Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sq9dsW_cI67sf10ThPoOH67glpQ.roa
File: sq9dsW_cI67sf10ThPoOH67glpQ.roa (raw, json)
Hash identifier: +cdrIFtpkNjBSYemJQj/VvIog7DnI7tfQailSyO7XsM=
Subject key identifier: B2:AF:5D:B1:6F:DC:23:AE:EC:7F:5D:13:84:FA:0E:1F:AE:E0:96:94
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD46603A5AE959C7B1485748D6E0B0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sq9dsW_cI67sf10ThPoOH67glpQ.roa
Signing time: Tue 02 Jan 2024 10:34:33 +0000
ROA not before: Tue 02 Jan 2024 10:34:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212516
IP address blocks: 2a0e:97c0:64c::/48 maxlen: 48
2a0e:97c0:b77::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:46:60:3a:5a:e9:59:c7:b1:48:57:48:d6:e0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2af5db16fdc23aeec7f5d1384fa0e1faee09694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fd:c7:7c:99:3f:cd:21:5f:18:ff:97:d0:5c:
e3:ed:b2:4d:ba:6f:58:e0:10:98:63:b0:8d:a8:0f:
44:10:ec:c7:b9:a8:71:5f:0c:bb:7e:71:96:e7:d2:
e8:a0:77:b7:fd:83:c5:0e:34:e1:04:38:32:b1:8b:
b6:12:7c:ec:a0:c1:73:d3:d2:31:06:47:a7:53:b1:
f2:3d:11:12:85:10:51:a7:03:b5:67:76:8f:c2:51:
0c:fd:a1:5b:fa:82:c9:9b:32:a1:ca:9a:87:60:ed:
f5:07:9d:44:6a:9c:a9:f9:30:75:dc:06:f6:e7:04:
9e:51:4e:60:22:d6:47:fc:cd:45:17:73:7e:fe:20:
c3:0a:42:4a:3c:8c:e5:bc:6a:aa:cd:a5:8c:a2:40:
14:95:0c:92:51:98:35:28:e1:7d:8a:d1:e3:6a:85:
60:f0:db:66:48:40:53:0e:27:de:f7:88:49:52:45:
2a:81:27:11:bd:e7:66:db:91:eb:6a:68:cd:3e:62:
cd:01:1d:17:e8:8e:1a:62:83:74:bf:20:e2:f2:78:
55:17:2a:5a:ba:e8:85:71:8c:2c:c4:41:01:e9:83:
9a:e7:92:a5:c6:de:6e:4e:96:fa:37:f5:fc:fb:2b:
37:1e:69:35:b0:c1:a0:20:8c:5f:ac:6e:1e:ee:04:
57:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AF:5D:B1:6F:DC:23:AE:EC:7F:5D:13:84:FA:0E:1F:AE:E0:96:94
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sq9dsW_cI67sf10ThPoOH67glpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:64c::/48
2a0e:97c0:b77::/48
Signature Algorithm: sha256WithRSAEncryption
9e:02:91:bd:df:3f:0a:3e:23:f1:29:9a:33:8a:9b:1e:76:48:
f6:24:ca:87:c2:0c:72:ef:1f:de:13:4f:24:d9:ec:a7:56:40:
0f:be:e0:0b:24:98:51:e0:88:e8:9f:95:8c:27:5d:71:f1:ce:
0d:a2:76:1b:bc:26:24:9f:4a:3a:e5:e1:02:ed:cc:d9:f8:56:
03:77:45:c7:b5:5c:29:af:65:80:1f:e9:4e:3a:17:66:18:32:
22:7e:d1:03:4f:fd:0a:33:7a:dc:02:e0:17:00:28:0d:bf:0b:
83:61:50:85:4f:15:b4:00:cd:ba:a5:8d:64:3b:64:30:50:8e:
54:2c:73:02:c3:43:09:ea:f2:bf:06:30:c4:75:e1:a3:90:88:
5f:92:e6:1f:d0:c6:f9:03:9a:d2:ff:79:b6:36:bb:aa:01:45:
5b:bf:46:fd:ec:20:81:94:c8:40:9d:3f:a3:94:d8:f6:ff:2c:
8b:25:1e:f2:e5:96:43:aa:38:6d:e3:04:61:12:15:38:96:58:
16:12:c4:79:32:3f:fb:81:eb:68:79:95:98:c6:29:9a:b7:cb:
69:54:89:e8:06:0e:d2:39:d8:5f:99:45:e9:a0:1a:7a:5e:87:
b6:7f:51:63:e6:8e:d3:ca:55:24:57:c9:55:7e:f1:69:aa:79:
a1:15:b0:3d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzJvUZgOlrpWcexSFdI1uCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmFmNWRiMTZmZGMyM2FlZWM3ZjVkMTM4NGZhMGUxZmFlZTA5Njk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP3HfJk/zSFfGP+X0Fzj7bJNum9Y
4BCYY7CNqA9EEOzHuahxXwy7fnGW59LooHe3/YPFDjThBDgysYu2EnzsoMFz09Ix
BkenU7HyPREShRBRpwO1Z3aPwlEM/aFb+oLJmzKhypqHYO31B51Eapyp+TB13Ab2
5wSeUU5gItZH/M1FF3N+/iDDCkJKPIzlvGqqzaWMokAUlQySUZg1KOF9itHjaoVg
8NtmSEBTDife94hJUkUqgScRvedm25HramjNPmLNAR0X6I4aYoN0vyDi8nhVFypa
uuiFcYwsxEEB6YOa55Klxt5uTpb6N/X8+ys3Hmk1sMGgIIxfrG4e7gRXJwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLKvXbFv3COu7H9dE4T6Dh+u4JaUMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvc3E5ZHNXX2NJNjdzZjEwVGhQb09INjdnbHBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6XwAZM
AwcAKg6XwAt3MA0GCSqGSIb3DQEBCwUAA4IBAQCeApG93z8KPiPxKZozipsedkj2
JMqHwgxy7x/eE08k2eynVkAPvuALJJhR4Ijon5WMJ11x8c4NonYbvCYkn0o65eEC
7czZ+FYDd0XHtVwpr2WAH+lOOhdmGDIiftEDT/0KM3rcAuAXACgNvwuDYVCFTxW0
AM26pY1kO2QwUI5ULHMCw0MJ6vK/BjDEdeGjkIhfkuYf0Mb5A5rS/3m2NruqAUVb
v0b97CCBlMhAnT+jlNj2/yyLJR7y5ZZDqjht4wRhEhU4llgWEsR5Mj/7getoeZWY
ximat8tpVInoBg7SOdhfmUXpoBp6Xoe2f1Fj5o7TylUkV8lVfvFpqnmhFbA9
-----END CERTIFICATE-----
Generated at Fri May 3 06:56:36 2024 by rpki-client on console-fra.rpki-client.org