Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ffPZYoeNpJ-JTQs_bxgj03zvVRw.roa
File: ffPZYoeNpJ-JTQs_bxgj03zvVRw.roa (raw, json)
Hash identifier: rCLSg24FWrik39E32QgUSqQb8+WJukPiKNdo8+7cmWY=
Subject key identifier: 7D:F3:D9:62:87:8D:A4:9F:89:4D:0B:3F:6F:18:23:D3:7C:EF:55:1C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0190B88B4B6ECB10D985F54ACABFE409A331
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ffPZYoeNpJ-JTQs_bxgj03zvVRw.roa
Signing time: Mon 15 Jul 2024 22:37:34 +0000
ROA not before: Mon 15 Jul 2024 22:37:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214556
IP address blocks: 2a0e:97c0:440::/44 maxlen: 48
2a0e:97c0:440::/46 maxlen: 48
2a0e:97c0:444::/46 maxlen: 48
2a0e:97c0:448::/46 maxlen: 48
2a0e:97c0:44c::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b8:8b:4b:6e:cb:10:d9:85:f5:4a:ca:bf:e4:09:a3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 15 22:37:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7df3d962878da49f894d0b3f6f1823d37cef551c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:11:1f:e1:bb:a2:ec:66:07:21:08:01:0a:
47:fb:b8:eb:5b:10:45:fc:8b:35:0a:fc:db:9b:e8:
7d:2a:36:7c:50:d7:8f:3b:88:ea:32:ff:02:c8:a0:
f6:b9:75:56:ad:a3:58:f1:c5:48:12:f2:bd:73:cf:
a1:ca:c2:55:1b:14:11:9c:8c:e5:1a:18:cf:dc:5e:
11:02:c1:8a:37:55:cc:5a:f4:e5:bf:32:2c:b9:6f:
49:b0:51:f3:9c:55:7c:15:e2:64:95:5b:40:22:f3:
52:f1:34:8a:e1:b2:8d:b7:dd:61:6a:8b:cf:d6:b0:
3d:96:a8:9e:e5:10:68:88:08:27:b2:0b:db:69:c0:
50:95:04:b6:75:1a:03:4e:d4:0a:b7:51:55:46:ce:
7b:0b:1c:7d:c8:63:16:16:82:e2:06:44:cc:35:75:
4b:c4:f2:fd:32:d6:b3:91:3a:31:59:2a:f8:8c:14:
54:45:88:c0:78:91:b1:a1:9f:bf:55:81:b6:d1:ff:
be:1e:64:b1:0c:86:fc:fe:f0:0d:47:6c:cd:ce:73:
b2:d9:56:bc:1a:86:55:10:ff:b2:d4:82:5a:d4:19:
4f:e4:be:45:31:77:ed:a6:a7:28:0d:d4:38:80:52:
51:3f:e6:17:71:92:46:17:97:4d:7c:98:63:a8:3d:
40:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F3:D9:62:87:8D:A4:9F:89:4D:0B:3F:6F:18:23:D3:7C:EF:55:1C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ffPZYoeNpJ-JTQs_bxgj03zvVRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:440::/44
Signature Algorithm: sha256WithRSAEncryption
ad:52:d0:08:73:b0:c2:0e:d2:b3:1d:b7:af:22:75:75:46:cd:
f6:e4:1a:09:a2:61:d6:5e:a1:0d:bb:31:78:1f:40:e4:34:8c:
ad:72:cd:1b:50:26:96:25:86:96:45:a1:70:8d:3b:04:ce:86:
c2:a2:e1:7b:cc:d7:25:df:1b:c0:32:d2:44:74:83:3b:ee:8b:
3d:5f:bd:97:fb:39:b1:48:07:1c:52:17:87:c7:43:3e:cf:87:
69:9f:c3:60:27:97:16:5b:bf:4d:df:77:af:35:c6:62:eb:ca:
7f:75:d0:d0:16:a0:1d:22:9e:80:5c:a5:a1:d2:d8:69:03:ac:
fa:44:c0:ab:2c:74:82:18:d3:ae:86:d9:c9:b7:b5:80:36:fa:
02:d4:a7:f6:14:8c:82:7a:62:5e:34:9c:e8:67:54:ab:34:25:
fb:98:ab:0c:16:09:7d:10:51:8f:38:dd:7c:24:8e:06:1b:e5:
4b:ee:a6:a6:f2:04:cb:1f:2e:3b:b6:a7:b0:09:4a:f7:c2:9a:
ba:6a:de:b2:ca:26:d1:91:e7:77:3a:7d:8b:60:d9:cc:98:f3:
2f:f8:57:b7:eb:41:d5:56:18:6f:a9:f6:03:6a:53:0b:20:58:
9b:f4:ce:61:90:75:53:20:41:8e:14:07:72:04:9a:8c:c3:53:
fe:72:44:7e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZC4i0tuyxDZhfVKyr/kCaMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwNzE1MjIzNzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGYzZDk2Mjg3OGRhNDlmODk0ZDBiM2Y2ZjE4MjNkMzdjZWY1NTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCQRH+G7ouxmByEIAQpH+7jrWxBF
/Is1Cvzbm+h9KjZ8UNePO4jqMv8CyKD2uXVWraNY8cVIEvK9c8+hysJVGxQRnIzl
GhjP3F4RAsGKN1XMWvTlvzIsuW9JsFHznFV8FeJklVtAIvNS8TSK4bKNt91haovP
1rA9lqie5RBoiAgnsgvbacBQlQS2dRoDTtQKt1FVRs57Cxx9yGMWFoLiBkTMNXVL
xPL9MtazkToxWSr4jBRURYjAeJGxoZ+/VYG20f++HmSxDIb8/vANR2zNznOy2Va8
GoZVEP+y1IJa1BlP5L5FMXftpqcoDdQ4gFJRP+YXcZJGF5dNfJhjqD1AUwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFH3z2WKHjaSfiU0LP28YI9N871UcMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZmZQWllvZU5wSi1KVFFzX2J4Z2owM3p2VlJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwARA
MA0GCSqGSIb3DQEBCwUAA4IBAQCtUtAIc7DCDtKzHbevInV1Rs325BoJomHWXqEN
uzF4H0DkNIytcs0bUCaWJYaWRaFwjTsEzobCouF7zNcl3xvAMtJEdIM77os9X72X
+zmxSAccUheHx0M+z4dpn8NgJ5cWW79N33evNcZi68p/ddDQFqAdIp6AXKWh0thp
A6z6RMCrLHSCGNOuhtnJt7WANvoC1Kf2FIyCemJeNJzoZ1SrNCX7mKsMFgl9EFGP
ON18JI4GG+VL7qam8gTLHy47tqewCUr3wpq6at6yyibRked3On2LYNnMmPMv+Fe3
60HVVhhvqfYDalMLIFib9M5hkHVTIEGOFAdyBJqMw1P+ckR+
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:58 2024 by rpki-client on console-ams.rpki-client.org