Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u1u9ECVqMAg5htVrM-04e0ZnVas.roa
File: u1u9ECVqMAg5htVrM-04e0ZnVas.roa (raw, json)
Hash identifier: +7ngJTv5kig47H7QAO1Zdj/xCgnnLSBgEc4r9DhbWKs=
Subject key identifier: BB:5B:BD:10:25:6A:30:08:39:86:D5:6B:33:ED:38:7B:46:67:55:AB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018E81927F30B7243B1C4A7CDE891ED33DC0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u1u9ECVqMAg5htVrM-04e0ZnVas.roa
Signing time: Wed 27 Mar 2024 20:20:45 +0000
ROA not before: Wed 27 Mar 2024 20:20:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215232
IP address blocks: 2a0e:b107:27de::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:81:92:7f:30:b7:24:3b:1c:4a:7c:de:89:1e:d3:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 27 20:20:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb5bbd10256a30083986d56b33ed387b466755ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4b:10:b0:ce:4d:7f:a5:19:e1:e4:5a:7d:a0:
4b:3c:ef:d9:75:19:50:47:54:6c:f2:d3:3f:24:ac:
11:21:54:14:52:77:57:a0:4e:68:8f:7c:a8:43:3b:
5d:9a:49:0b:32:be:8b:61:51:e8:a5:d3:b9:b4:e0:
b5:4e:d7:b1:8c:95:c5:c5:92:44:e1:f3:1e:98:ae:
9d:fe:22:59:8b:d2:71:d1:1e:51:d0:91:3c:85:64:
7b:14:26:18:ef:68:08:09:93:39:8f:32:6b:ab:5a:
57:f5:b6:20:65:58:92:c8:13:de:c0:02:6d:21:c2:
61:4d:4a:c6:7a:8c:cc:28:c2:b7:fc:b9:4c:00:bb:
16:18:9b:23:e4:b6:35:31:32:83:c8:fe:18:8f:e1:
a9:87:b3:b4:0e:a5:90:f9:e8:39:18:86:8e:66:f8:
0f:71:da:ac:71:67:f6:fd:d2:8b:4c:1f:10:19:db:
e8:6a:40:57:67:9b:cc:a9:b0:0e:69:8b:5c:f0:69:
bc:70:2d:ce:ac:46:7d:eb:55:23:6b:e6:a9:89:2c:
4d:28:cb:a8:ca:69:9a:cc:56:0f:4a:9c:23:16:7c:
0d:d9:21:60:09:b0:b3:65:cc:09:f4:da:ed:b1:93:
94:e1:bf:eb:f9:85:37:06:80:50:09:6a:af:34:1b:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5B:BD:10:25:6A:30:08:39:86:D5:6B:33:ED:38:7B:46:67:55:AB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u1u9ECVqMAg5htVrM-04e0ZnVas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27de::/48
Signature Algorithm: sha256WithRSAEncryption
b6:91:f8:d1:79:07:08:55:11:0e:37:70:f5:17:6d:d5:74:81:
5f:2c:fe:63:48:9a:b7:d1:8a:ad:a1:9b:4a:42:ad:17:c9:9f:
7c:fc:21:ea:0a:d7:71:08:ca:7e:02:45:35:03:f7:bd:8d:1d:
33:ca:e2:97:9d:88:19:46:8d:1d:64:87:7d:de:a9:1e:47:61:
12:54:ab:11:26:3b:c7:18:19:40:8d:9b:d8:94:8d:e6:71:d5:
69:19:85:29:ce:a1:21:6e:cf:ca:52:7e:c0:1f:ad:58:de:4c:
52:26:bf:dd:53:a6:16:a5:3a:97:a7:bb:e2:a7:3b:93:72:cf:
72:9c:7f:9d:95:63:9b:3c:d0:44:78:9b:c2:34:2f:0c:d3:80:
c4:f5:4c:6c:a3:4d:71:63:c5:aa:4f:cf:4c:a7:9e:9d:94:47:
f5:fb:51:7a:85:ee:16:eb:59:7a:69:ed:fb:64:b0:b8:95:38:
bc:3e:b2:6b:3c:90:20:13:12:6b:5f:f9:76:cd:17:0d:cf:a8:
10:d7:b6:be:bb:14:b6:d3:61:fc:eb:89:67:dc:09:e1:1c:40:
6f:3b:f1:83:cb:8b:04:2c:59:ed:45:d3:dd:1c:28:51:f0:f7:
0f:db:99:19:9d:74:17:74:f1:4b:e8:6f:cc:24:c1:a0:b6:d0:
77:0d:de:59
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY6Bkn8wtyQ7HEp83oke0z3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMzI3MjAyMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjViYmQxMDI1NmEzMDA4Mzk4NmQ1NmIzM2VkMzg3YjQ2Njc1NWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0sQsM5Nf6UZ4eRafaBLPO/ZdRlQ
R1Rs8tM/JKwRIVQUUndXoE5oj3yoQztdmkkLMr6LYVHopdO5tOC1TtexjJXFxZJE
4fMemK6d/iJZi9Jx0R5R0JE8hWR7FCYY72gICZM5jzJrq1pX9bYgZViSyBPewAJt
IcJhTUrGeozMKMK3/LlMALsWGJsj5LY1MTKDyP4Yj+Gph7O0DqWQ+eg5GIaOZvgP
cdqscWf2/dKLTB8QGdvoakBXZ5vMqbAOaYtc8Gm8cC3OrEZ961Uja+apiSxNKMuo
ymmazFYPSpwjFnwN2SFgCbCzZcwJ9NrtsZOU4b/r+YU3BoBQCWqvNBuUdwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLtbvRAlajAIOYbVazPtOHtGZ1WrMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdTF1OUVDVnFNQWc1aHRWck0tMDRlMFpuVmFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xByfe
MA0GCSqGSIb3DQEBCwUAA4IBAQC2kfjReQcIVREON3D1F23VdIFfLP5jSJq30Yqt
oZtKQq0XyZ98/CHqCtdxCMp+AkU1A/e9jR0zyuKXnYgZRo0dZId93qkeR2ESVKsR
JjvHGBlAjZvYlI3mcdVpGYUpzqEhbs/KUn7AH61Y3kxSJr/dU6YWpTqXp7vipzuT
cs9ynH+dlWObPNBEeJvCNC8M04DE9Uxso01xY8WqT89Mp56dlEf1+1F6he4W61l6
ae37ZLC4lTi8PrJrPJAgExJrX/l2zRcNz6gQ17a+uxS202H864ln3AnhHEBvO/GD
y4sELFntRdPdHChR8PcP25kZnXQXdPFL6G/MJMGgttB3Dd5Z
-----END CERTIFICATE-----
Generated at Fri May 3 13:17:53 2024 by rpki-client on console-ams.rpki-client.org