Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/Nkg9fR9cq9D8NeYjLZ_cvC5JZn0.roa
File: Nkg9fR9cq9D8NeYjLZ_cvC5JZn0.roa (raw, json)
Hash identifier: tcRLTSm3tAVMCLzcnBQmM4do8wvCotMHFKbUzDR2yNo=
Subject key identifier: 36:48:3D:7D:1F:5C:AB:D0:FC:35:E6:23:2D:9F:DC:BC:2E:49:66:7D
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 018CC5DBE2A247C14B66BD458C815EFB151C
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/Nkg9fR9cq9D8NeYjLZ_cvC5JZn0.roa
Signing time: Mon 01 Jan 2024 16:29:31 +0000
ROA not before: Mon 01 Jan 2024 16:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197962
IP address blocks: 2a10:503::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e2:a2:47:c1:4b:66:bd:45:8c:81:5e:fb:15:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Jan 1 16:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36483d7d1f5cabd0fc35e6232d9fdcbc2e49667d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:88:4a:33:d9:75:a9:df:28:22:21:d2:f5:
b8:6e:ac:ae:7f:26:04:cc:07:60:89:5f:5b:ec:73:
a6:fa:79:c5:08:81:a5:8f:c0:9f:e4:27:52:d2:01:
cb:d3:02:19:2c:0a:4e:ca:d2:0e:b8:d4:61:7c:22:
ca:52:d2:8f:1d:0a:9c:71:9e:4c:e1:f0:cf:d7:6d:
a8:be:86:6c:a4:4b:cc:21:1b:7d:ce:ab:8e:f9:91:
19:77:ea:96:20:8f:13:6d:17:95:28:04:6c:30:b7:
48:e0:1f:b3:2c:45:97:04:e9:0c:bd:37:42:f5:6f:
2b:6d:51:68:81:fd:36:c2:13:5a:56:c2:60:3d:0d:
32:4b:8f:b7:2f:ec:3f:7c:13:c1:1a:bd:f4:b0:5e:
a0:02:8e:75:07:24:76:74:f9:c2:28:7e:ad:49:3f:
f2:0d:48:34:31:51:94:b3:be:9c:0e:bd:5e:0e:e4:
e3:c0:99:21:ea:a9:1f:cf:6f:cf:6f:30:2d:e7:a0:
60:ee:4f:2c:82:04:ae:c4:dd:43:81:83:a3:fb:95:
cb:c7:52:67:9c:ca:3a:6d:a2:8a:14:c9:21:27:77:
4b:b7:f5:44:ad:8e:a5:67:2f:d1:b0:ee:cd:a5:9e:
4e:c4:df:4b:51:f6:8b:5a:d2:93:72:97:dd:70:26:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:48:3D:7D:1F:5C:AB:D0:FC:35:E6:23:2D:9F:DC:BC:2E:49:66:7D
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/Nkg9fR9cq9D8NeYjLZ_cvC5JZn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:503::/32
Signature Algorithm: sha256WithRSAEncryption
9e:b3:aa:79:da:b1:1c:32:fa:4d:2f:e1:2b:ff:40:29:8d:2d:
8b:2e:bd:3c:ce:23:12:8b:49:00:96:62:d3:b1:6e:a9:f5:91:
1b:6e:df:c7:8c:0c:3b:32:a0:89:ec:7f:fe:ec:a2:b3:cc:36:
e7:d9:d8:5b:ba:49:2c:18:f3:16:77:42:9f:1c:40:49:5d:09:
8e:7e:c2:29:fa:d1:3e:8c:7d:44:eb:2d:31:fc:78:ed:57:8a:
b7:d0:9d:95:ae:e7:34:f6:e9:f2:d7:c2:c9:49:30:28:a0:7f:
54:71:26:07:c8:b7:6e:2a:aa:51:c8:50:19:22:bd:50:5d:8a:
0f:12:62:0d:1c:01:ce:b8:88:43:80:b6:ba:16:65:3b:f8:c4:
34:80:36:03:c2:b1:1c:f3:20:9a:8b:ec:12:ec:07:66:53:d9:
89:45:c8:0c:b9:1a:fc:df:7c:38:44:66:0c:3c:83:be:6f:fc:
c5:b2:80:8f:0a:98:1f:40:7d:e7:2a:97:f6:7f:10:60:61:5e:
f2:e9:63:43:e8:d4:97:c2:df:fd:ca:38:84:3d:e5:5a:42:82:
28:2d:5e:a1:e6:00:fa:e8:b0:f6:94:a6:ed:10:33:90:f8:c3:
71:4c:8f:a5:5c:36:60:42:05:e6:23:74:c4:db:80:94:ac:06:
d3:9a:68:5c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzF2+KiR8FLZr1FjIFe+xUcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzN2I0ODQ0OWJhMWNhZTE1YmRlMmMyZjA4NmQ5NDIxOGUw
NzIwYmIwHhcNMjQwMTAxMTYyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjQ4M2Q3ZDFmNWNhYmQwZmMzNWU2MjMyZDlmZGNiYzJlNDk2NjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1uISjPZdanfKCIh0vW4bqyufyYE
zAdgiV9b7HOm+nnFCIGlj8Cf5CdS0gHL0wIZLApOytIOuNRhfCLKUtKPHQqccZ5M
4fDP122ovoZspEvMIRt9zquO+ZEZd+qWII8TbReVKARsMLdI4B+zLEWXBOkMvTdC
9W8rbVFogf02whNaVsJgPQ0yS4+3L+w/fBPBGr30sF6gAo51ByR2dPnCKH6tST/y
DUg0MVGUs76cDr1eDuTjwJkh6qkfz2/PbzAt56Bg7k8sggSuxN1DgYOj+5XLx1Jn
nMo6baKKFMkhJ3dLt/VErY6lZy/RsO7NpZ5OxN9LUfaLWtKTcpfdcCZPrwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDZIPX0fXKvQ/DXmIy2f3LwuSWZ9MB8GA1UdIwQY
MBaAFAN7SESbocrhW94sLwhtlCGOByC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYt
NzQwM2UxMzY3NWFiLzEvTmtnOWZSOWNxOUQ4TmVZakxaX2N2QzVKWm4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYtNzQwM2UxMzY3NWFi
LzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhAFAzAN
BgkqhkiG9w0BAQsFAAOCAQEAnrOqedqxHDL6TS/hK/9AKY0tiy69PM4jEotJAJZi
07FuqfWRG27fx4wMOzKgiex//uyis8w259nYW7pJLBjzFndCnxxASV0Jjn7CKfrR
Pox9ROstMfx47VeKt9Cdla7nNPbp8tfCyUkwKKB/VHEmB8i3biqqUchQGSK9UF2K
DxJiDRwBzriIQ4C2uhZlO/jENIA2A8KxHPMgmovsEuwHZlPZiUXIDLka/N98OERm
DDyDvm/8xbKAjwqYH0B95yqX9n8QYGFe8uljQ+jUl8Lf/co4hD3lWkKCKC1eoeYA
+uiw9pSm7RAzkPjDcUyPpVw2YEIF5iN0xNuAlKwG05poXA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:04 2024 by rpki-client on console-fra.rpki-client.org