Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wU5P9PgaYOov__VCVxqd_ycQTWw.roa
File: wU5P9PgaYOov__VCVxqd_ycQTWw.roa (raw, json)
Hash identifier: 8Z/jEAW2Dn3VgyfU8N8HcJf21sF5kZZs2VqV+QqsFzo=
Subject key identifier: C1:4E:4F:F4:F8:1A:60:EA:2F:FF:F5:42:57:1A:9D:FF:27:10:4D:6C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0192FF70984DA9DBBB4B3D657E68F757139B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wU5P9PgaYOov__VCVxqd_ycQTWw.roa
Signing time: Wed 06 Nov 2024 03:07:02 +0000
ROA not before: Wed 06 Nov 2024 03:07:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214430
IP address blocks: 2a06:de02:20::/48 maxlen: 48
2a06:de02:21::/48 maxlen: 48
2a06:de02:22::/48 maxlen: 48
2a06:de02:23::/48 maxlen: 48
2a06:de02:24::/48 maxlen: 48
2a06:de02:25::/48 maxlen: 48
2a06:de02:26::/48 maxlen: 48
2a06:de02:27::/48 maxlen: 48
2a06:de02:28::/48 maxlen: 48
2a06:de02:29::/48 maxlen: 48
2a06:de02:2a::/48 maxlen: 48
2a06:de02:2b::/48 maxlen: 48
2a06:de02:2c::/48 maxlen: 48
2a06:de02:2d::/48 maxlen: 48
2a06:de02:2e::/48 maxlen: 48
2a06:de02:2f::/48 maxlen: 48
2a10:2f00:12c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ff:70:98:4d:a9:db:bb:4b:3d:65:7e:68:f7:57:13:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 6 03:07:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c14e4ff4f81a60ea2ffff542571a9dff27104d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:a5:b0:ee:56:88:22:31:bc:77:23:ee:82:
ef:03:2a:dc:f3:e8:0e:b5:91:a4:b1:f5:d0:a1:ca:
5e:89:57:c6:f3:49:83:c4:0c:17:12:ae:10:2d:6d:
bb:37:3d:25:f0:5c:1f:8a:92:60:48:13:31:17:56:
3a:5e:f2:8c:19:47:aa:31:98:e9:90:f7:6f:0f:dd:
e1:4c:07:ff:70:02:35:8d:a6:ec:ac:dc:89:8a:a4:
85:ba:b0:8a:69:25:07:e7:7e:c6:97:82:99:b5:8c:
c2:5a:3f:cd:2f:94:1a:24:b7:25:8c:ba:7a:a5:71:
cd:3d:c2:46:bb:a8:9b:e0:57:a1:26:fd:7b:9c:d5:
f1:4a:05:e4:ac:01:c0:f4:02:64:ec:21:d6:01:b8:
49:28:f7:57:96:10:63:12:d9:63:ff:7a:c0:68:d8:
eb:d6:fe:98:92:cb:f8:b8:57:07:67:52:44:91:df:
bc:2d:76:6f:52:bf:16:3f:0f:01:44:b1:c3:a5:56:
89:96:d9:d1:81:19:0b:b3:98:5f:44:3e:ee:78:b6:
37:9c:a1:df:73:62:c8:61:46:31:eb:8a:f2:89:bf:
be:8f:31:6c:21:b2:37:17:8a:8b:2c:74:66:a6:d9:
66:f3:09:89:1d:98:35:1b:d0:d7:c1:64:85:1e:d5:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4E:4F:F4:F8:1A:60:EA:2F:FF:F5:42:57:1A:9D:FF:27:10:4D:6C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wU5P9PgaYOov__VCVxqd_ycQTWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de02:20::/44
2a10:2f00:12c::/48
Signature Algorithm: sha256WithRSAEncryption
19:1b:b4:c6:41:0c:17:06:48:31:66:3c:a5:6d:a6:cd:82:d8:
fa:23:3a:2d:7b:2a:61:77:ab:db:72:78:25:ba:4e:75:fe:f1:
b1:5c:a3:02:48:d2:6f:28:c0:d0:8b:fa:56:39:c3:78:0b:45:
d1:16:ea:d9:63:97:1d:c2:42:08:2a:e1:63:cc:de:46:22:93:
27:e3:cb:86:5c:dc:f3:44:1e:4a:10:d6:ac:88:bf:b3:75:8e:
2d:57:f6:bb:05:bc:7f:70:5d:8f:f7:52:ba:27:6f:d0:e6:9f:
83:d5:ea:6d:62:64:99:79:24:e5:f7:5b:28:e6:7a:17:8c:02:
cd:c9:49:bf:8a:ee:6f:20:6c:ba:77:c1:6d:ea:57:7f:85:c5:
77:c4:bf:ac:c6:ca:22:67:1c:9a:02:57:65:4d:46:7b:fc:93:
df:1e:63:e5:48:6f:33:ab:65:25:80:b3:f2:d8:01:d5:aa:40:
0b:2e:19:1b:a3:6f:ed:56:cf:52:e3:d2:71:60:15:ee:6b:db:
5a:e8:b3:b7:20:8d:33:d8:47:5e:78:b3:07:0f:38:4b:fa:5c:
ee:02:0d:a9:cf:74:b5:1a:d9:7d:a5:0e:b1:1f:1d:e6:93:56:
c2:00:98:e0:93:2e:ab:2d:b3:97:a5:ae:51:69:ca:49:87:09:
76:2e:66:05
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZL/cJhNqdu7Sz1lfmj3VxObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQxMTA2MDMwNzAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTRlNGZmNGY4MWE2MGVhMmZmZmY1NDI1NzFhOWRmZjI3MTA0ZDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruWlsO5WiCIxvHcj7oLvAyrc8+gO
tZGksfXQocpeiVfG80mDxAwXEq4QLW27Nz0l8FwfipJgSBMxF1Y6XvKMGUeqMZjp
kPdvD93hTAf/cAI1jabsrNyJiqSFurCKaSUH537Gl4KZtYzCWj/NL5QaJLcljLp6
pXHNPcJGu6ib4FehJv17nNXxSgXkrAHA9AJk7CHWAbhJKPdXlhBjEtlj/3rAaNjr
1v6Yksv4uFcHZ1JEkd+8LXZvUr8WPw8BRLHDpVaJltnRgRkLs5hfRD7ueLY3nKHf
c2LIYUYx64ryib++jzFsIbI3F4qLLHRmptlm8wmJHZg1G9DXwWSFHtUGGwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMFOT/T4GmDqL//1Qlcanf8nEE1sMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvd1U1UDlQZ2FZT292X19WQ1Z4cWRfeWNRVFd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeAgAg
AwcAKhAvAAEsMA0GCSqGSIb3DQEBCwUAA4IBAQAZG7TGQQwXBkgxZjylbabNgtj6
Izoteyphd6vbcngluk51/vGxXKMCSNJvKMDQi/pWOcN4C0XRFurZY5cdwkIIKuFj
zN5GIpMn48uGXNzzRB5KENasiL+zdY4tV/a7Bbx/cF2P91K6J2/Q5p+D1eptYmSZ
eSTl91so5noXjALNyUm/iu5vIGy6d8Ft6ld/hcV3xL+sxsoiZxyaAldlTUZ7/JPf
HmPlSG8zq2UlgLPy2AHVqkALLhkbo2/tVs9S49JxYBXua9ta6LO3II0z2EdeeLMH
DzhL+lzuAg2pz3S1Gtl9pQ6xHx3mk1bCAJjgky6rLbOXpa5RacpJhwl2LmYF
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:59 2024 by rpki-client on console-ams.rpki-client.org