Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xmd_d4MSVvED6CmcE-8Y-_0ZLzo.roa
File: xmd_d4MSVvED6CmcE-8Y-_0ZLzo.roa (raw, json)
Hash identifier: 4agPBqtXV2SeFog3X28ITDCgBaVX97EOvI0VtERuHJ0=
Subject key identifier: C6:67:7F:77:83:12:56:F1:03:E8:29:9C:13:EF:18:FB:FD:19:2F:3A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCEDDFB077F25888D1A7D5D0016D52
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xmd_d4MSVvED6CmcE-8Y-_0ZLzo.roa
Signing time: Tue 02 Jan 2024 10:34:11 +0000
ROA not before: Tue 02 Jan 2024 10:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199340
IP address blocks: 2a0e:b107:fa0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ed:df:b0:77:f2:58:88:d1:a7:d5:d0:01:6d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6677f77831256f103e8299c13ef18fbfd192f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0b:c6:22:d4:16:48:ab:88:a9:f2:6f:40:4b:
22:fa:df:63:fa:9d:ac:2b:6e:2a:a9:f7:10:22:79:
d8:9e:a6:86:9b:a3:bd:7f:0b:27:d2:bc:83:1e:c4:
2c:4e:72:28:3a:e0:63:f8:c8:e0:8a:22:5a:dd:70:
04:c3:45:c9:d6:12:c9:c5:66:96:f4:2a:4d:a0:c7:
ac:b9:d9:e7:1b:0f:b6:b7:87:13:13:37:d4:e6:3c:
95:4b:f9:a2:fa:e4:8b:30:1b:19:7b:05:af:5e:35:
eb:c9:b2:be:28:48:9b:1f:a7:78:7b:fe:07:99:2f:
23:38:be:a8:3b:62:8f:7d:57:4f:61:11:5d:12:24:
95:3d:d3:2a:79:c7:9b:c5:10:ac:77:05:fa:d4:d0:
ac:d0:3d:cf:95:c3:17:1c:b9:27:c1:89:49:8c:4b:
79:ac:53:fe:75:99:66:f8:0a:b2:8c:17:00:07:41:
59:82:8f:f7:d6:aa:b8:63:d8:5e:a6:ec:ef:a5:cb:
e5:b0:0b:db:82:1d:ee:88:7f:25:d0:bd:ee:6b:06:
99:8c:c6:62:dc:40:8f:9f:31:98:2f:e1:c6:3d:ac:
57:5e:cf:92:76:fb:05:23:cd:a8:62:69:c3:9d:ac:
dc:4d:a7:f7:6b:5e:cf:ad:b9:36:1e:15:fd:ee:e4:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:67:7F:77:83:12:56:F1:03:E8:29:9C:13:EF:18:FB:FD:19:2F:3A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xmd_d4MSVvED6CmcE-8Y-_0ZLzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:fa0::/44
Signature Algorithm: sha256WithRSAEncryption
22:e5:85:c3:cf:1e:1a:6c:2e:8e:b1:59:8c:70:30:9d:a8:0b:
d3:17:f0:30:29:47:26:a0:d6:61:83:d5:d4:2d:10:df:81:10:
96:0b:45:ea:0c:b3:e7:bf:73:b8:4b:e3:5e:f1:12:bc:fb:39:
03:88:f6:3a:8c:01:50:57:a0:b8:65:10:f6:1d:1b:fe:dd:19:
3d:1c:95:fa:15:5b:92:37:85:09:fe:47:34:b9:e6:f7:aa:f8:
b8:28:33:58:d4:35:71:9c:9d:aa:61:a1:81:ac:9e:10:ab:0c:
e3:69:54:09:0d:cc:05:91:b7:71:f1:ba:80:d5:37:ac:c3:0c:
d3:e4:18:18:cc:e0:c0:f9:9a:cc:1c:a2:9a:b4:45:db:40:9b:
31:7e:d8:57:5f:ea:45:96:91:0e:69:22:b6:37:05:dc:dc:03:
ea:89:d8:a9:cf:ea:01:9b:8c:86:4c:8e:54:68:da:a7:62:d9:
19:04:54:54:fa:75:3a:37:03:31:d8:48:b8:53:0a:f7:f7:f8:
85:51:9d:9c:0b:f6:67:31:9c:f4:41:b3:38:b2:15:24:a9:bf:
8a:14:61:ef:c4:e0:ee:73:1e:14:9b:aa:32:f2:1d:dc:98:72:
20:47:f9:53:31:5d:2d:74:3c:47:50:0c:f3:c7:25:40:88:45:
4c:c1:f2:89
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvO3fsHfyWIjRp9XQAW1SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjY3N2Y3NzgzMTI1NmYxMDNlODI5OWMxM2VmMThmYmZkMTkyZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAvGItQWSKuIqfJvQEsi+t9j+p2s
K24qqfcQInnYnqaGm6O9fwsn0ryDHsQsTnIoOuBj+MjgiiJa3XAEw0XJ1hLJxWaW
9CpNoMesudnnGw+2t4cTEzfU5jyVS/mi+uSLMBsZewWvXjXrybK+KEibH6d4e/4H
mS8jOL6oO2KPfVdPYRFdEiSVPdMqecebxRCsdwX61NCs0D3PlcMXHLknwYlJjEt5
rFP+dZlm+AqyjBcAB0FZgo/31qq4Y9hepuzvpcvlsAvbgh3uiH8l0L3uawaZjMZi
3ECPnzGYL+HGPaxXXs+SdvsFI82oYmnDnazcTaf3a17Prbk2HhX97uRmPwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMZnf3eDElbxA+gpnBPvGPv9GS86MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEveG1kX2Q0TVNWdkVENkNtY0UtOFktXzBaTHpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBw+g
MA0GCSqGSIb3DQEBCwUAA4IBAQAi5YXDzx4abC6OsVmMcDCdqAvTF/AwKUcmoNZh
g9XULRDfgRCWC0XqDLPnv3O4S+Ne8RK8+zkDiPY6jAFQV6C4ZRD2HRv+3Rk9HJX6
FVuSN4UJ/kc0ueb3qvi4KDNY1DVxnJ2qYaGBrJ4QqwzjaVQJDcwFkbdx8bqA1Tes
wwzT5BgYzODA+ZrMHKKatEXbQJsxfthXX+pFlpEOaSK2NwXc3APqidipz+oBm4yG
TI5UaNqnYtkZBFRU+nU6NwMx2Ei4Uwr39/iFUZ2cC/ZnMZz0QbM4shUkqb+KFGHv
xODucx4Um6oy8h3cmHIgR/lTMV0tdDxHUAzzxyVAiEVMwfKJ
-----END CERTIFICATE-----
Generated at Fri May 3 12:39:07 2024 by rpki-client on console-fra.rpki-client.org