Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tCKDG5_bKj7wfWGVrzAF7TB7VJg.roa
File: tCKDG5_bKj7wfWGVrzAF7TB7VJg.roa (raw, json)
Hash identifier: ZbEe2/l91oVKZfSpx5FBwVKtA11tmcYa1F/WkI6tss0=
Subject key identifier: B4:22:83:1B:9F:DB:2A:3E:F0:7D:61:95:AF:30:05:ED:30:7B:54:98
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018EA20B7D5693AB5053A1DC2D7DDADB4119
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tCKDG5_bKj7wfWGVrzAF7TB7VJg.roa
Signing time: Wed 03 Apr 2024 03:40:45 +0000
ROA not before: Wed 03 Apr 2024 03:40:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216385
IP address blocks: 2a06:de06:382::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a2:0b:7d:56:93:ab:50:53:a1:dc:2d:7d:da:db:41:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 3 03:40:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b422831b9fdb2a3ef07d6195af3005ed307b5498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dc:3d:15:57:37:da:bf:86:f0:3a:0a:08:34:
18:a0:6a:65:b4:78:dd:ed:73:dc:1f:f7:a8:3a:a2:
73:81:4a:c1:2c:0d:32:9d:96:f7:32:c1:8a:d9:19:
89:80:be:08:fc:20:c9:73:61:d6:7f:b7:0e:5a:97:
db:a6:82:8a:d4:d3:6e:62:0f:4d:a5:18:0c:f6:8b:
b3:56:74:7e:af:61:92:1c:d1:1b:0f:ae:bb:8d:fb:
47:d4:02:9d:6f:19:b8:3d:87:3f:9d:92:08:4d:af:
ae:d9:06:91:27:ac:25:a1:87:31:45:ae:88:22:d5:
fa:97:d0:a7:c6:a7:c0:c9:db:9c:8a:56:87:79:0c:
71:9f:c6:29:c3:2a:5f:93:cb:d4:ab:36:e3:5b:8d:
60:8b:ac:84:9f:29:46:b1:00:49:bc:99:94:74:9e:
01:35:21:af:bb:e2:43:b8:79:85:14:0c:85:b0:4c:
24:92:5b:15:6a:6e:5d:be:8c:a8:66:79:a3:57:78:
8f:98:fd:22:84:25:37:04:d6:e5:cb:52:39:c5:c1:
f3:c3:a4:a4:26:77:17:8a:f7:0b:9d:b9:20:39:a0:
9e:2f:2b:09:ab:86:d2:a7:be:9b:f4:90:04:1f:76:
b5:dd:d6:47:08:78:7a:78:03:c4:54:ce:34:09:6c:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:22:83:1B:9F:DB:2A:3E:F0:7D:61:95:AF:30:05:ED:30:7B:54:98
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tCKDG5_bKj7wfWGVrzAF7TB7VJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de06:382::/48
Signature Algorithm: sha256WithRSAEncryption
28:a8:ec:72:ad:b7:af:e2:57:71:12:41:95:6c:d9:d2:33:fd:
6f:d4:77:a6:a3:15:6e:a9:7b:7e:14:ac:17:70:ff:fb:1f:77:
8a:98:0a:30:72:fd:6b:0c:39:5f:f6:04:bb:62:2c:0a:fe:de:
d5:95:6a:c4:4a:f8:77:7e:ac:1b:dd:3a:9a:20:33:cd:8f:4c:
4f:a0:52:68:d4:86:0b:a3:fe:de:b6:24:b7:ad:ba:24:41:57:
35:2e:22:ce:4a:07:a8:d5:f4:51:93:fb:03:9e:4e:de:4e:69:
ba:ec:46:e9:10:95:f7:f0:2d:f6:49:c0:95:af:d3:e5:88:13:
13:f8:b0:c3:c3:6c:0d:c5:12:06:e8:77:7d:83:a4:af:8a:18:
c1:4c:a2:85:d7:b5:58:de:ff:02:c7:f6:90:88:28:8d:91:72:
a3:55:da:2e:7a:45:98:6f:b5:f8:71:b0:12:a0:44:4f:4f:9c:
62:d3:05:eb:94:c3:95:1c:7e:f5:25:72:41:87:72:4c:9d:bf:
ee:15:5e:dc:38:6b:e9:28:a0:a4:59:26:8b:45:32:e9:c4:e7:
a3:c2:66:a2:e2:97:42:d6:53:04:a2:89:04:2e:58:f6:8c:61:
16:43:34:91:26:82:35:1c:8f:85:8b:7a:60:a7:29:19:0b:d2:
1c:e8:b8:15
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY6iC31Wk6tQU6HcLX3a20EZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwNDAzMDM0MDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDIyODMxYjlmZGIyYTNlZjA3ZDYxOTVhZjMwMDVlZDMwN2I1NDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNw9FVc32r+G8DoKCDQYoGpltHjd
7XPcH/eoOqJzgUrBLA0ynZb3MsGK2RmJgL4I/CDJc2HWf7cOWpfbpoKK1NNuYg9N
pRgM9ouzVnR+r2GSHNEbD667jftH1AKdbxm4PYc/nZIITa+u2QaRJ6wloYcxRa6I
ItX6l9CnxqfAyducilaHeQxxn8Ypwypfk8vUqzbjW41gi6yEnylGsQBJvJmUdJ4B
NSGvu+JDuHmFFAyFsEwkklsVam5dvoyoZnmjV3iPmP0ihCU3BNbly1I5xcHzw6Sk
JncXivcLnbkgOaCeLysJq4bSp76b9JAEH3a13dZHCHh6eAPEVM40CWyzKwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLQigxuf2yo+8H1hla8wBe0we1SYMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdENLREc1X2JLajd3ZldHVnJ6QUY3VEI3VkpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgbeBgOC
MA0GCSqGSIb3DQEBCwUAA4IBAQAoqOxyrbev4ldxEkGVbNnSM/1v1HemoxVuqXt+
FKwXcP/7H3eKmAowcv1rDDlf9gS7YiwK/t7VlWrESvh3fqwb3TqaIDPNj0xPoFJo
1IYLo/7etiS3rbokQVc1LiLOSgeo1fRRk/sDnk7eTmm67EbpEJX38C32ScCVr9Pl
iBMT+LDDw2wNxRIG6Hd9g6SvihjBTKKF17VY3v8Cx/aQiCiNkXKjVdouekWYb7X4
cbASoERPT5xi0wXrlMOVHH71JXJBh3JMnb/uFV7cOGvpKKCkWSaLRTLpxOejwmai
4pdC1lMEookELlj2jGEWQzSRJoI1HI+Fi3pgpykZC9Ic6LgV
-----END CERTIFICATE-----
Generated at Fri May 3 06:56:36 2024 by rpki-client on console-fra.rpki-client.org