Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/l8gFW6cFq5xTymTC8GcDzfCy-ko.roa
File: l8gFW6cFq5xTymTC8GcDzfCy-ko.roa (raw, json)
Hash identifier: Ilvo0MbQRNZpI9h03KEpVycSUcAjoR28nm5v/1fiBH4=
Subject key identifier: 97:C8:05:5B:A7:05:AB:9C:53:CA:64:C2:F0:67:03:CD:F0:B2:FA:4A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCD1BBFEAA0A3A10D829880E0FD39C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/l8gFW6cFq5xTymTC8GcDzfCy-ko.roa
Signing time: Tue 02 Jan 2024 10:34:04 +0000
ROA not before: Tue 02 Jan 2024 10:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51939
IP address blocks: 2a0e:97c0:5c5::/48 maxlen: 48
2a0e:97c0:5c0::/44 maxlen: 48
2a0e:97c0:5c8::/48 maxlen: 48
2a0e:97c0:5c0::/48 maxlen: 48
2a0e:97c0:5c3::/48 maxlen: 48
2a0e:97c0:5ce::/48 maxlen: 48
2a0e:97c0:5c1::/48 maxlen: 48
2a0e:97c0:5cc::/48 maxlen: 48
2a0e:97c0:5c4::/48 maxlen: 48
2a0e:97c0:5cf::/48 maxlen: 48
2a0e:97c0:5ca::/48 maxlen: 48
2a0e:97c0:5c2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d1:bb:fe:aa:0a:3a:10:d8:29:88:0e:0f:d3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97c8055ba705ab9c53ca64c2f06703cdf0b2fa4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:91:f6:60:c3:82:ce:8c:6d:58:64:3e:8a:d4:
34:bc:3f:90:95:f7:ff:eb:71:25:61:95:96:75:a1:
28:16:36:0f:3b:7a:19:d3:ec:38:a2:57:84:60:64:
9b:c1:9a:1d:45:17:71:78:35:36:81:ad:cf:42:d1:
8c:a7:dd:b2:d0:92:96:35:2a:07:5d:42:ea:83:03:
ec:4c:c9:e6:fc:d8:82:9f:62:19:f9:b7:b6:aa:8e:
9d:d5:61:bb:1b:fd:4b:8c:3f:21:2a:8a:b4:74:cd:
89:87:b0:a1:46:39:e0:be:5b:b7:10:f7:14:e2:5d:
84:81:4e:a8:1d:e9:d6:75:58:a2:f5:40:fd:5c:55:
e3:ea:e7:72:e5:26:88:52:4d:14:5b:34:14:62:08:
88:bd:84:d2:ae:0b:84:c3:03:a7:95:de:8b:46:b2:
a8:c8:03:17:0b:4b:45:a1:8c:83:98:2e:d2:9a:62:
48:39:aa:50:8c:75:78:19:8f:05:eb:bf:e8:c6:55:
ac:9a:f5:dd:a2:5b:e5:5b:1f:c3:1f:7f:66:f6:06:
30:18:96:9c:da:f3:18:99:50:57:d2:82:25:26:a5:
0e:24:cc:1e:8d:56:e4:3d:46:48:0f:6c:83:95:b2:
6b:c7:d5:ea:fc:53:b9:b3:fb:47:bc:4b:b8:72:ae:
33:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C8:05:5B:A7:05:AB:9C:53:CA:64:C2:F0:67:03:CD:F0:B2:FA:4A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/l8gFW6cFq5xTymTC8GcDzfCy-ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5c0::/44
Signature Algorithm: sha256WithRSAEncryption
3b:28:81:bf:bb:b9:b9:c9:72:28:76:61:c8:fb:47:70:94:45:
60:d7:4f:52:81:61:ac:3a:d6:b0:66:96:cf:42:b3:8d:52:d2:
56:a2:c5:cb:6c:28:d6:f9:78:43:51:78:e7:45:9e:2e:61:ed:
a0:6f:12:6a:a2:14:a1:95:f2:40:df:33:18:c9:61:f1:51:09:
37:7e:d5:c8:0c:1a:78:cb:ec:d0:c5:22:5c:1a:99:83:62:65:
69:01:af:14:20:e6:20:71:52:a4:15:e5:20:f9:30:08:fb:8a:
67:b4:a8:64:67:fa:01:61:b7:11:90:a1:17:8a:7e:e9:39:96:
e4:58:0c:5d:80:86:80:d8:10:1a:86:40:78:29:5f:57:b3:70:
0d:7d:30:46:31:66:8f:85:ab:d4:19:4c:ed:ed:e6:bf:b8:13:
01:60:f5:b9:f3:d3:c0:60:e7:09:03:1e:96:a3:45:17:d0:62:
bf:7d:74:76:cc:99:3d:8b:8f:8a:ae:73:f5:15:d7:d6:1c:72:
4d:41:71:65:2c:8f:20:7c:d0:df:ad:da:1d:cc:16:d6:62:42:
b0:28:45:11:f8:6a:d6:28:d8:ef:ce:3e:26:55:0a:ee:4f:cd:
be:6d:03:27:6a:84:84:5f:63:3a:c1:4b:3c:2d:4f:48:08:3b:
ac:bd:00:e2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvNG7/qoKOhDYKYgOD9OcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2M4MDU1YmE3MDVhYjljNTNjYTY0YzJmMDY3MDNjZGYwYjJmYTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5H2YMOCzoxtWGQ+itQ0vD+Qlff/
63ElYZWWdaEoFjYPO3oZ0+w4oleEYGSbwZodRRdxeDU2ga3PQtGMp92y0JKWNSoH
XULqgwPsTMnm/NiCn2IZ+be2qo6d1WG7G/1LjD8hKoq0dM2Jh7ChRjngvlu3EPcU
4l2EgU6oHenWdVii9UD9XFXj6udy5SaIUk0UWzQUYgiIvYTSrguEwwOnld6LRrKo
yAMXC0tFoYyDmC7SmmJIOapQjHV4GY8F67/oxlWsmvXdolvlWx/DH39m9gYwGJac
2vMYmVBX0oIlJqUOJMwejVbkPUZID2yDlbJrx9Xq/FO5s/tHvEu4cq4zSwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJfIBVunBaucU8pkwvBnA83wsvpKMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvbDhnRlc2Y0ZxNXhUeW1UQzhHY0R6ZkN5LWtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAXA
MA0GCSqGSIb3DQEBCwUAA4IBAQA7KIG/u7m5yXIodmHI+0dwlEVg109SgWGsOtaw
ZpbPQrONUtJWosXLbCjW+XhDUXjnRZ4uYe2gbxJqohShlfJA3zMYyWHxUQk3ftXI
DBp4y+zQxSJcGpmDYmVpAa8UIOYgcVKkFeUg+TAI+4pntKhkZ/oBYbcRkKEXin7p
OZbkWAxdgIaA2BAahkB4KV9Xs3ANfTBGMWaPhavUGUzt7ea/uBMBYPW589PAYOcJ
Ax6Wo0UX0GK/fXR2zJk9i4+KrnP1FdfWHHJNQXFlLI8gfNDfrdodzBbWYkKwKEUR
+GrWKNjvzj4mVQruT82+bQMnaoSEX2M6wUs8LU9ICDusvQDi
-----END CERTIFICATE-----
Generated at Fri May 3 08:41:06 2024 by rpki-client on console-ams.rpki-client.org