Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/EU-g7cwl6aLgmwQaM_TLHI4dUF4.roa
File: EU-g7cwl6aLgmwQaM_TLHI4dUF4.roa (raw, json)
Hash identifier: HTqkC5AhRix3Ize5L0/AJV7chkNh1B7azgJNrWwjnBg=
Subject key identifier: 11:4F:A0:ED:CC:25:E9:A2:E0:9B:04:1A:33:F4:CB:1C:8E:1D:50:5E
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 019000A55FD55666DE34A835F7454A565837
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/EU-g7cwl6aLgmwQaM_TLHI4dUF4.roa
Signing time: Mon 10 Jun 2024 05:35:56 +0000
ROA not before: Mon 10 Jun 2024 05:35:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215185
IP address blocks: 2a0e:c5c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:00:a5:5f:d5:56:66:de:34:a8:35:f7:45:4a:56:58:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: Jun 10 05:35:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=114fa0edcc25e9a2e09b041a33f4cb1c8e1d505e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:7e:fd:47:b9:60:63:f9:d0:15:05:99:53:
f3:77:29:9a:61:1d:bb:59:91:11:ed:c2:d4:df:62:
2d:0a:6c:9d:76:3a:d5:b1:d2:e2:98:d3:9c:d2:3d:
2e:ad:db:e1:14:0b:4c:78:d7:3a:a8:9a:2d:2e:0e:
92:69:05:63:27:a7:f9:25:08:57:a2:a6:84:c7:45:
5b:03:19:10:8d:ad:17:04:bf:90:2a:b0:59:59:f1:
3c:a8:5d:4b:e5:2b:35:df:58:c9:96:7f:88:73:20:
e3:ae:63:ac:e9:90:2f:aa:5c:0a:9c:a0:08:ef:50:
81:66:df:61:48:61:40:f6:8d:8a:01:a0:9f:77:e4:
11:59:4b:fd:f7:ee:be:38:26:4c:8b:b7:8e:9b:6b:
9e:fb:5f:98:25:a7:1a:3c:47:59:05:f6:dd:74:87:
28:1e:fe:c3:7e:04:b5:ff:6e:c6:b4:9d:62:c2:77:
7f:e1:89:f3:a8:9f:35:96:c9:7c:02:c6:76:97:88:
27:60:36:f9:be:34:67:c9:c8:66:78:7f:0e:ea:25:
ed:47:ec:9a:47:2b:13:aa:6c:5e:3a:f7:07:a9:5d:
42:d3:3a:33:cc:4d:6f:95:db:5b:3a:65:38:55:d8:
c3:30:28:e8:b1:e5:6f:2e:a4:cd:8c:13:01:9b:62:
69:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4F:A0:ED:CC:25:E9:A2:E0:9B:04:1A:33:F4:CB:1C:8E:1D:50:5E
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/EU-g7cwl6aLgmwQaM_TLHI4dUF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:c5c1::/48
Signature Algorithm: sha256WithRSAEncryption
7d:c6:99:c2:66:b4:d4:c5:4e:e6:0f:a8:c5:61:f7:0c:64:2d:
8f:60:15:5c:30:4a:cc:2b:25:ea:68:a1:a5:31:e5:21:04:e0:
7d:b4:d2:5e:df:75:4d:bc:7a:62:95:d3:4e:65:a0:c6:40:aa:
b3:90:77:e2:f3:24:9c:b2:f1:ab:e9:4c:0b:da:ac:5a:15:d2:
dd:20:b9:8e:b6:e2:4f:9e:4d:c0:68:53:eb:fd:b8:92:af:ba:
8b:d3:09:56:cd:3e:74:a0:70:42:ed:62:4a:a1:a2:18:55:5e:
ef:59:cf:b9:57:d6:69:57:f2:c9:c8:17:8c:16:34:4e:dd:ec:
81:a4:60:d7:2f:57:9a:97:29:ba:d9:f1:27:2b:ae:1d:79:70:
f9:10:6d:41:42:0a:e5:b7:0f:75:e9:69:25:0a:26:5c:44:d7:
e2:05:1f:d4:28:e5:0f:2e:ef:d3:c0:94:bd:ea:d9:63:0b:11:
f5:bf:c3:88:36:96:87:03:4d:38:cf:18:a1:55:44:9f:bd:c1:
bd:2b:f5:b9:02:0e:f4:92:a8:cd:47:19:67:25:9a:cc:0c:16:
35:ec:2d:9a:ea:92:93:d2:8a:be:77:dd:88:d3:e6:82:15:57:
14:34:8f:be:10:7c:08:82:89:62:36:4f:24:33:b3:24:f0:ca:
48:ed:85:d7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZAApV/VVmbeNKg190VKVlg3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxY2RjMjZkNDRlYWY4NTY1NDQ4MWU5NTgxMDQzZTE0ODg3
NzY1YjQwHhcNMjQwNjEwMDUzNTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTRmYTBlZGNjMjVlOWEyZTA5YjA0MWEzM2Y0Y2IxYzhlMWQ1MDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOx+/Ue5YGP50BUFmVPzdymaYR27
WZER7cLU32ItCmyddjrVsdLimNOc0j0urdvhFAtMeNc6qJotLg6SaQVjJ6f5JQhX
oqaEx0VbAxkQja0XBL+QKrBZWfE8qF1L5Ss131jJln+IcyDjrmOs6ZAvqlwKnKAI
71CBZt9hSGFA9o2KAaCfd+QRWUv99+6+OCZMi7eOm2ue+1+YJacaPEdZBfbddIco
Hv7DfgS1/27GtJ1iwnd/4YnzqJ81lsl8AsZ2l4gnYDb5vjRnychmeH8O6iXtR+ya
RysTqmxeOvcHqV1C0zozzE1vldtbOmU4VdjDMCjoseVvLqTNjBMBm2Jp/QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBFPoO3MJemi4JsEGjP0yxyOHVBeMB8GA1UdIwQY
MBaAFLHNwm1E6vhWVEgelYEEPhSId2W0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hYWFkYWMtNDgwOS00OTU1LWFjNjIt
OGY5Y2EwZWJjY2FiLzEvRVUtZzdjd2w2YUxnbXdRYU1fVExISTRkVUY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9hYWFkYWMtNDgwOS00OTU1LWFjNjItOGY5Y2EwZWJjY2Fi
LzEvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg7FwQAA
MA0GCSqGSIb3DQEBCwUAA4IBAQB9xpnCZrTUxU7mD6jFYfcMZC2PYBVcMErMKyXq
aKGlMeUhBOB9tNJe33VNvHpildNOZaDGQKqzkHfi8yScsvGr6UwL2qxaFdLdILmO
tuJPnk3AaFPr/biSr7qL0wlWzT50oHBC7WJKoaIYVV7vWc+5V9ZpV/LJyBeMFjRO
3eyBpGDXL1ealym62fEnK64deXD5EG1BQgrltw916WklCiZcRNfiBR/UKOUPLu/T
wJS96tljCxH1v8OINpaHA004zxihVUSfvcG9K/W5Ag70kqjNRxlnJZrMDBY17C2a
6pKT0oq+d92I0+aCFVcUNI++EHwIgoliNk8kM7Mk8MpI7YXX
-----END CERTIFICATE-----
Generated at Fri Jun 21 20:01:30 2024 by rpki-client on console-fra.rpki-client.org