Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/E6BirtTPCyjAFtQcuO2Zizja4dc.roa
File: E6BirtTPCyjAFtQcuO2Zizja4dc.roa (raw, json)
Hash identifier: 64GKChtRDWbFxs2TWdsCUG6p4RQGXiNIblDNOi5wfa4=
Subject key identifier: 13:A0:62:AE:D4:CF:0B:28:C0:16:D4:1C:B8:ED:99:8B:38:DA:E1:D7
Certificate issuer: /CN=379d103b953071caa9e1a8973808904096e793d8
Certificate serial: 018CC26D05AC9F402CE6FAB15231C8F7881A
Authority key identifier: 37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/E6BirtTPCyjAFtQcuO2Zizja4dc.roa
Signing time: Mon 01 Jan 2024 00:29:33 +0000
ROA not before: Mon 01 Jan 2024 00:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204957
IP address blocks: 2a06:fcc0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:05:ac:9f:40:2c:e6:fa:b1:52:31:c8:f7:88:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379d103b953071caa9e1a8973808904096e793d8
Validity
Not Before: Jan 1 00:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13a062aed4cf0b28c016d41cb8ed998b38dae1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:11:5b:63:e1:d1:15:0a:e1:a0:a6:62:20:4b:
fd:7e:d7:ff:1f:b1:cf:40:29:d5:e6:7c:c2:00:2a:
8f:6d:1c:b5:db:ac:f1:92:8f:dc:d6:e5:fc:2a:27:
87:14:16:11:cf:a4:c4:c8:09:1d:b6:03:06:b1:51:
57:a6:cb:dd:11:eb:bc:3b:f3:15:e4:3f:07:b9:8a:
d1:48:0a:4b:02:7b:57:6f:ee:6d:09:0a:2a:51:c7:
22:ea:3e:22:04:55:a6:39:ad:db:52:bb:2e:68:1c:
77:18:17:46:cd:1d:b7:e7:ae:fa:a0:ac:86:09:37:
5b:b7:a6:bb:88:f5:46:30:17:b8:d5:40:b5:8b:6f:
db:d8:20:80:d8:53:fb:8b:8b:0c:54:54:56:21:40:
95:5b:1c:ac:2b:f2:d5:6c:27:c5:00:58:43:54:fb:
0d:ba:87:f6:03:8a:e4:90:e6:fd:c5:b1:09:bb:69:
0d:db:1f:41:87:da:d1:51:1e:6c:24:39:1f:88:00:
f4:ae:e8:bf:22:5d:24:55:b3:0a:31:d8:d7:95:cc:
d3:50:a6:47:d0:4f:67:a4:45:04:f1:4d:35:e2:a1:
3a:5e:e5:53:61:19:c9:60:24:5c:99:3f:37:61:d8:
9c:c3:6c:83:d5:b2:4a:10:7e:bc:4a:54:00:95:84:
39:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A0:62:AE:D4:CF:0B:28:C0:16:D4:1C:B8:ED:99:8B:38:DA:E1:D7
X509v3 Authority Key Identifier:
keyid:37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/E6BirtTPCyjAFtQcuO2Zizja4dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:fcc0:2::/48
Signature Algorithm: sha256WithRSAEncryption
28:11:fd:79:f3:a0:1f:b5:e9:e9:67:d1:8c:e4:52:c8:9f:40:
72:38:b9:e4:25:13:45:4e:aa:72:c1:81:f6:9e:26:54:56:f7:
f7:82:a7:4e:cd:5d:bb:c0:ea:d5:47:69:18:b9:9d:9f:80:4d:
cd:59:cc:ca:d8:18:2a:41:16:62:39:b2:ab:f3:3b:af:bd:55:
65:0f:03:61:7b:1b:42:b2:de:a4:38:49:d4:42:2a:d4:9e:d9:
24:13:91:8f:f2:9f:4c:a2:32:fa:a5:0f:bc:a1:ea:64:67:b6:
13:9a:b6:c8:75:53:0e:3a:ac:42:3f:09:84:c5:fb:4c:79:dd:
30:10:11:4f:d2:2a:f8:06:d6:14:c5:50:bb:7b:d6:6e:cb:0c:
b8:63:f2:1e:2a:1a:ea:5d:35:90:e8:e5:bc:4d:15:79:b1:e1:
a6:95:ec:ff:c4:63:ca:b6:ef:4d:c4:7b:b2:10:f1:61:50:53:
ea:b1:ce:cf:70:59:11:15:ce:74:25:0c:cc:7e:48:44:56:72:
21:a5:a2:11:5b:f9:1d:2e:d4:12:10:1c:54:de:00:db:f3:8b:
bf:b4:68:e4:39:59:2e:e9:4d:1a:af:73:f6:03:a2:b1:8c:54:
0c:34:22:15:52:08:7b:cf:43:e5:f5:e3:88:d3:c1:cd:5f:be:
84:a8:f3:e2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzCbQWsn0As5vqxUjHI94gaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OWQxMDNiOTUzMDcxY2FhOWUxYTg5NzM4MDg5MDQwOTZl
NzkzZDgwHhcNMjQwMTAxMDAyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2EwNjJhZWQ0Y2YwYjI4YzAxNmQ0MWNiOGVkOTk4YjM4ZGFlMWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRFbY+HRFQrhoKZiIEv9ftf/H7HP
QCnV5nzCACqPbRy126zxko/c1uX8KieHFBYRz6TEyAkdtgMGsVFXpsvdEeu8O/MV
5D8HuYrRSApLAntXb+5tCQoqUcci6j4iBFWmOa3bUrsuaBx3GBdGzR235676oKyG
CTdbt6a7iPVGMBe41UC1i2/b2CCA2FP7i4sMVFRWIUCVWxysK/LVbCfFAFhDVPsN
uof2A4rkkOb9xbEJu2kN2x9Bh9rRUR5sJDkfiAD0rui/Il0kVbMKMdjXlczTUKZH
0E9npEUE8U014qE6XuVTYRnJYCRcmT83Ydicw2yD1bJKEH68SlQAlYQ5oQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBOgYq7UzwsowBbUHLjtmYs42uHXMB8GA1UdIwQY
MBaAFDedEDuVMHHKqeGolzgIkECW55PYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjUwUU81VXdjY3FwNGFpWE9BaVFRSmJuazlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iMThkMzgtOWNmOS00NTE5LTkxMWUt
ZGYyYWMxM2NkYjhiLzEvRTZCaXJ0VFBDeWpBRnRRY3VPMlppemphNGRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iMThkMzgtOWNmOS00NTE5LTkxMWUtZGYyYWMxM2NkYjhi
LzEvTjUwUU81VXdjY3FwNGFpWE9BaVFRSmJuazlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgb8wAAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAoEf1586AftenpZ9GM5FLIn0ByOLnkJRNFTqpy
wYH2niZUVvf3gqdOzV27wOrVR2kYuZ2fgE3NWczK2BgqQRZiObKr8zuvvVVlDwNh
extCst6kOEnUQirUntkkE5GP8p9MojL6pQ+8oepkZ7YTmrbIdVMOOqxCPwmExftM
ed0wEBFP0ir4BtYUxVC7e9Zuywy4Y/IeKhrqXTWQ6OW8TRV5seGmlez/xGPKtu9N
xHuyEPFhUFPqsc7PcFkRFc50JQzMfkhEVnIhpaIRW/kdLtQSEBxU3gDb84u/tGjk
OVku6U0ar3P2A6KxjFQMNCIVUgh7z0Pl9eOI08HNX76EqPPi
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:03:32 2024 by rpki-client on console-fra.rpki-client.org