Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kkNh1uLt6EygEsOpnwbBl-FfR_k.roa
File: kkNh1uLt6EygEsOpnwbBl-FfR_k.roa (raw, json)
Hash identifier: 8f9mTJpxbC+vLMb3yUoVUOUNv3h6mYvSeKALFOktHzM=
Subject key identifier: 92:43:61:D6:E2:ED:E8:4C:A0:12:C3:A9:9F:06:C1:97:E1:5F:47:F9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D08E106545695C9B1F0268DB132F60E33
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kkNh1uLt6EygEsOpnwbBl-FfR_k.roa
Signing time: Sun 14 Jan 2024 16:49:41 +0000
ROA not before: Sun 14 Jan 2024 16:49:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138211
IP address blocks: 2a0e:b107:6d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:08:e1:06:54:56:95:c9:b1:f0:26:8d:b1:32:f6:0e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 14 16:49:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=924361d6e2ede84ca012c3a99f06c197e15f47f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6e:b9:50:0b:71:dd:33:29:81:ff:a3:15:aa:
55:7d:07:66:0c:f5:03:41:69:4d:ab:d5:fb:0e:ba:
70:83:0e:13:22:07:6f:c2:01:dd:11:30:22:ef:11:
2e:c9:14:19:92:da:8f:aa:6c:3c:eb:1f:f9:49:5d:
8e:2f:44:32:10:08:49:66:a8:ad:7d:0a:f7:a5:9e:
96:13:8f:21:91:72:08:fa:b9:91:12:9c:a6:d9:e3:
01:07:65:82:1b:ff:fa:b0:45:04:2d:86:19:1a:88:
40:42:27:c7:2f:32:4f:55:2c:f4:4c:5a:9c:f1:41:
1f:0a:ab:d5:06:ec:9f:ff:56:d3:60:89:fb:ae:1a:
7d:e4:4d:90:25:22:cf:50:cc:77:b3:c0:c7:0a:2a:
c1:d3:ad:07:f8:c1:36:8f:f3:85:d2:b5:14:95:eb:
7f:67:63:a2:f5:09:7e:af:1a:4e:16:69:7d:e0:62:
43:9b:f8:10:75:4b:e9:a7:53:35:11:49:3a:c0:57:
11:4a:0d:82:4b:05:59:e5:27:a2:07:39:b1:ad:c7:
0c:6d:79:06:5b:20:72:99:b5:72:18:32:ad:c3:bb:
c9:0a:47:1c:21:98:38:10:c9:23:4b:0e:df:a4:02:
7e:4e:08:69:d3:8b:95:68:c6:d1:7a:2b:67:8f:b0:
fb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:43:61:D6:E2:ED:E8:4C:A0:12:C3:A9:9F:06:C1:97:E1:5F:47:F9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kkNh1uLt6EygEsOpnwbBl-FfR_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:6d0::/44
Signature Algorithm: sha256WithRSAEncryption
28:87:53:57:20:ad:19:dc:01:8f:3b:8a:e4:c8:73:9e:1f:42:
0f:de:8a:56:aa:d9:74:b1:a6:73:c0:b0:b1:d3:26:8d:10:d7:
64:73:a4:37:35:e4:b6:d9:35:f3:1f:24:97:52:4b:d4:70:f4:
5b:a4:f1:af:cd:66:78:ab:1e:27:7f:4b:fd:b9:1a:a8:5f:89:
4f:83:29:ae:c5:b1:69:70:f0:98:a8:8a:79:74:a0:cb:e5:ce:
66:ee:70:15:75:83:29:3a:23:94:9c:6c:70:9b:96:24:e4:74:
8e:b6:26:53:f2:31:c5:17:aa:3c:a7:85:1b:ee:3d:29:db:5c:
e3:63:e8:e0:32:d1:e9:ae:52:a0:98:89:ab:e3:c0:fe:fe:82:
62:65:dd:2f:92:fb:33:53:5c:46:a6:6b:48:bf:d1:04:4e:a8:
89:ce:e2:5e:c8:e4:fc:fe:3b:ee:ed:f3:26:84:f8:9d:c6:0d:
4e:41:ed:de:a5:62:3a:24:9f:16:ed:60:7c:a5:b9:d8:09:2e:
99:b9:5e:ea:ab:7c:97:44:30:78:82:00:8a:7d:f6:64:a6:56:
24:a9:c8:22:54:33:85:3b:a2:b9:d3:de:06:4b:74:22:42:dd:
c9:93:ea:0e:37:ff:f0:e0:46:b1:45:f8:89:89:dd:51:0f:4d:
c9:8f:77:ec
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY0I4QZUVpXJsfAmjbEy9g4zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTE0MTY0OTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjQzNjFkNmUyZWRlODRjYTAxMmMzYTk5ZjA2YzE5N2UxNWY0N2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm65UAtx3TMpgf+jFapVfQdmDPUD
QWlNq9X7Drpwgw4TIgdvwgHdETAi7xEuyRQZktqPqmw86x/5SV2OL0QyEAhJZqit
fQr3pZ6WE48hkXII+rmREpym2eMBB2WCG//6sEUELYYZGohAQifHLzJPVSz0TFqc
8UEfCqvVBuyf/1bTYIn7rhp95E2QJSLPUMx3s8DHCirB060H+ME2j/OF0rUUlet/
Z2Oi9Ql+rxpOFml94GJDm/gQdUvpp1M1EUk6wFcRSg2CSwVZ5SeiBzmxrccMbXkG
WyBymbVyGDKtw7vJCkccIZg4EMkjSw7fpAJ+Tghp04uVaMbReitnj7D7xwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJJDYdbi7ehMoBLDqZ8GwZfhX0f5MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEva2tOaDF1THQ2RXlnRXNPcG53YkJsLUZmUl9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwbQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAoh1NXIK0Z3AGPO4rkyHOeH0IP3opWqtl0saZz
wLCx0yaNENdkc6Q3NeS22TXzHySXUkvUcPRbpPGvzWZ4qx4nf0v9uRqoX4lPgymu
xbFpcPCYqIp5dKDL5c5m7nAVdYMpOiOUnGxwm5Yk5HSOtiZT8jHFF6o8p4Ub7j0p
21zjY+jgMtHprlKgmImr48D+/oJiZd0vkvszU1xGpmtIv9EETqiJzuJeyOT8/jvu
7fMmhPidxg1OQe3epWI6JJ8W7WB8pbnYCS6ZuV7qq3yXRDB4ggCKffZkplYkqcgi
VDOFO6K5094GS3QiQt3Jk+oON//w4EaxRfiJid1RD03Jj3fs
-----END CERTIFICATE-----
Generated at Fri May 3 08:41:06 2024 by rpki-client on console-ams.rpki-client.org