Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ypjEPaWuOgDY56hmquM880SZZ68.roa
File: ypjEPaWuOgDY56hmquM880SZZ68.roa (raw, json)
Hash identifier: i78C6oB96JnSmJq713KhfVqJs8Mxce2rk/8dEiSz8w4=
Subject key identifier: CA:98:C4:3D:A5:AE:3A:00:D8:E7:A8:66:AA:E3:3C:F3:44:99:67:AF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD322C8B4E3E81DADC18D9B280F582
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ypjEPaWuOgDY56hmquM880SZZ68.roa
Signing time: Tue 02 Jan 2024 10:34:28 +0000
ROA not before: Tue 02 Jan 2024 10:34:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211194
IP address blocks: 2a0e:b107:2430::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:32:2c:8b:4e:3e:81:da:dc:18:d9:b2:80:f5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca98c43da5ae3a00d8e7a866aae33cf3449967af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:3b:72:80:9e:bf:b2:f2:67:0c:12:9c:59:
9a:f3:cd:d8:df:c5:ee:0f:f5:bc:dc:87:3f:87:56:
56:48:4f:41:78:c7:47:da:09:f3:e6:58:36:c5:f7:
83:6f:b2:9d:f7:ed:2a:bf:63:40:9b:cd:6a:df:87:
38:f6:a6:13:6f:bc:26:94:73:2f:7b:57:b4:e3:ef:
92:68:e9:17:34:3d:5a:44:da:d8:53:68:02:bd:5c:
91:ad:01:f9:13:c4:a8:35:08:32:72:80:b4:c9:5a:
d7:19:07:6d:af:08:02:b0:7b:d0:82:fc:53:17:a0:
e8:48:db:f6:43:51:1f:24:28:87:0a:c9:bb:fa:14:
cb:91:a2:23:51:36:68:54:5b:15:e1:24:91:ef:9c:
1e:3d:bd:a1:b6:a5:3e:72:a2:51:c2:a8:e4:95:9e:
68:42:0c:72:bd:8f:c0:48:09:51:7e:80:c4:0a:d6:
b6:69:b5:33:ab:50:7d:c7:92:9d:20:31:08:b1:07:
1c:2e:ed:0b:af:f2:2f:9c:4a:20:89:2c:a3:c8:b6:
0c:6a:b2:af:1f:bd:a3:82:ab:a2:ba:2b:76:07:bd:
4b:e0:05:71:30:f9:ec:0b:92:aa:ac:1d:20:df:a6:
6d:7c:f3:0c:98:55:92:05:9e:0c:6f:a3:ad:72:87:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:98:C4:3D:A5:AE:3A:00:D8:E7:A8:66:AA:E3:3C:F3:44:99:67:AF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ypjEPaWuOgDY56hmquM880SZZ68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2430::/48
Signature Algorithm: sha256WithRSAEncryption
68:cc:52:53:c5:1e:40:b1:29:ff:fd:de:d2:98:85:e2:b9:c9:
ae:e1:84:9e:03:12:9e:1a:1c:42:82:03:9a:ba:3d:0f:52:f6:
89:77:82:dc:96:b2:8f:72:56:4f:bb:28:b7:ca:3a:2f:49:10:
93:a2:3a:6d:91:f6:d1:62:90:71:a4:ea:1e:fc:bc:04:a1:d2:
f4:90:9a:fa:6a:01:1c:ba:c4:63:aa:e1:6a:75:e0:57:33:a1:
df:ae:87:e6:7f:a7:f2:f6:bd:fb:e0:72:c6:39:f4:4d:56:6b:
f6:d5:4c:44:9e:cc:cb:ca:b6:b5:33:56:ca:69:20:bd:6f:08:
d8:38:ff:4f:e2:8e:91:be:11:cc:1c:53:66:d8:78:a2:b4:cf:
12:e6:d3:71:de:4e:72:56:60:98:2f:6e:d8:c2:1c:4d:63:ad:
ac:39:24:b9:02:a7:1c:ab:49:5c:fe:5f:dd:39:84:e4:9c:3d:
14:bf:bc:e2:a7:37:09:c6:57:6a:fa:cc:19:7c:76:96:b0:7d:
19:cb:08:51:df:c0:ce:27:04:fc:66:f8:cb:c5:b3:33:47:59:
f8:10:15:68:66:61:a8:f5:9b:4f:72:8f:23:96:8d:aa:06:c7:
b1:fb:8b:84:9f:5f:1e:6f:f3:92:14:37:b3:10:50:c6:05:b4:
ff:2a:b2:38
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvTIsi04+gdrcGNmygPWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTk4YzQzZGE1YWUzYTAwZDhlN2E4NjZhYWUzM2NmMzQ0OTk2N2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf47coCev7LyZwwSnFma883Y38Xu
D/W83Ic/h1ZWSE9BeMdH2gnz5lg2xfeDb7Kd9+0qv2NAm81q34c49qYTb7wmlHMv
e1e04++SaOkXND1aRNrYU2gCvVyRrQH5E8SoNQgycoC0yVrXGQdtrwgCsHvQgvxT
F6DoSNv2Q1EfJCiHCsm7+hTLkaIjUTZoVFsV4SSR75wePb2htqU+cqJRwqjklZ5o
QgxyvY/ASAlRfoDECta2abUzq1B9x5KdIDEIsQccLu0Lr/IvnEogiSyjyLYMarKv
H72jgquiuit2B71L4AVxMPnsC5KqrB0g36ZtfPMMmFWSBZ4Mb6Otcoe8vQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMqYxD2lrjoA2OeoZqrjPPNEmWevMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEveXBqRVBhV3VPZ0RZNTZobXF1TTg4MFNaWjY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xByQw
MA0GCSqGSIb3DQEBCwUAA4IBAQBozFJTxR5AsSn//d7SmIXiucmu4YSeAxKeGhxC
ggOauj0PUvaJd4LclrKPclZPuyi3yjovSRCTojptkfbRYpBxpOoe/LwEodL0kJr6
agEcusRjquFqdeBXM6Hfrofmf6fy9r374HLGOfRNVmv21UxEnszLyra1M1bKaSC9
bwjYOP9P4o6RvhHMHFNm2HiitM8S5tNx3k5yVmCYL27YwhxNY62sOSS5Aqccq0lc
/l/dOYTknD0Uv7zipzcJxldq+swZfHaWsH0ZywhR38DOJwT8ZvjLxbMzR1n4EBVo
ZmGo9ZtPco8jlo2qBsex+4uEn18eb/OSFDezEFDGBbT/KrI4
-----END CERTIFICATE-----
Generated at Fri May 3 13:17:53 2024 by rpki-client on console-ams.rpki-client.org