Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/251OoSPydsMj5VB0uNEAPS3Lfjw.roa
File: 251OoSPydsMj5VB0uNEAPS3Lfjw.roa (raw, json)
Hash identifier: oNa5NqWT3U+ey/USzLEN0HCRzPE26SREbn/rWoyC3Y0=
Subject key identifier: DB:9D:4E:A1:23:F2:76:C3:23:E5:50:74:B8:D1:00:3D:2D:CB:7E:3C
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 018CC9BC72B88F11D55229C9CAECFDDE8CE7
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/251OoSPydsMj5VB0uNEAPS3Lfjw.roa
Signing time: Tue 02 Jan 2024 10:33:39 +0000
ROA not before: Tue 02 Jan 2024 10:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212001
IP address blocks: 2a0d:f407:1023::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:72:b8:8f:11:d5:52:29:c9:ca:ec:fd:de:8c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db9d4ea123f276c323e55074b8d1003d2dcb7e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:87:3e:b1:28:90:76:ae:a4:a0:a0:9b:c8:
81:74:5b:c8:cd:d7:66:76:cd:d8:d0:2e:14:8f:af:
11:c9:1e:af:a3:97:0e:87:8f:21:1a:8b:8a:39:9e:
62:e3:8b:79:3b:28:da:d1:b5:c3:7c:3d:2f:f5:3e:
a6:1f:a0:37:ab:a6:e9:db:79:2a:b6:77:72:93:90:
c9:ba:63:5d:1c:f4:b6:bf:87:fe:e2:d7:4b:d4:df:
07:3d:9d:b1:6c:ee:ac:8c:91:95:f0:b0:a5:25:76:
04:01:56:a3:43:52:30:eb:d8:ed:53:1d:24:b8:99:
97:2c:ee:57:ed:a8:48:20:8e:cc:ef:22:ee:a7:64:
86:6b:ab:55:34:e7:98:d9:fa:60:7c:ed:22:bb:5d:
7b:c1:c0:ff:f7:84:c0:62:51:0e:21:45:f3:38:e1:
54:d7:1d:ca:cd:a9:67:32:cc:a8:9f:37:26:c4:66:
4e:a7:ea:82:85:d1:db:38:30:48:3e:a1:be:1f:ed:
56:ef:e0:25:53:3d:8e:3d:a2:47:cf:bb:64:1a:57:
71:41:ab:14:86:bf:f4:fd:de:b0:d6:60:32:a3:67:
8b:2f:92:9e:37:31:17:86:c7:41:52:92:4c:b5:98:
2c:1b:67:4b:47:db:79:ad:19:f0:98:37:e1:83:20:
e8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9D:4E:A1:23:F2:76:C3:23:E5:50:74:B8:D1:00:3D:2D:CB:7E:3C
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/251OoSPydsMj5VB0uNEAPS3Lfjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f407:1023::/48
Signature Algorithm: sha256WithRSAEncryption
00:96:62:28:8a:18:c3:e8:67:15:07:66:b3:22:b9:8c:34:c2:
5f:f7:42:28:db:f5:da:85:24:2c:d1:17:18:67:02:7d:b6:23:
51:fa:be:74:57:36:74:81:71:83:ec:4a:d7:25:61:8d:86:c1:
c0:cb:b5:96:95:01:8c:fe:34:ce:f9:c3:f9:35:dc:f5:6a:97:
46:39:01:ae:3f:c3:15:14:cd:03:d8:a2:31:40:ec:08:82:c4:
07:28:0b:a4:ed:db:5a:f9:ac:ca:8e:81:52:9c:73:e6:85:96:
d2:34:ab:d7:88:41:fb:fd:f9:c8:76:55:65:94:97:58:92:96:
89:5c:7f:c7:61:1b:be:e9:52:6e:83:81:46:c9:22:a1:a4:ed:
c2:44:c4:cc:3a:5c:f7:52:8a:28:ac:df:35:10:dd:ea:59:83:
48:b8:6a:44:a8:ab:d0:f9:6b:c8:ee:75:ce:93:95:bd:0d:10:
c0:40:bc:ee:33:df:9a:fd:eb:bb:bb:97:a4:e4:f3:e6:b2:a3:
95:1d:95:57:38:0a:73:cb:b8:75:2f:b4:fb:1b:66:7a:e6:e7:
db:0c:a1:82:83:c4:f0:e8:94:85:b4:37:50:3b:a6:34:7d:31:
cb:43:85:3e:65:7f:31:a4:51:3e:71:1f:3d:74:57:47:65:94:
fe:b2:0e:aa
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvHK4jxHVUinJyuz93oznMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy
NTFkYWQwHhcNMjQwMTAyMTAzMzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjlkNGVhMTIzZjI3NmMzMjNlNTUwNzRiOGQxMDAzZDJkY2I3ZTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJWHPrEokHaupKCgm8iBdFvIzddm
ds3Y0C4Uj68RyR6vo5cOh48hGouKOZ5i44t5Oyja0bXDfD0v9T6mH6A3q6bp23kq
tndyk5DJumNdHPS2v4f+4tdL1N8HPZ2xbO6sjJGV8LClJXYEAVajQ1Iw69jtUx0k
uJmXLO5X7ahIII7M7yLup2SGa6tVNOeY2fpgfO0iu117wcD/94TAYlEOIUXzOOFU
1x3KzalnMsyonzcmxGZOp+qChdHbODBIPqG+H+1W7+AlUz2OPaJHz7tkGldxQasU
hr/0/d6w1mAyo2eLL5KeNzEXhsdBUpJMtZgsG2dLR9t5rRnwmDfhgyDopwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNudTqEj8nbDI+VQdLjRAD0ty348MB8GA1UdIwQY
MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt
YjdjNTc4Yjc0ZTM1LzEvMjUxT29TUHlkc01qNVZCMHVORUFQUzNMZmp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1
LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg30BxAj
MA0GCSqGSIb3DQEBCwUAA4IBAQAAlmIoihjD6GcVB2azIrmMNMJf90Io2/XahSQs
0RcYZwJ9tiNR+r50VzZ0gXGD7ErXJWGNhsHAy7WWlQGM/jTO+cP5Ndz1apdGOQGu
P8MVFM0D2KIxQOwIgsQHKAuk7dta+azKjoFSnHPmhZbSNKvXiEH7/fnIdlVllJdY
kpaJXH/HYRu+6VJug4FGySKhpO3CRMTMOlz3UooorN81EN3qWYNIuGpEqKvQ+WvI
7nXOk5W9DRDAQLzuM9+a/eu7u5ek5PPmsqOVHZVXOApzy7h1L7T7G2Z65ufbDKGC
g8Tw6JSFtDdQO6Y0fTHLQ4U+ZX8xpFE+cR89dFdHZZT+sg6q
-----END CERTIFICATE-----
Generated at Sat Jun 1 09:35:41 2024 by rpki-client on console-ams.rpki-client.org