Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/Rxsp43mqExsYzcrt4Q_XLl9A3gw.roa
File: Rxsp43mqExsYzcrt4Q_XLl9A3gw.roa (raw, json)
Hash identifier: TLxEeiMzikH1YkwLsg2gzkImCJ9aaUSjBt4rAxwGzK8=
Subject key identifier: 47:1B:29:E3:79:AA:13:1B:18:CD:CA:ED:E1:0F:D7:2E:5F:40:DE:0C
Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial: 0192D477D87D53DF1DF63B27619CFBA5DFBC
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/Rxsp43mqExsYzcrt4Q_XLl9A3gw.roa
Signing time: Mon 28 Oct 2024 18:51:16 +0000
ROA not before: Mon 28 Oct 2024 18:51:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 2a01:e100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d4:77:d8:7d:53:df:1d:f6:3b:27:61:9c:fb:a5:df:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Validity
Not Before: Oct 28 18:51:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=471b29e379aa131b18cdcaede10fd72e5f40de0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:43:d1:7d:26:20:5e:ae:04:07:e8:d8:93:
27:a5:90:a2:69:cc:b5:39:db:1d:84:fe:8b:57:79:
20:95:ae:ea:9c:a5:64:4a:69:8e:90:d3:22:51:2c:
fb:56:9a:78:3f:81:5d:43:b2:9d:67:8d:e2:b0:93:
c9:97:86:9f:2d:8f:a1:a9:c2:b9:be:2a:bd:f6:80:
a9:40:95:98:96:73:e8:4c:f1:60:4f:3f:c0:44:72:
61:bc:d2:1f:54:f2:4a:65:bd:36:45:35:1c:ce:8a:
2f:98:05:d3:54:ec:b9:3f:3f:dd:4e:56:56:5f:b1:
0e:2a:ff:5d:e2:b8:f2:7f:3d:5b:c4:9c:13:d6:86:
9a:d6:df:ab:ff:76:8c:e8:f1:74:cd:69:0a:2b:8c:
b4:f8:b0:15:b8:23:dc:c9:04:c1:06:d3:69:7b:1a:
d1:94:ef:cf:df:85:67:25:66:27:10:e6:8c:7d:ae:
69:ab:05:3d:b5:e5:67:57:bb:3f:52:77:8c:cd:ec:
25:ab:8c:09:7e:07:13:63:d2:a1:bb:d7:5d:a4:4f:
43:7c:d2:d0:2b:d1:a3:de:02:47:db:c9:f9:db:00:
c1:e1:32:e9:36:35:3e:68:8d:49:b8:e2:dc:98:63:
76:5d:2e:22:8b:da:91:2e:89:3b:40:84:e4:0f:78:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1B:29:E3:79:AA:13:1B:18:CD:CA:ED:E1:0F:D7:2E:5F:40:DE:0C
X509v3 Authority Key Identifier:
keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/Rxsp43mqExsYzcrt4Q_XLl9A3gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e100::/29
Signature Algorithm: sha256WithRSAEncryption
2a:2d:81:0e:78:be:02:5a:4a:3f:1d:fb:6f:56:df:45:9e:5e:
8c:66:7e:6a:4e:91:c9:dc:e5:7e:98:dd:1b:94:ae:75:3b:7c:
fd:21:14:bb:cc:08:15:ee:9c:83:96:68:3b:9d:0b:54:8c:bf:
3b:c9:75:70:ea:f0:aa:00:af:48:82:ad:2b:31:e9:9d:19:87:
ed:b3:ab:29:ec:0a:9b:03:84:cd:7a:76:38:95:25:4c:e1:3d:
17:6a:22:21:6b:d6:91:10:33:c3:2c:70:95:2a:26:c2:fd:04:
79:96:ad:f6:ce:e4:85:f0:cb:be:1b:72:fc:8e:2e:a5:2b:8b:
f8:f8:fd:75:85:17:6c:f8:b6:6e:68:84:ac:3a:22:6e:cf:53:
a5:d6:d1:97:7f:64:ab:b8:fe:64:b1:eb:50:be:a1:07:da:59:
72:6a:ba:d2:c7:fd:7a:41:3a:7f:34:ce:70:a0:b2:0c:09:2f:
e6:4f:38:1e:03:d3:57:b4:03:b5:83:26:50:47:9f:48:28:8a:
46:05:de:fa:6c:79:6f:f4:5b:ef:4d:01:c9:b5:14:80:00:ca:
37:dd:42:b3:8e:a8:94:33:7c:f7:7f:a6:cf:21:a8:c0:19:e8:
8e:4d:78:cc:ce:f7:d3:cc:4d:aa:7b:24:db:c4:99:7f:f1:a1:
c6:07:54:e6
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZLUd9h9U98d9jsnYZz7pd+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZDE4YjMxMmUzNTNlNzhmYThlZTVmODBkMzZmNzQxY2Rj
ZGUzYWEwHhcNMjQxMDI4MTg1MTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzFiMjllMzc5YWExMzFiMThjZGNhZWRlMTBmZDcyZTVmNDBkZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznZD0X0mIF6uBAfo2JMnpZCiacy1
OdsdhP6LV3kgla7qnKVkSmmOkNMiUSz7Vpp4P4FdQ7KdZ43isJPJl4afLY+hqcK5
viq99oCpQJWYlnPoTPFgTz/ARHJhvNIfVPJKZb02RTUczoovmAXTVOy5Pz/dTlZW
X7EOKv9d4rjyfz1bxJwT1oaa1t+r/3aM6PF0zWkKK4y0+LAVuCPcyQTBBtNpexrR
lO/P34VnJWYnEOaMfa5pqwU9teVnV7s/UneMzewlq4wJfgcTY9Khu9ddpE9DfNLQ
K9Gj3gJH28n52wDB4TLpNjU+aI1JuOLcmGN2XS4ii9qRLok7QITkD3iBlQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEcbKeN5qhMbGM3K7eEP1y5fQN4MMB8GA1UdIwQY
MBaAFGLRizEuNT54+o7l+A0290HNzeOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zYjkyMTUtOTgwNy00ODFlLTlhMWUt
NzMyMjcyMDIzZWMyLzEvUnhzcDQzbXFFeHNZemNydDRRX1hMbDlBM2d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8zYjkyMTUtOTgwNy00ODFlLTlhMWUtNzMyMjcyMDIzZWMy
LzEvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgHhADAN
BgkqhkiG9w0BAQsFAAOCAQEAKi2BDni+AlpKPx37b1bfRZ5ejGZ+ak6Rydzlfpjd
G5SudTt8/SEUu8wIFe6cg5ZoO50LVIy/O8l1cOrwqgCvSIKtKzHpnRmH7bOrKewK
mwOEzXp2OJUlTOE9F2oiIWvWkRAzwyxwlSomwv0EeZat9s7khfDLvhty/I4upSuL
+Pj9dYUXbPi2bmiErDoibs9TpdbRl39kq7j+ZLHrUL6hB9pZcmq60sf9ekE6fzTO
cKCyDAkv5k84HgPTV7QDtYMmUEefSCiKRgXe+mx5b/Rb700BybUUgADKN91Cs46o
lDN893+mzyGowBnojk14zM7308xNqnsk28SZf/GhxgdU5g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:38 2024 by rpki-client on console-fra.rpki-client.org