Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/iVNcghW93hGzNb2JiP7ZVhT02Hg.roa
File: iVNcghW93hGzNb2JiP7ZVhT02Hg.roa (raw, json)
Hash identifier: mPY0xMIM+O/f7t3RErz/u5bsx1HkgQHb336OkHFXp5o=
Subject key identifier: 89:53:5C:82:15:BD:DE:11:B3:35:BD:89:88:FE:D9:56:14:F4:D8:78
Certificate issuer: /CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7
Certificate serial: 018CC9BBC2315C7C8486F6A9F80E2A913A39
Authority key identifier: 9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/iVNcghW93hGzNb2JiP7ZVhT02Hg.roa
Signing time: Tue 02 Jan 2024 10:32:54 +0000
ROA not before: Tue 02 Jan 2024 10:32:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216428
IP address blocks: 2001:67c:11e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:c2:31:5c:7c:84:86:f6:a9:f8:0e:2a:91:3a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7
Validity
Not Before: Jan 2 10:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89535c8215bdde11b335bd8988fed95614f4d878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:79:c1:c8:3f:a6:38:81:32:ee:16:e8:81:
47:54:f0:87:fd:c2:2d:fe:6c:56:51:18:71:89:11:
93:aa:9b:6e:ab:bd:ef:d4:c8:db:c5:f3:f7:8c:29:
4e:40:8c:5b:1a:17:23:97:65:32:69:d5:33:1e:c6:
9b:7e:b7:71:42:c4:f5:95:6a:c7:7d:f5:f1:53:0c:
ba:22:55:c3:24:5c:61:39:30:3d:5a:db:ce:de:35:
31:d1:33:14:5b:69:39:2a:87:ad:04:bd:d6:25:75:
c1:fe:19:33:53:92:08:5c:7c:14:37:60:e0:ab:a8:
b9:2e:1f:d2:8f:8a:62:7e:63:81:4c:3a:69:b3:3f:
29:d0:19:bb:6e:26:14:80:52:38:36:04:97:15:d0:
5a:8d:17:fd:e7:2d:f2:cc:88:fa:49:d9:fd:d8:0d:
10:63:16:81:66:96:9a:b7:3c:28:da:83:d5:18:3a:
d6:54:d1:e2:cd:0d:d3:06:ad:3c:5b:5f:b3:74:de:
b2:1e:6b:d0:4b:49:57:da:97:d0:06:c2:40:6c:ee:
d3:93:7a:4c:31:27:0c:0f:af:26:3e:2c:7a:30:4a:
9c:de:e7:54:83:57:77:61:89:07:48:fc:a2:88:bc:
41:12:4a:0b:05:20:2b:08:d8:05:27:eb:b5:a1:6b:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:53:5C:82:15:BD:DE:11:B3:35:BD:89:88:FE:D9:56:14:F4:D8:78
X509v3 Authority Key Identifier:
keyid:9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/iVNcghW93hGzNb2JiP7ZVhT02Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:11e4::/48
Signature Algorithm: sha256WithRSAEncryption
82:f3:56:80:0b:8a:71:8f:3a:1d:e2:2d:70:a6:a4:dd:97:b5:
2a:b5:a1:f8:3e:41:7d:e6:59:0f:07:8e:4d:44:9a:ad:aa:a9:
5a:d1:bf:c9:88:15:7e:e6:47:43:e7:73:b3:5f:53:4d:09:07:
89:35:b5:ff:46:43:9c:e2:65:aa:e0:ec:c7:99:fe:ca:e2:f4:
f3:66:22:39:b0:5c:46:50:73:58:74:6a:76:b2:e6:af:03:23:
1a:1f:6b:dd:fb:de:40:dd:c7:2a:3e:04:21:f3:4b:a7:a6:6c:
0c:ca:fa:57:b5:8a:0f:b5:6a:5a:8d:3c:e2:d6:56:59:d2:ca:
e4:46:32:6a:6a:c2:f5:d1:ba:3d:72:79:e9:e0:88:15:59:c8:
bf:d1:8e:ee:25:ee:09:5d:24:bf:6f:58:8a:4e:0b:ee:a9:14:
54:69:c5:dd:a2:fd:f2:ca:62:3d:a1:20:f8:4c:66:22:62:f2:
58:3f:1b:be:1a:0f:f5:76:ee:b4:e2:ee:96:b9:bb:f6:c6:ce:
e0:eb:0d:b3:07:6e:82:77:ff:6a:90:10:e3:49:4a:20:da:24:
fe:a6:3e:25:61:76:c7:22:ff:80:2e:76:ca:42:46:ad:63:01:
9f:40:b9:70:79:a1:c2:8f:65:36:e4:04:e5:30:39:95:54:78:
46:17:1d:e8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJu8IxXHyEhvap+A4qkTo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMGRlNGYyNjI3NWVhNWZjMmYyM2M4YjRkN2UwNmQ3MmIz
YjczYzcwHhcNMjQwMTAyMTAzMjU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTUzNWM4MjE1YmRkZTExYjMzNWJkODk4OGZlZDk1NjE0ZjRkODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprF5wcg/pjiBMu4W6IFHVPCH/cIt
/mxWURhxiRGTqptuq73v1MjbxfP3jClOQIxbGhcjl2UyadUzHsabfrdxQsT1lWrH
ffXxUwy6IlXDJFxhOTA9WtvO3jUx0TMUW2k5KoetBL3WJXXB/hkzU5IIXHwUN2Dg
q6i5Lh/Sj4pifmOBTDppsz8p0Bm7biYUgFI4NgSXFdBajRf95y3yzIj6Sdn92A0Q
YxaBZpaatzwo2oPVGDrWVNHizQ3TBq08W1+zdN6yHmvQS0lX2pfQBsJAbO7Tk3pM
MScMD68mPix6MEqc3udUg1d3YYkHSPyiiLxBEkoLBSArCNgFJ+u1oWtRAwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIlTXIIVvd4RszW9iYj+2VYU9Nh4MB8GA1UdIwQY
MBaAFJ4N5PJidepfwvI8i01+BtcrO3PHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmczazhtSjE2bF9DOGp5TFRYNEcxeXM3YzhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lYWM5OTctY2UxZS00NTliLTk0MzYt
ZWQ3MDY3Zjk4N2Q5LzEvaVZOY2doVzkzaEd6TmIySmlQN1pWaFQwMkhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lYWM5OTctY2UxZS00NTliLTk0MzYtZWQ3MDY3Zjk4N2Q5
LzEvbmczazhtSjE2bF9DOGp5TFRYNEcxeXM3YzhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBHk
MA0GCSqGSIb3DQEBCwUAA4IBAQCC81aAC4pxjzod4i1wpqTdl7UqtaH4PkF95lkP
B45NRJqtqqla0b/JiBV+5kdD53OzX1NNCQeJNbX/RkOc4mWq4OzHmf7K4vTzZiI5
sFxGUHNYdGp2suavAyMaH2vd+95A3ccqPgQh80unpmwMyvpXtYoPtWpajTzi1lZZ
0srkRjJqasL10bo9cnnp4IgVWci/0Y7uJe4JXSS/b1iKTgvuqRRUacXdov3yymI9
oSD4TGYiYvJYPxu+Gg/1du604u6Wubv2xs7g6w2zB26Cd/9qkBDjSUog2iT+pj4l
YXbHIv+ALnbKQkatYwGfQLlweaHCj2U25ATlMDmVVHhGFx3o
-----END CERTIFICATE-----
Generated at Sun Jun 23 00:41:54 2024 by rpki-client on console-fra.rpki-client.org