Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jpim4ITCv7YUr2AGu4FKPlPx4wI.roa
File: jpim4ITCv7YUr2AGu4FKPlPx4wI.roa (raw, json)
Hash identifier: +D3pElNMElARXuXvHpke+IsNVktWJ4JrRFHzLmzruio=
Subject key identifier: 8E:98:A6:E0:84:C2:BF:B6:14:AF:60:06:BB:81:4A:3E:53:F1:E3:02
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01930C48143312038C98BB92F8544B95439E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jpim4ITCv7YUr2AGu4FKPlPx4wI.roa
Signing time: Fri 08 Nov 2024 14:57:50 +0000
ROA not before: Fri 08 Nov 2024 14:57:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213901
IP address blocks: 2a0e:97c0:430::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0c:48:14:33:12:03:8c:98:bb:92:f8:54:4b:95:43:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 8 14:57:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e98a6e084c2bfb614af6006bb814a3e53f1e302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5f:1f:50:d8:a3:47:10:fe:19:71:26:b3:8a:
c1:60:f0:f9:51:34:11:8f:3a:02:8f:64:b1:6f:f9:
b4:95:9b:c0:1e:48:6e:be:62:62:03:85:d4:c2:36:
87:7c:55:62:88:35:c0:63:b5:59:79:5d:0e:02:a5:
e5:72:3d:89:d6:fd:40:23:35:99:9d:0d:f2:79:27:
3f:ce:53:f5:60:b1:34:4c:d6:80:3f:a8:d8:8b:b9:
38:98:24:e6:b6:c9:f4:ec:ea:fa:ef:f0:10:ad:21:
40:be:7c:09:62:7e:4a:b3:76:fd:a9:41:68:fc:a2:
68:eb:84:b8:b9:0d:0f:7f:2f:e9:45:e7:63:37:21:
d0:fb:35:3d:9f:d7:90:d2:42:1f:88:bd:5d:2b:f9:
ca:f3:7a:c2:c1:78:e4:c1:71:61:ed:93:35:86:98:
d9:3b:2b:90:be:fa:07:0e:f5:20:01:ee:fe:c6:bb:
03:e5:be:12:4a:58:ac:b6:4a:38:6f:ff:75:b6:c7:
39:b2:11:01:00:53:35:af:bb:ba:44:a7:e2:22:4c:
dd:07:3d:e6:cc:b9:29:7a:63:29:4b:66:44:be:12:
be:9a:b6:c3:7f:c1:40:0f:21:2f:a5:b7:fb:38:9a:
8d:2a:af:9f:12:64:8e:95:65:10:08:17:1b:a1:4c:
51:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:98:A6:E0:84:C2:BF:B6:14:AF:60:06:BB:81:4A:3E:53:F1:E3:02
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jpim4ITCv7YUr2AGu4FKPlPx4wI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:430::/44
Signature Algorithm: sha256WithRSAEncryption
8f:27:ac:c1:5c:95:e6:d1:c9:06:73:6a:87:68:60:5f:29:b3:
f8:4c:bf:02:f4:db:40:fb:dc:b7:c8:93:54:87:dc:81:a1:a9:
cd:d9:bd:71:bc:19:98:9a:22:e1:28:eb:66:77:c9:18:a7:6f:
af:0f:7d:db:e6:a8:06:98:92:44:6f:53:53:07:52:29:36:8a:
44:1a:15:27:59:6f:6b:ef:90:8f:eb:9e:65:c6:ea:f7:bc:0d:
34:9c:24:e2:47:42:88:b7:ce:0a:2f:57:71:29:2c:ab:b8:97:
7f:9d:4f:ff:ee:90:61:ed:39:b6:66:7c:4f:fa:32:c0:54:00:
41:71:4f:78:3a:ce:2d:f4:75:79:d7:55:12:7e:54:77:7f:29:
05:de:00:69:d7:05:f0:fd:da:f0:61:d8:34:e9:cd:37:8d:6f:
36:f8:86:c3:2a:6a:4c:f9:40:7d:54:fe:b0:d4:ed:da:20:5a:
ad:da:f5:a8:35:37:a1:8d:6c:0a:29:5e:fd:19:6d:aa:ff:68:
c9:f8:76:d5:93:3b:56:6a:cf:c8:b6:6f:61:d4:c2:94:e3:ff:
6a:3c:19:3c:fc:46:35:51:e8:71:9b:bd:da:01:c0:58:17:97:
55:f2:a1:ee:7a:22:75:07:81:11:c6:bb:3d:0b:97:c0:21:4a:
15:42:61:74
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZMMSBQzEgOMmLuS+FRLlUOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQxMTA4MTQ1NzUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTk4YTZlMDg0YzJiZmI2MTRhZjYwMDZiYjgxNGEzZTUzZjFlMzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF8fUNijRxD+GXEms4rBYPD5UTQR
jzoCj2Sxb/m0lZvAHkhuvmJiA4XUwjaHfFViiDXAY7VZeV0OAqXlcj2J1v1AIzWZ
nQ3yeSc/zlP1YLE0TNaAP6jYi7k4mCTmtsn07Or67/AQrSFAvnwJYn5Ks3b9qUFo
/KJo64S4uQ0Pfy/pRedjNyHQ+zU9n9eQ0kIfiL1dK/nK83rCwXjkwXFh7ZM1hpjZ
OyuQvvoHDvUgAe7+xrsD5b4SSlistko4b/91tsc5shEBAFM1r7u6RKfiIkzdBz3m
zLkpemMpS2ZEvhK+mrbDf8FADyEvpbf7OJqNKq+fEmSOlWUQCBcboUxRvwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI6YpuCEwr+2FK9gBruBSj5T8eMCMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvanBpbTRJVEN2N1lVcjJBR3U0RktQbFB4NHdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAQw
MA0GCSqGSIb3DQEBCwUAA4IBAQCPJ6zBXJXm0ckGc2qHaGBfKbP4TL8C9NtA+9y3
yJNUh9yBoanN2b1xvBmYmiLhKOtmd8kYp2+vD33b5qgGmJJEb1NTB1IpNopEGhUn
WW9r75CP655lxur3vA00nCTiR0KIt84KL1dxKSyruJd/nU//7pBh7Tm2ZnxP+jLA
VABBcU94Os4t9HV511USflR3fykF3gBp1wXw/drwYdg06c03jW82+IbDKmpM+UB9
VP6w1O3aIFqt2vWoNTehjWwKKV79GW2q/2jJ+HbVkztWas/Itm9h1MKU4/9qPBk8
/EY1Uehxm73aAcBYF5dV8qHueiJ1B4ERxrs9C5fAIUoVQmF0
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:58 2024 by rpki-client on console-ams.rpki-client.org