63:ff:56:ad:4c:ee:a6:e5:4b:88:c1:aa:ba:82:0c:
b1:7c:16:c9:02:c3:79:28:5b:67:40:f7:bf:10:68:
4a:57:99:16:b3:93:97:e4:3d:f0:ac:81:2e:fa:44:
c1:a2:ef:ac:ee:25:01:0e:7d:59:ad:8b:ee:7d:3b:
94:d5:e8:f5:75:ff:02:73:95:67:70:89:2d:e3:a0:
ee:5b:a5:bc:1d:c7:b4:09:ca:54:e6:9a:6e:8e:90:
20:72:b7:49:4b:9f:e6:11:0f:74:b2:12:a9:2a:a1:
43:48:f6:d6:2d:5c:50:06:89:ea:20:97:75:59:43:
70:23:41:ab:e3:1c:74:b4:ea:99:49:6e:47:1b:6b:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E6:2E:74:63:A4:E2:8F:D2:E0:66:07:08:C6:B8:F6:2D:71:DC:28
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/euYudGOk4o_S4GYHCMa49i1x3Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:18c::/48
Signature Algorithm: sha256WithRSAEncryption
a4:64:0f:bf:f0:1f:04:36:fe:41:83:eb:05:01:7d:25:89:81:
c9:83:74:fd:4b:e9:fd:c4:b0:e7:43:ac:56:01:36:ef:6c:7e:
2c:dc:b7:04:b1:03:69:0b:c6:5b:5d:74:a1:b7:b0:99:e7:9b:
23:bd:c4:c9:5c:ef:e7:4d:a1:ff:1f:24:a8:62:2c:7a:30:ba:
7b:bf:2c:ca:3d:ce:a9:08:f0:05:89:bf:22:13:e4:c0:47:1f:
0b:8a:d2:37:13:80:1d:99:55:ed:36:93:c8:d2:53:81:d6:ba:
a6:02:5e:1e:42:3b:c4:06:a9:95:aa:2e:00:98:93:c9:be:86:
23:70:a0:9b:16:97:be:7a:3f:36:a3:45:4a:07:e1:24:70:f9:
be:c6:e6:39:0c:77:51:e7:d2:99:5b:f8:8c:f1:6b:51:4d:4f:
1c:91:24:3d:6b:ac:5e:e4:b6:61:e5:f7:5c:b2:6a:da:4e:56:
21:f8:d9:f9:6f:e3:6b:72:ef:71:c4:76:2f:43:f9:ff:f3:c1:
ef:bb:ab:e7:78:11:57:50:34:02:de:77:9a:bc:b6:38:1c:0b:
28:01:b9:33:91:7d:e9:7d:42:97:77:7d:3b:35:fa:91:04:52:
d9:06:97:8b:1e:4d:b5:7d:1f:8d:e5:46:95:e0:fe:a3:cd:a4:
e4:4f:75:e3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvP+hxBG+snb1B1XX4MtHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWU2MmU3NDYzYTRlMjhmZDJlMDY2MDcwOGM2YjhmNjJkNzFkYzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRFcw1QWOCL14CNGTOWsAHb4CuVu
fw6VDbSoMSgC2vjarX5XDI5eoxYyou+I9ONcrjeWfibPuoG3LWcYOfXKMZ+bnher
phjz/8VLfDyO1dcK4ttmcKmXMGFikp7e3Rysww+Ya5z+NmlK574GSilMaE3yXKYT
LABj/1atTO6m5UuIwaq6ggyxfBbJAsN5KFtnQPe/EGhKV5kWs5OX5D3wrIEu+kTB
ou+s7iUBDn1ZrYvufTuU1ej1df8Cc5VncIkt46DuW6W8Hce0CcpU5ppujpAgcrdJ
S5/mEQ90shKpKqFDSPbWLVxQBonqIJd1WUNwI0Gr4xx0tOqZSW5HG2uMFQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHrmLnRjpOKP0uBmBwjGuPYtcdwoMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZXVZdWRHT2s0b19TNEdZSENNYTQ5aTF4M0NnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAGM
MA0GCSqGSIb3DQEBCwUAA4IBAQCkZA+/8B8ENv5Bg+sFAX0liYHJg3T9S+n9xLDn
Q6xWATbvbH4s3LcEsQNpC8ZbXXSht7CZ55sjvcTJXO/nTaH/HySoYix6MLp7vyzK
Pc6pCPAFib8iE+TARx8LitI3E4AdmVXtNpPI0lOB1rqmAl4eQjvEBqmVqi4AmJPJ
voYjcKCbFpe+ej82o0VKB+EkcPm+xuY5DHdR59KZW/iM8WtRTU8ckSQ9a6xe5LZh
5fdcsmraTlYh+Nn5b+Nrcu9xxHYvQ/n/88Hvu6vneBFXUDQC3neavLY4HAsoAbkz
kX3pfUKXd307NfqRBFLZBpeLHk21fR+N5UaV4P6jzaTkT3Xj
-----END CERTIFICATE-----
Generated at Fri May 3 06:35:00 2024 by rpki-client on console-ams.rpki-client.org