Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/63ong1PXxAsMuI9LsKO02cXfqFc.roa
File: 63ong1PXxAsMuI9LsKO02cXfqFc.roa (raw, json)
Hash identifier: P5P7Hyf4vETRSjxCsbyqxr5/eBxx5HBDKDmAeJZQZbA=
Subject key identifier: EB:7A:27:83:53:D7:C4:0B:0C:B8:8F:4B:B0:A3:B4:D9:C5:DF:A8:57
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 018CC4930CAB5F191B28062937CEA341BB80
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/63ong1PXxAsMuI9LsKO02cXfqFc.roa
Signing time: Mon 01 Jan 2024 10:30:20 +0000
ROA not before: Mon 01 Jan 2024 10:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206159
IP address blocks: 2a01:190:1500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0c:ab:5f:19:1b:28:06:29:37:ce:a3:41:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 10:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb7a278353d7c40b0cb88f4bb0a3b4d9c5dfa857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d8:37:eb:e5:80:c6:c9:18:8e:a9:98:c5:d9:
ca:e1:da:9f:54:a9:ef:46:35:61:01:7f:1a:51:0f:
62:1a:b9:ab:32:69:b9:e0:71:36:31:83:0f:a4:5a:
bd:4d:df:ee:2f:04:44:d2:ad:18:ca:7d:f1:12:2c:
07:c7:01:b6:14:0a:38:d5:1b:c9:f7:17:0c:ee:2a:
36:6c:f9:19:89:16:b5:8e:43:75:ee:09:c1:fd:37:
0e:15:9a:8a:d0:c9:ee:ec:6c:86:c1:27:c6:a3:11:
96:d0:6d:1a:89:1b:50:26:a4:9b:4b:4d:ac:4b:0d:
6a:95:61:37:f8:ae:75:3a:b9:0c:19:34:d2:46:9b:
c0:11:77:7c:b0:d9:b5:a2:5a:8d:31:11:4e:7f:99:
3b:32:56:db:06:95:c9:58:b9:d1:fd:4f:f5:b6:35:
4d:f1:ca:ed:b3:3d:c9:61:5e:d4:3e:29:97:4b:b3:
a3:c2:4b:f0:94:2a:e9:10:90:75:fd:dd:27:3b:0a:
bf:c4:b6:5c:7e:12:d7:c1:48:12:66:0a:9a:7a:86:
af:14:82:19:f1:58:9a:cf:1f:1b:75:dd:fb:a8:6a:
a4:be:36:84:8d:66:d1:44:b6:80:17:28:14:f0:cb:
4b:8e:79:9d:43:56:57:fb:ee:59:ad:4c:9c:32:ea:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7A:27:83:53:D7:C4:0B:0C:B8:8F:4B:B0:A3:B4:D9:C5:DF:A8:57
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/63ong1PXxAsMuI9LsKO02cXfqFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:1500::/48
Signature Algorithm: sha256WithRSAEncryption
c3:29:9a:96:f9:5f:94:2a:78:56:12:77:4b:d4:90:b3:b9:82:
87:09:e7:d3:4c:ec:cc:21:eb:33:61:09:43:36:50:32:17:a7:
54:11:d4:20:7a:2f:4e:a5:c6:33:00:3c:08:fa:11:b9:a5:4c:
fd:f2:4d:76:95:bf:49:e9:c0:03:dc:06:08:55:d3:92:c4:fa:
26:5d:45:89:be:35:33:d7:9c:cb:02:76:02:48:60:0b:8a:61:
59:85:dc:b1:a3:a2:6b:72:a3:cc:6d:a5:80:c3:f1:76:fc:a4:
14:54:7f:73:1d:40:14:70:93:7a:f6:d4:fe:7f:5b:b5:55:c0:
e9:97:3c:ad:61:d8:00:4e:c3:a0:99:92:01:96:2e:44:ed:31:
ce:16:20:4f:60:9e:21:b7:ed:d6:6f:db:a6:10:93:fb:55:eb:
59:ab:6e:d8:d8:62:e7:f3:37:bc:b2:b5:d9:1b:7b:cb:d6:43:
ec:d2:83:71:98:87:a6:b3:08:b7:cb:1d:ba:b4:f0:75:ec:88:
69:38:ad:7f:13:45:99:38:cf:b2:d1:33:8e:82:1b:90:6d:92:
7f:7c:4d:48:ee:ef:ac:05:62:c7:0d:7d:a9:d8:71:2e:1f:5a:
74:13:37:e7:08:8e:91:3c:fe:58:25:08:f1:be:58:e0:4e:e6:
ef:a8:93:01
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzEkwyrXxkbKAYpN86jQbuAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw
YjQ1MDYwHhcNMjQwMTAxMTAzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjdhMjc4MzUzZDdjNDBiMGNiODhmNGJiMGEzYjRkOWM1ZGZhODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdg36+WAxskYjqmYxdnK4dqfVKnv
RjVhAX8aUQ9iGrmrMmm54HE2MYMPpFq9Td/uLwRE0q0Yyn3xEiwHxwG2FAo41RvJ
9xcM7io2bPkZiRa1jkN17gnB/TcOFZqK0Mnu7GyGwSfGoxGW0G0aiRtQJqSbS02s
Sw1qlWE3+K51OrkMGTTSRpvAEXd8sNm1olqNMRFOf5k7MlbbBpXJWLnR/U/1tjVN
8crtsz3JYV7UPimXS7OjwkvwlCrpEJB1/d0nOwq/xLZcfhLXwUgSZgqaeoavFIIZ
8Viazx8bdd37qGqkvjaEjWbRRLaAFygU8MtLjnmdQ1ZX++5ZrUycMupuXwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOt6J4NT18QLDLiPS7CjtNnF36hXMB8GA1UdIwQY
MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt
OGVlYjc1N2NmNTQ1LzEvNjNvbmcxUFh4QXNNdUk5THNLTzAyY1hmcUZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1
LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEBkBUA
MA0GCSqGSIb3DQEBCwUAA4IBAQDDKZqW+V+UKnhWEndL1JCzuYKHCefTTOzMIesz
YQlDNlAyF6dUEdQgei9OpcYzADwI+hG5pUz98k12lb9J6cAD3AYIVdOSxPomXUWJ
vjUz15zLAnYCSGALimFZhdyxo6JrcqPMbaWAw/F2/KQUVH9zHUAUcJN69tT+f1u1
VcDplzytYdgATsOgmZIBli5E7THOFiBPYJ4ht+3Wb9umEJP7VetZq27Y2GLn8ze8
srXZG3vL1kPs0oNxmIemswi3yx26tPB17IhpOK1/E0WZOM+y0TOOghuQbZJ/fE1I
7u+sBWLHDX2p2HEuH1p0EzfnCI6RPP5YJQjxvljgTubvqJMB
-----END CERTIFICATE-----
Generated at Sat May 18 17:38:20 2024 by rpki-client on console-fra.rpki-client.org