Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x5kfUfrPQ1FgZWNGALGq6eTVs3Y.roa
File: x5kfUfrPQ1FgZWNGALGq6eTVs3Y.roa (raw, json)
Hash identifier: EdoI7UTo8isCc4l6y/ODsKM45R5aNeDufEtVGEkLyMA=
Subject key identifier: C7:99:1F:51:FA:CF:43:51:60:65:63:46:00:B1:AA:E9:E4:D5:B3:76
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0191544825ED5879DEFB85944E6A71DF9E3B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x5kfUfrPQ1FgZWNGALGq6eTVs3Y.roa
Signing time: Thu 15 Aug 2024 04:25:00 +0000
ROA not before: Thu 15 Aug 2024 04:25:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214430
IP address blocks: 2a10:2f00:12c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 20:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:54:48:25:ed:58:79:de:fb:85:94:4e:6a:71:df:9e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 15 04:25:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7991f51facf43516065634600b1aae9e4d5b376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ae:91:a7:9d:9a:20:08:1e:16:01:b0:1f:40:
4d:bf:e2:75:bc:a6:93:28:2c:f7:e9:09:d6:e3:cc:
c7:a5:9c:91:d0:70:99:d6:d5:7f:ee:d2:56:69:86:
c6:ca:c0:0d:9a:5b:5e:4f:30:66:41:84:e3:3c:71:
eb:40:89:6d:33:69:a5:64:c4:7f:dd:83:46:88:c8:
da:fc:8c:db:31:99:2f:86:68:90:6d:0c:fa:c0:11:
1d:dd:bf:e2:8d:6e:20:7d:66:8d:36:07:f8:b9:0e:
df:2d:ea:02:87:08:d8:8b:08:42:a5:58:8f:74:cd:
06:f5:72:2a:c0:a5:75:e1:eb:72:e4:32:40:08:75:
7a:b2:1c:78:00:63:b0:29:f2:62:18:80:48:cb:61:
4f:bd:61:f4:1b:d7:48:ab:44:88:30:44:ca:6a:09:
c4:2e:c5:21:5f:8c:d0:a2:55:ec:fa:54:23:19:44:
47:19:4c:44:e2:96:1c:bc:51:6a:cc:5a:53:60:db:
6c:ce:0c:e4:97:44:40:c3:dc:64:dd:1f:33:33:d1:
44:42:1b:db:69:2f:71:92:91:27:ef:d4:15:1f:ae:
a2:a5:cf:b4:62:e5:61:a3:b7:fc:34:67:79:57:cd:
e8:1c:fb:8f:27:45:66:ca:1e:96:f4:f5:79:32:13:
25:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:99:1F:51:FA:CF:43:51:60:65:63:46:00:B1:AA:E9:E4:D5:B3:76
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x5kfUfrPQ1FgZWNGALGq6eTVs3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:12c::/48
Signature Algorithm: sha256WithRSAEncryption
96:7d:7c:59:88:1d:72:ec:8d:0c:15:88:3f:e0:b8:6e:58:56:
57:9e:67:dc:3a:3a:7d:02:22:7f:fb:ab:d7:88:0a:ac:ba:18:
02:d6:b3:a9:60:9c:32:7c:73:43:37:06:ae:b5:a5:47:83:7b:
ef:e0:54:1b:70:a1:34:f8:cd:24:3f:c1:5c:1c:87:c3:81:fc:
65:43:4e:a8:52:2d:47:c1:2f:9d:e8:00:a0:dd:24:17:e0:2b:
5d:d4:26:79:b7:0f:fc:bc:05:0a:f4:66:44:c3:9f:e7:3a:32:
39:62:96:0d:a1:24:a7:d1:1f:9e:c9:1a:9f:f2:57:75:0a:1d:
d3:3b:65:cd:2c:34:d9:34:95:24:00:8e:f7:7b:60:eb:b9:09:
3e:a4:5a:6d:75:76:96:3f:cd:a1:73:45:fe:7b:18:b8:9e:58:
02:56:6f:d2:82:d2:ea:bc:c3:a0:3e:16:09:42:7f:6b:6a:aa:
03:51:0e:a4:ea:b7:82:c4:52:75:50:cb:99:9f:9f:16:9e:4f:
56:1f:52:52:1b:59:7e:ca:21:e8:0d:b8:2e:60:f5:45:d2:a2:
3d:84:2b:45:66:7e:e9:9a:26:f3:d9:00:5f:f4:cd:b6:d9:cc:
20:35:ee:f3:f6:c7:e0:04:a6:3a:59:75:e5:1d:e1:34:3c:fa:
d2:6e:c3:de
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZFUSCXtWHne+4WUTmpx3547MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwODE1MDQyNTAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzk5MWY1MWZhY2Y0MzUxNjA2NTYzNDYwMGIxYWFlOWU0ZDViMzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq6Rp52aIAgeFgGwH0BNv+J1vKaT
KCz36QnW48zHpZyR0HCZ1tV/7tJWaYbGysANmlteTzBmQYTjPHHrQIltM2mlZMR/
3YNGiMja/IzbMZkvhmiQbQz6wBEd3b/ijW4gfWaNNgf4uQ7fLeoChwjYiwhCpViP
dM0G9XIqwKV14ety5DJACHV6shx4AGOwKfJiGIBIy2FPvWH0G9dIq0SIMETKagnE
LsUhX4zQolXs+lQjGURHGUxE4pYcvFFqzFpTYNtszgzkl0RAw9xk3R8zM9FEQhvb
aS9xkpEn79QVH66ipc+0YuVho7f8NGd5V83oHPuPJ0Vmyh6W9PV5MhMloQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMeZH1H6z0NRYGVjRgCxqunk1bN2MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEveDVrZlVmclBRMUZnWldOR0FMR3E2ZVRWczNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAEs
MA0GCSqGSIb3DQEBCwUAA4IBAQCWfXxZiB1y7I0MFYg/4LhuWFZXnmfcOjp9AiJ/
+6vXiAqsuhgC1rOpYJwyfHNDNwautaVHg3vv4FQbcKE0+M0kP8FcHIfDgfxlQ06o
Ui1HwS+d6ACg3SQX4Ctd1CZ5tw/8vAUK9GZEw5/nOjI5YpYNoSSn0R+eyRqf8ld1
Ch3TO2XNLDTZNJUkAI73e2DruQk+pFptdXaWP82hc0X+exi4nlgCVm/SgtLqvMOg
PhYJQn9raqoDUQ6k6reCxFJ1UMuZn58Wnk9WH1JSG1l+yiHoDbguYPVF0qI9hCtF
Zn7pmibz2QBf9M222cwgNe7z9sfgBKY6WXXlHeE0PPrSbsPe
-----END CERTIFICATE-----
Generated at Fri Sep 20 03:13:13 2024 by rpki-client on console-fra.rpki-client.org