Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rDcEWmZEUZNxSZXCh_wuAxIy9ZI.roa
File: rDcEWmZEUZNxSZXCh_wuAxIy9ZI.roa (raw, json)
Hash identifier: miTwTyjoie4apeAAlGStxZY9SQ/Mnq70kac7zIWYY/o=
Subject key identifier: AC:37:04:5A:66:44:51:93:71:49:95:C2:87:FC:2E:03:12:32:F5:92
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCCE1C14C4DE47CF9AC9385AC0BBB1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rDcEWmZEUZNxSZXCh_wuAxIy9ZI.roa
Signing time: Tue 02 Jan 2024 10:34:03 +0000
ROA not before: Tue 02 Jan 2024 10:34:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48063
IP address blocks: 2a10:2f00:196::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ce:1c:14:c4:de:47:cf:9a:c9:38:5a:c0:bb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac37045a66445193714995c287fc2e031232f592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ab:cb:c2:0d:de:04:4a:c8:b1:ca:c2:73:2b:
23:71:5a:f0:cc:cc:a1:0b:a7:59:0c:39:48:40:b6:
cf:4c:37:e2:1a:49:aa:b5:14:00:64:cc:81:ca:d1:
c8:81:c7:7b:87:c6:47:cd:ea:df:a7:7a:b5:b2:6d:
29:c8:7b:d5:b1:ca:56:7f:e4:9d:db:1c:e4:5c:d7:
9d:c5:5d:cb:b0:0c:3f:43:25:58:6f:95:6d:55:05:
8d:91:a9:5f:d9:c0:d9:6f:6c:cb:04:c0:7d:b7:24:
c9:ae:1c:17:01:2c:f2:3f:88:2c:0d:b9:d1:5b:af:
98:5f:e1:57:a6:7a:70:19:50:a6:23:78:05:92:7b:
da:e9:68:37:57:8d:b6:8b:4d:59:22:68:ac:42:2f:
b6:1d:52:d4:79:15:97:1f:eb:43:01:bc:c2:7e:2e:
8e:46:52:5b:fa:43:a1:42:f0:71:10:ef:e7:bc:cf:
1c:cf:00:9f:f3:a6:cb:1f:90:e8:ce:c6:63:d8:6d:
b6:c5:1d:ec:b0:b4:8f:32:00:13:fe:f4:24:77:03:
0b:fc:77:4c:46:7c:3e:57:23:d5:80:46:2f:ef:53:
5c:5b:46:ca:39:f0:f6:c7:a8:fc:5c:67:85:4e:8d:
3d:91:a3:d2:d7:96:0e:3b:9b:11:c7:72:71:19:f4:
72:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:37:04:5A:66:44:51:93:71:49:95:C2:87:FC:2E:03:12:32:F5:92
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rDcEWmZEUZNxSZXCh_wuAxIy9ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:196::/48
Signature Algorithm: sha256WithRSAEncryption
93:2e:ec:a3:be:72:75:38:85:2c:2b:2d:b9:e8:79:7d:12:54:
60:a7:db:0c:45:67:9e:78:a5:1f:0b:e3:d5:30:0d:ec:91:51:
32:e2:6a:4b:08:e1:83:ec:62:a7:b5:5f:29:2a:d0:cc:39:d1:
cf:40:9a:f8:08:b3:45:1f:27:04:bc:2c:71:b0:97:0d:99:2a:
db:f9:07:ca:f2:54:ad:0f:82:34:84:8b:6b:8c:a9:99:c3:83:
5a:82:56:0e:e2:cf:b0:e2:79:3d:a7:b5:6d:29:fb:1b:4f:5f:
9c:0d:13:fa:81:4b:7f:fe:01:47:27:eb:17:f0:39:0e:1d:6a:
a1:a1:f6:88:3a:57:e0:1e:db:02:c4:88:90:00:ad:ba:7d:d9:
6d:2d:a3:3d:3c:a0:99:b6:b1:51:38:ff:8a:2c:75:13:eb:28:
0e:d5:06:1b:c9:0d:85:1e:12:33:f9:ee:a8:c5:82:59:4d:6a:
2b:6c:ab:61:ac:08:8e:c0:2b:ce:af:ec:e6:2b:21:fb:b7:b7:
bd:6f:5f:b1:29:d4:f6:54:70:28:3f:cd:10:db:bd:31:db:54:
42:d9:8b:e1:79:54:53:cd:a8:cd:65:45:56:95:2c:eb:ad:39:
0e:e7:56:83:f8:75:93:21:b8:55:b8:b5:8d:11:09:17:63:4d:
62:25:47:d2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvM4cFMTeR8+ayThawLuxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzM3MDQ1YTY2NDQ1MTkzNzE0OTk1YzI4N2ZjMmUwMzEyMzJmNTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKvLwg3eBErIscrCcysjcVrwzMyh
C6dZDDlIQLbPTDfiGkmqtRQAZMyBytHIgcd7h8ZHzerfp3q1sm0pyHvVscpWf+Sd
2xzkXNedxV3LsAw/QyVYb5VtVQWNkalf2cDZb2zLBMB9tyTJrhwXASzyP4gsDbnR
W6+YX+FXpnpwGVCmI3gFknva6Wg3V422i01ZImisQi+2HVLUeRWXH+tDAbzCfi6O
RlJb+kOhQvBxEO/nvM8czwCf86bLH5DozsZj2G22xR3ssLSPMgAT/vQkdwML/HdM
Rnw+VyPVgEYv71NcW0bKOfD2x6j8XGeFTo09kaPS15YOO5sRx3JxGfRyRwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKw3BFpmRFGTcUmVwof8LgMSMvWSMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvckRjRVdtWkVVWk54U1pYQ2hfd3VBeEl5OVpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAGW
MA0GCSqGSIb3DQEBCwUAA4IBAQCTLuyjvnJ1OIUsKy256Hl9ElRgp9sMRWeeeKUf
C+PVMA3skVEy4mpLCOGD7GKntV8pKtDMOdHPQJr4CLNFHycEvCxxsJcNmSrb+QfK
8lStD4I0hItrjKmZw4NaglYO4s+w4nk9p7VtKfsbT1+cDRP6gUt//gFHJ+sX8DkO
HWqhofaIOlfgHtsCxIiQAK26fdltLaM9PKCZtrFROP+KLHUT6ygO1QYbyQ2FHhIz
+e6oxYJZTWorbKthrAiOwCvOr+zmKyH7t7e9b1+xKdT2VHAoP80Q270x21RC2Yvh
eVRTzajNZUVWlSzrrTkO51aD+HWTIbhVuLWNEQkXY01iJUfS
-----END CERTIFICATE-----
Generated at Fri May 3 06:35:01 2024 by rpki-client on console-ams.rpki-client.org