Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gxfuJ6e6dGlsdwzHR8DhQujOmCE.roa
File: gxfuJ6e6dGlsdwzHR8DhQujOmCE.roa (raw, json)
Hash identifier: RGKQSD3gXV3IUzVScpcRnhyPQfkSL1+s9T1rVhuw7Ck=
Subject key identifier: 83:17:EE:27:A7:BA:74:69:6C:77:0C:C7:47:C0:E1:42:E8:CE:98:21
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D12F4E11C9EAE3F4503FAFA8AF6BA309F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gxfuJ6e6dGlsdwzHR8DhQujOmCE.roa
Signing time: Tue 16 Jan 2024 15:47:34 +0000
ROA not before: Tue 16 Jan 2024 15:47:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197469
IP address blocks: 2a0e:97c0:b50::/44 maxlen: 48
2a0e:97c0:b50::/48 maxlen: 48
2a0e:97c0:b51::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:f4:e1:1c:9e:ae:3f:45:03:fa:fa:8a:f6:ba:30:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 16 15:47:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8317ee27a7ba74696c770cc747c0e142e8ce9821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ed:e8:bf:cc:00:9d:f2:b1:61:9c:00:36:5a:
d3:2e:68:7f:e9:fb:1d:8d:d4:aa:61:a0:32:87:d3:
c3:1f:16:09:91:f7:9c:14:dd:69:81:c7:17:07:0b:
11:b0:62:4f:2e:38:1b:09:b6:2f:2f:2d:6d:80:2e:
06:85:45:ca:5a:88:d6:ac:6b:c1:da:aa:3e:eb:52:
ac:d2:60:24:65:95:7f:49:76:fc:80:ba:72:7a:93:
56:1c:b5:fa:68:7b:3c:de:61:fc:87:4e:01:f1:d9:
b3:8a:ee:1a:7c:c4:13:85:0b:5a:0a:02:87:17:dd:
62:ee:a0:db:c2:a2:1f:9f:66:7a:e0:7a:5a:a4:90:
5e:bc:87:98:05:60:59:51:fa:1d:09:75:dd:ba:ec:
08:3a:ee:3f:99:aa:61:a1:16:77:65:6b:d3:2e:4e:
ee:43:b9:1e:8f:26:79:3b:87:e0:4f:60:81:8f:f5:
15:6c:fe:a0:13:b5:fd:13:e7:02:26:27:ff:9e:6c:
3b:43:7f:73:3b:be:33:7b:8d:31:e8:2f:bc:e3:1c:
11:8b:89:ee:88:7c:cb:75:95:c2:83:1b:1a:74:ff:
08:21:07:8c:02:63:8a:66:20:da:aa:aa:64:bf:6a:
89:bf:f3:15:b7:1d:bb:33:50:be:3c:04:7a:20:c8:
a0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:17:EE:27:A7:BA:74:69:6C:77:0C:C7:47:C0:E1:42:E8:CE:98:21
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gxfuJ6e6dGlsdwzHR8DhQujOmCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b50::/44
Signature Algorithm: sha256WithRSAEncryption
70:56:3d:d4:ed:7c:0f:d1:50:7b:c2:2a:11:53:93:99:7c:ca:
50:cc:7f:5c:ba:2f:09:84:0c:92:28:f7:54:eb:b0:04:a6:20:
97:3b:2f:58:56:99:e6:55:f7:1a:20:f1:da:35:af:77:e9:00:
1f:88:b6:be:e2:cd:6c:64:a3:6d:0d:f5:a6:f4:5b:87:ae:04:
dc:22:29:26:a0:27:99:c2:52:56:53:bd:ec:45:c0:19:9f:3f:
3a:55:49:e9:c9:bc:3d:26:5a:b9:f6:80:87:9a:65:fd:b0:03:
27:12:49:11:29:66:9d:08:ba:a7:94:78:cc:d1:4d:8b:b9:15:
93:7c:7d:1f:67:45:80:1e:63:5d:0f:95:75:df:6a:72:48:0a:
83:8f:54:a2:0f:aa:f9:d7:80:38:6e:e1:3e:55:45:42:89:db:
3d:ef:f1:f7:67:98:27:49:73:ed:e7:9a:62:f5:5f:b7:09:22:
c7:f5:10:cf:fd:78:bc:eb:0b:7f:ae:1a:de:ab:f2:8d:e3:42:
41:c9:5d:f7:6d:69:d6:36:20:aa:7b:a4:1d:ba:1b:68:c7:44:
0b:c3:f5:72:91:9d:a8:0a:fc:94:54:6f:4c:b7:9e:b0:a2:46:
99:e5:e6:a9:ed:9d:b2:5a:7f:18:13:7d:86:50:a6:b4:29:1c:
18:2c:4a:61
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY0S9OEcnq4/RQP6+or2ujCfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTE2MTU0NzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzE3ZWUyN2E3YmE3NDY5NmM3NzBjYzc0N2MwZTE0MmU4Y2U5ODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge3ov8wAnfKxYZwANlrTLmh/6fsd
jdSqYaAyh9PDHxYJkfecFN1pgccXBwsRsGJPLjgbCbYvLy1tgC4GhUXKWojWrGvB
2qo+61Ks0mAkZZV/SXb8gLpyepNWHLX6aHs83mH8h04B8dmziu4afMQThQtaCgKH
F91i7qDbwqIfn2Z64HpapJBevIeYBWBZUfodCXXduuwIOu4/maphoRZ3ZWvTLk7u
Q7kejyZ5O4fgT2CBj/UVbP6gE7X9E+cCJif/nmw7Q39zO74ze40x6C+84xwRi4nu
iHzLdZXCgxsadP8IIQeMAmOKZiDaqqpkv2qJv/MVtx27M1C+PAR6IMig1QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIMX7ienunRpbHcMx0fA4ULozpghMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZ3hmdUo2ZTZkR2xzZHd6SFI4RGhRdWpPbUNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAtQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBwVj3U7XwP0VB7wioRU5OZfMpQzH9cui8JhAyS
KPdU67AEpiCXOy9YVpnmVfcaIPHaNa936QAfiLa+4s1sZKNtDfWm9FuHrgTcIikm
oCeZwlJWU73sRcAZnz86VUnpybw9Jlq59oCHmmX9sAMnEkkRKWadCLqnlHjM0U2L
uRWTfH0fZ0WAHmNdD5V132pySAqDj1SiD6r514A4buE+VUVCids97/H3Z5gnSXPt
55pi9V+3CSLH9RDP/Xi86wt/rhreq/KN40JByV33bWnWNiCqe6Qduhtox0QLw/Vy
kZ2oCvyUVG9Mt56wokaZ5eap7Z2yWn8YE32GUKa0KRwYLEph
-----END CERTIFICATE-----
Generated at Fri May 3 02:20:41 2024 by rpki-client on console-fra.rpki-client.org