Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/V3aXJfy4nl9BoKCvSeVmIdXN0AQ.roa
File: V3aXJfy4nl9BoKCvSeVmIdXN0AQ.roa (raw, json)
Hash identifier: WXGPlLtSgyITjzWk482oeNu565ehk56lxQOjBKXVjJI=
Subject key identifier: 57:76:97:25:FC:B8:9E:5F:41:A0:A0:AF:49:E5:66:21:D5:CD:D0:04
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 018CC794A172627DBF175305F03A4C3DE557
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/V3aXJfy4nl9BoKCvSeVmIdXN0AQ.roa
Signing time: Tue 02 Jan 2024 00:30:55 +0000
ROA not before: Tue 02 Jan 2024 00:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5550
IP address blocks: 153.19.0.0/16 maxlen: 16
2001:4070::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:a1:72:62:7d:bf:17:53:05:f0:3a:4c:3d:e5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Jan 2 00:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57769725fcb89e5f41a0a0af49e56621d5cdd004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:56:95:7b:0d:e2:10:c5:c3:f6:19:7a:0c:dc:
02:76:a2:43:b6:e6:27:1f:33:d9:53:84:bd:b5:3d:
44:86:17:ef:58:99:26:6d:98:e1:b7:98:27:09:83:
74:44:2d:51:3b:e6:12:6b:2a:33:50:1f:8f:07:05:
85:cc:5b:09:81:51:6f:c2:ab:66:f7:f9:5c:64:3c:
c6:50:23:fd:6c:7e:5e:9d:f1:2f:67:69:3c:cf:06:
87:2d:8a:ef:cf:14:f7:5a:3f:e7:01:cc:14:3f:85:
16:ca:75:83:b9:5d:d4:aa:d4:f4:64:b9:53:7c:89:
54:30:04:a3:8d:fe:0f:21:44:79:75:2e:ec:0e:4f:
a6:04:59:8f:4f:31:37:ad:22:91:2c:ff:9d:4f:7f:
27:97:79:94:61:ee:bd:30:a3:d6:f8:41:01:61:83:
da:06:97:99:2c:8d:43:3e:f6:56:43:88:05:21:fb:
24:1e:8d:6f:db:e7:34:81:81:3e:d3:81:71:b9:6d:
b7:b9:cc:8c:a6:0c:86:0c:c7:9f:55:ab:79:1f:2b:
b5:29:a8:a4:38:d8:9e:2b:d2:24:1f:2f:0a:42:db:
d7:9d:60:07:be:d9:2c:73:91:4d:ab:6a:52:ee:22:
9b:29:b6:ca:1b:0a:5b:d0:8d:6f:02:ee:af:e7:19:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:76:97:25:FC:B8:9E:5F:41:A0:A0:AF:49:E5:66:21:D5:CD:D0:04
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/V3aXJfy4nl9BoKCvSeVmIdXN0AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.19.0.0/16
IPv6:
2001:4070::/33
Signature Algorithm: sha256WithRSAEncryption
5e:34:54:da:10:3f:ca:d9:53:0b:d6:08:f1:ba:db:3e:13:ea:
81:b1:42:8a:66:c8:7f:bb:65:85:b4:e2:31:a5:b6:b6:d9:38:
ce:d6:ea:09:c1:72:70:4e:70:51:2f:7f:34:ac:18:1d:8c:8e:
25:5a:d1:e0:98:cf:a0:3a:2c:c2:d2:6a:47:21:0c:ef:ff:ce:
2a:36:6a:1a:b6:b7:1e:e7:47:6e:23:d7:60:41:ec:27:25:9a:
db:7e:d8:01:48:db:6e:c2:15:72:71:d4:ce:97:a4:37:2b:dd:
b8:91:c2:b3:1a:f6:0b:54:6d:fa:c7:35:93:d4:b0:6e:7e:48:
39:cb:db:53:0c:e8:24:40:ca:ec:95:9e:38:12:9f:21:81:5f:
da:6a:23:e4:6b:f2:86:71:ba:5b:f5:6a:ae:1c:9a:8d:15:bb:
ca:a3:e3:75:5e:db:1f:ff:b6:6e:be:7a:d2:71:71:b7:e3:67:
ba:d5:8d:28:7a:0c:b6:f3:b2:6f:bb:2e:a0:ed:1c:8a:f7:44:
a6:3c:c7:ad:97:fc:f1:46:4e:c6:fd:39:0e:a6:17:09:a3:79:
8b:36:6e:d4:8f:61:c5:90:26:d2:3d:5f:21:cb:ce:21:04:bd:
17:94:3c:c2:37:08:f7:ce:db:c3:6f:c3:bc:03:1b:c0:80:c0:
32:d4:30:ad
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzHlKFyYn2/F1MF8DpMPeVXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViN2JiYmZlZjU5NTA5ZTcyNjM5ODZmNzgwNTg5YWIxZTc5
OTg0MjMwHhcNMjQwMTAyMDAzMDU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Nzc2OTcyNWZjYjg5ZTVmNDFhMGEwYWY0OWU1NjYyMWQ1Y2RkMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFaVew3iEMXD9hl6DNwCdqJDtuYn
HzPZU4S9tT1EhhfvWJkmbZjht5gnCYN0RC1RO+YSayozUB+PBwWFzFsJgVFvwqtm
9/lcZDzGUCP9bH5enfEvZ2k8zwaHLYrvzxT3Wj/nAcwUP4UWynWDuV3UqtT0ZLlT
fIlUMASjjf4PIUR5dS7sDk+mBFmPTzE3rSKRLP+dT38nl3mUYe69MKPW+EEBYYPa
BpeZLI1DPvZWQ4gFIfskHo1v2+c0gYE+04FxuW23ucyMpgyGDMefVat5Hyu1Kaik
ONieK9IkHy8KQtvXnWAHvtksc5FNq2pS7iKbKbbKGwpb0I1vAu6v5xl+QwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFd2lyX8uJ5fQaCgr0nlZiHVzdAEMB8GA1UdIwQY
MBaAFOt7u/71lQnnJjmG94BYmrHnmYQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjN1N192V1ZDZWNtT1liM2dGaWFzZWVaaENNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzI5NWYtMThjYi00YmZlLTkyZTMt
NGFiNTMzMWNkOTM1LzEvVjNhWEpmeTRubDlCb0tDdlNlVm1JZFhOMEFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzI5NWYtMThjYi00YmZlLTkyZTMtNGFiNTMzMWNkOTM1
LzEvNjN1N192V1ZDZWNtT1liM2dGaWFzZWVaaENNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTALBAIAATAFAwMAmRMwDgQC
AAIwCAMGByABQHAAMA0GCSqGSIb3DQEBCwUAA4IBAQBeNFTaED/K2VML1gjxuts+
E+qBsUKKZsh/u2WFtOIxpba22TjO1uoJwXJwTnBRL380rBgdjI4lWtHgmM+gOizC
0mpHIQzv/84qNmoatrce50duI9dgQewnJZrbftgBSNtuwhVycdTOl6Q3K924kcKz
GvYLVG36xzWT1LBufkg5y9tTDOgkQMrslZ44Ep8hgV/aaiPka/KGcbpb9WquHJqN
FbvKo+N1Xtsf/7ZuvnrScXG342e61Y0oegy287Jvuy6g7RyK90SmPMetl/zxRk7G
/TkOphcJo3mLNm7Uj2HFkCbSPV8hy84hBL0XlDzCNwj3ztvDb8O8AxvAgMAy1DCt
-----END CERTIFICATE-----
Generated at Sat May 18 23:29:43 2024 by rpki-client on console-ams.rpki-client.org