Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gHMX8SpoMGpII-WOU00H0H5nOX4.roa
File: gHMX8SpoMGpII-WOU00H0H5nOX4.roa (raw, json)
Hash identifier: J57EnXnJGd7bG5C7neYgrUS8N+M3+hg1Qcd7jlLAepA=
Subject key identifier: 80:73:17:F1:2A:68:30:6A:48:23:E5:8E:53:4D:07:D0:7E:67:39:7E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD04D7DEFC395017BB77D50DD791F5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gHMX8SpoMGpII-WOU00H0H5nOX4.roa
Signing time: Tue 02 Jan 2024 10:34:17 +0000
ROA not before: Tue 02 Jan 2024 10:34:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203655
IP address blocks: 2a0e:b107:1b60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:04:d7:de:fc:39:50:17:bb:77:d5:0d:d7:91:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=807317f12a68306a4823e58e534d07d07e67397e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:63:40:24:7e:f2:ad:c1:94:f4:c2:bf:bf:54:
71:5a:89:1a:9d:fe:d5:9e:a0:8b:e8:01:ab:bf:f3:
38:8e:05:b2:46:1e:dd:b7:cc:35:25:70:d0:26:04:
41:78:24:38:55:81:ae:b5:7d:43:5f:01:de:24:ec:
b0:a2:a2:61:66:44:f3:26:63:81:79:1b:5c:49:bc:
72:33:9f:a9:44:d4:63:79:ff:5e:bd:02:95:5a:07:
54:8e:0b:10:1b:4d:82:4f:02:94:92:62:ed:88:53:
ac:b8:e2:b3:d1:d4:f8:27:12:3d:d6:8f:ce:0f:34:
fe:72:a7:13:33:08:f5:87:d0:cd:85:ec:13:c2:f9:
06:ec:70:df:3c:06:e6:d5:fb:34:3d:12:44:1b:f6:
23:4a:31:61:70:34:c4:3d:23:5e:10:47:ea:f9:18:
0d:60:05:99:b8:02:7b:47:99:ff:5a:88:54:fa:12:
fe:d8:a3:0e:39:11:fa:cb:e3:a4:df:de:99:85:4f:
ac:c0:96:f1:83:d2:80:7a:c2:61:27:0e:bf:6d:bb:
7b:4d:91:65:45:6f:19:55:66:4d:06:d4:c6:50:9c:
0d:ff:d5:b1:a4:3f:14:b8:10:ff:66:e7:03:35:21:
23:2b:75:83:ee:59:2b:f5:b3:65:8e:53:6c:1b:be:
74:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:73:17:F1:2A:68:30:6A:48:23:E5:8E:53:4D:07:D0:7E:67:39:7E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gHMX8SpoMGpII-WOU00H0H5nOX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1b60::/44
Signature Algorithm: sha256WithRSAEncryption
23:5a:dd:24:2b:de:78:79:85:36:c3:2f:1a:62:3a:a7:b0:08:
2a:97:40:8a:16:e4:74:d9:29:3a:72:23:dd:bd:75:23:68:1c:
a3:94:d1:83:13:1c:a3:06:b2:34:65:48:52:c2:49:c5:21:11:
36:0a:99:bf:74:57:8d:41:38:29:c2:b2:19:50:d0:62:29:51:
21:3e:f3:1b:5e:50:da:c1:3e:10:88:e2:d0:de:a5:de:3f:87:
2d:77:72:31:53:89:36:e0:81:58:62:c5:25:de:37:b5:28:d2:
ab:b4:33:9e:83:9f:6c:3e:3a:45:97:5a:9b:9c:41:ad:60:51:
63:2c:a6:fe:71:7c:6d:c3:a3:cb:ee:f0:6e:b0:74:11:ef:b3:
83:91:bf:c4:bb:33:42:4e:14:22:53:73:86:8f:c6:ce:3c:b6:
57:35:f3:c2:48:17:df:ac:e8:2c:2a:06:ed:93:d5:29:e2:f9:
b2:eb:f1:a7:00:df:da:fe:82:f7:32:f4:49:8b:df:e3:54:23:
85:74:bf:c3:3e:bb:a0:b9:71:05:b3:8f:b3:8a:74:fb:d6:db:
81:84:56:c1:70:2a:e0:02:ca:c6:76:10:95:5c:67:06:bc:fe:
d4:6b:09:fa:f6:98:d2:eb:45:ab:09:2e:47:e6:62:15:b4:cf:
f7:24:27:ad
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvQTX3vw5UBe7d9UN15H1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDczMTdmMTJhNjgzMDZhNDgyM2U1OGU1MzRkMDdkMDdlNjczOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2NAJH7yrcGU9MK/v1RxWokanf7V
nqCL6AGrv/M4jgWyRh7dt8w1JXDQJgRBeCQ4VYGutX1DXwHeJOywoqJhZkTzJmOB
eRtcSbxyM5+pRNRjef9evQKVWgdUjgsQG02CTwKUkmLtiFOsuOKz0dT4JxI91o/O
DzT+cqcTMwj1h9DNhewTwvkG7HDfPAbm1fs0PRJEG/YjSjFhcDTEPSNeEEfq+RgN
YAWZuAJ7R5n/WohU+hL+2KMOORH6y+Ok396ZhU+swJbxg9KAesJhJw6/bbt7TZFl
RW8ZVWZNBtTGUJwN/9WxpD8UuBD/ZucDNSEjK3WD7lkr9bNljlNsG750yQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIBzF/EqaDBqSCPljlNNB9B+Zzl+MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZ0hNWDhTcG9NR3BJSS1XT1UwMEgwSDVuT1g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxtg
MA0GCSqGSIb3DQEBCwUAA4IBAQAjWt0kK954eYU2wy8aYjqnsAgql0CKFuR02Sk6
ciPdvXUjaByjlNGDExyjBrI0ZUhSwknFIRE2Cpm/dFeNQTgpwrIZUNBiKVEhPvMb
XlDawT4QiOLQ3qXeP4ctd3IxU4k24IFYYsUl3je1KNKrtDOeg59sPjpFl1qbnEGt
YFFjLKb+cXxtw6PL7vBusHQR77ODkb/EuzNCThQiU3OGj8bOPLZXNfPCSBffrOgs
Kgbtk9Up4vmy6/GnAN/a/oL3MvRJi9/jVCOFdL/DPruguXEFs4+zinT71tuBhFbB
cCrgAsrGdhCVXGcGvP7Uawn69pjS60WrCS5H5mIVtM/3JCet
-----END CERTIFICATE-----
Generated at Fri May 3 11:06:43 2024 by rpki-client on console-ams.rpki-client.org