Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iNfrDpSdYHSb7zE90WokN1e1zrk.roa
File: iNfrDpSdYHSb7zE90WokN1e1zrk.roa (raw, json)
Hash identifier: MBEBNstY7PMrieq2cLIK1dnryu8r8xGfmndX0QAHU6M=
Subject key identifier: 88:D7:EB:0E:94:9D:60:74:9B:EF:31:3D:D1:6A:24:37:57:B5:CE:B9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD039E243EE8DBA4BE91F15860C6C2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iNfrDpSdYHSb7zE90WokN1e1zrk.roa
Signing time: Tue 02 Jan 2024 10:34:16 +0000
ROA not before: Tue 02 Jan 2024 10:34:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203472
IP address blocks: 2a0e:b107:2710::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:03:9e:24:3e:e8:db:a4:be:91:f1:58:60:c6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88d7eb0e949d60749bef313dd16a243757b5ceb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:58:3f:a9:15:86:00:38:52:e1:0d:6a:6f:28:
5d:a0:4b:b2:35:64:1e:13:4c:c6:68:fa:0d:3e:57:
f5:a7:04:70:d9:ce:a2:95:40:89:77:dc:44:15:9e:
73:a9:73:a8:c6:b1:cd:74:91:40:3e:dd:73:3a:22:
8b:69:6d:46:b9:53:c8:69:7c:b3:31:bf:9e:9c:ce:
b7:0c:0e:35:d2:a0:8b:c9:0e:84:91:14:3c:7a:69:
f9:19:60:ea:96:aa:69:88:60:fe:65:f6:ec:05:00:
bd:b7:68:b2:e3:c8:28:cc:62:a2:2c:ae:c4:e0:51:
7a:c9:3f:a5:63:14:1b:b2:26:69:98:57:fb:26:08:
73:cb:53:21:05:49:22:b6:7d:0e:48:38:d1:e3:81:
20:d4:fb:84:a5:fe:f5:13:a1:97:1a:7d:66:7a:09:
14:84:9d:f2:a5:9e:78:bc:be:87:2d:53:94:34:00:
9b:cd:a9:ea:94:97:bc:1d:b3:6f:e0:22:b6:bf:1a:
bd:fa:b5:0f:fa:04:85:e5:3e:ec:02:83:11:b0:f5:
0a:9e:51:3b:2d:fe:83:a5:2f:44:3b:9f:de:9e:40:
4f:1c:f4:79:6f:6c:de:f1:11:5f:12:bb:58:6d:bf:
18:89:10:f6:4f:7c:04:7a:d2:1c:3e:6a:f6:3e:93:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D7:EB:0E:94:9D:60:74:9B:EF:31:3D:D1:6A:24:37:57:B5:CE:B9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iNfrDpSdYHSb7zE90WokN1e1zrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2710::/44
Signature Algorithm: sha256WithRSAEncryption
0f:92:4c:96:cc:c6:52:a9:0d:be:15:14:02:48:c6:b8:c7:60:
ef:45:fc:5f:cd:27:a5:68:58:1b:29:26:e4:34:22:cf:3d:c8:
ba:a4:45:35:db:1c:aa:34:d4:df:10:69:54:e9:60:df:84:d5:
7d:91:d1:d7:27:91:25:2a:8d:a3:99:4a:2e:8f:15:cc:80:db:
dc:ea:8a:be:a7:7b:04:61:ac:6e:fd:d8:49:3f:1a:e5:0c:c9:
2f:83:7a:a2:9c:22:a4:cc:98:10:35:d1:54:3b:c2:e1:68:0b:
e8:20:44:75:7c:04:fe:19:a4:83:ba:8b:b6:8f:ce:57:5f:33:
bf:68:ef:d0:f7:f1:70:54:21:e8:fb:4c:19:e4:fd:b4:05:30:
90:58:a6:e8:4d:41:03:95:27:72:00:e4:90:eb:4c:a0:5c:1e:
9e:5c:fc:a9:1f:08:54:fb:4b:9f:c9:75:c0:db:ff:6b:8c:ce:
f7:a0:75:ef:61:bd:f6:30:6d:97:5c:7f:c8:01:51:1d:20:ff:
53:6f:19:ba:81:07:d0:5e:53:64:ee:38:4d:cf:8e:a1:f8:c0:
35:0e:6d:d2:ac:f5:76:74:ab:5a:61:bd:3d:41:a9:7d:2d:64:
00:b7:16:07:55:70:7c:97:29:8f:e0:fc:38:e1:8a:ba:a4:5b:
39:0a:23:20
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvQOeJD7o26S+kfFYYMbCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGQ3ZWIwZTk0OWQ2MDc0OWJlZjMxM2RkMTZhMjQzNzU3YjVjZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1g/qRWGADhS4Q1qbyhdoEuyNWQe
E0zGaPoNPlf1pwRw2c6ilUCJd9xEFZ5zqXOoxrHNdJFAPt1zOiKLaW1GuVPIaXyz
Mb+enM63DA410qCLyQ6EkRQ8emn5GWDqlqppiGD+ZfbsBQC9t2iy48gozGKiLK7E
4FF6yT+lYxQbsiZpmFf7Jghzy1MhBUkitn0OSDjR44Eg1PuEpf71E6GXGn1megkU
hJ3ypZ54vL6HLVOUNACbzanqlJe8HbNv4CK2vxq9+rUP+gSF5T7sAoMRsPUKnlE7
Lf6DpS9EO5/enkBPHPR5b2ze8RFfErtYbb8YiRD2T3wEetIcPmr2PpOh+wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIjX6w6UnWB0m+8xPdFqJDdXtc65MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvaU5mckRwU2RZSFNiN3pFOTBXb2tOMWUxenJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBycQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAPkkyWzMZSqQ2+FRQCSMa4x2DvRfxfzSelaFgb
KSbkNCLPPci6pEU12xyqNNTfEGlU6WDfhNV9kdHXJ5ElKo2jmUoujxXMgNvc6oq+
p3sEYaxu/dhJPxrlDMkvg3qinCKkzJgQNdFUO8LhaAvoIER1fAT+GaSDuou2j85X
XzO/aO/Q9/FwVCHo+0wZ5P20BTCQWKboTUEDlSdyAOSQ60ygXB6eXPypHwhU+0uf
yXXA2/9rjM73oHXvYb32MG2XXH/IAVEdIP9Tbxm6gQfQXlNk7jhNz46h+MA1Dm3S
rPV2dKtaYb09Qal9LWQAtxYHVXB8lymP4Pw44Yq6pFs5CiMg
-----END CERTIFICATE-----
Generated at Fri May 3 06:35:01 2024 by rpki-client on console-ams.rpki-client.org