Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/lj_jHbrE0IgEDnMhVdTVAx4W8Ws.roa
File: lj_jHbrE0IgEDnMhVdTVAx4W8Ws.roa (raw, json)
Hash identifier: sGQtq34Iz7l1fGfwGN7GFuMyTKxIo8hP2kmwiaChaxI=
Subject key identifier: 96:3F:E3:1D:BA:C4:D0:88:04:0E:73:21:55:D4:D5:03:1E:16:F1:6B
Certificate issuer: /CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Certificate serial: 018CC50029844F4EB1A106909097961BB46F
Authority key identifier: 56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/lj_jHbrE0IgEDnMhVdTVAx4W8Ws.roa
Signing time: Mon 01 Jan 2024 12:29:31 +0000
ROA not before: Mon 01 Jan 2024 12:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210674
IP address blocks: 2a11:e487:ff01::/48 maxlen: 48
2a11:e487:ff00::/48 maxlen: 48
2a11:e487:ff00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:29:84:4f:4e:b1:a1:06:90:90:97:96:1b:b4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Validity
Not Before: Jan 1 12:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=963fe31dbac4d088040e732155d4d5031e16f16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:f3:63:99:17:19:4c:85:87:52:58:a8:54:
4b:18:48:ec:96:40:98:d3:cc:df:50:8d:9b:71:b1:
79:63:31:05:12:1c:e0:11:79:b8:61:39:62:b8:15:
b9:0b:78:a5:65:c9:46:68:6b:7e:78:ea:55:25:65:
90:cb:d4:df:a4:c1:33:57:2f:96:f9:dc:35:91:98:
ad:34:31:98:a7:6b:8a:e2:55:c0:d5:bb:15:15:58:
14:1d:c7:07:4c:9a:90:5f:ca:f2:a6:22:26:b3:1e:
b7:1d:96:13:f4:10:90:4b:8f:bb:ff:d0:4c:9c:d3:
b0:2f:bc:03:19:77:1d:e1:40:8c:c5:bf:17:08:55:
c0:59:74:28:e8:1f:eb:45:30:71:b1:15:17:d9:35:
9f:5a:59:57:44:54:5c:b3:ff:ba:bb:ed:1b:26:cf:
35:78:4e:c2:48:a3:da:b7:ed:42:2f:ed:ac:e1:1d:
50:4d:88:2b:ab:2a:65:a8:8b:ba:e3:89:e0:12:10:
d3:b4:0d:e2:f9:14:ea:3e:74:e9:a5:49:74:78:0e:
76:0b:44:1b:05:41:f3:ad:99:a2:34:b1:21:6f:0c:
3a:be:f8:c1:5d:f0:ae:92:d1:06:20:1a:d5:f8:4c:
4e:57:a7:be:e9:71:1c:43:ed:3b:0f:8f:c1:a6:a8:
00:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3F:E3:1D:BA:C4:D0:88:04:0E:73:21:55:D4:D5:03:1E:16:F1:6B
X509v3 Authority Key Identifier:
keyid:56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/lj_jHbrE0IgEDnMhVdTVAx4W8Ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e487:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
3c:9a:bc:90:8a:19:dc:8c:f4:a6:52:f8:1e:52:37:51:f7:95:
5a:b9:15:79:16:30:d9:dc:fa:6a:cf:c7:98:22:d1:b1:fd:ec:
80:62:c2:90:30:1f:47:b0:97:0d:0f:36:6b:ca:9b:69:ac:12:
54:28:61:5e:eb:9e:32:9a:fc:7c:6f:de:a6:3f:e7:13:56:df:
5b:8b:22:13:a9:b2:c6:0a:0a:81:15:2b:b0:87:86:9b:73:79:
83:39:92:63:c3:20:d0:14:1e:90:59:69:b6:84:76:ed:c8:b6:
80:7e:9b:6a:12:e0:c5:67:c5:1a:94:34:62:e4:0d:f4:fc:df:
45:8b:b5:8a:35:b9:a5:f5:74:e4:c3:a3:89:7f:6a:fd:2a:3d:
2f:8f:af:fb:c6:cf:a0:5b:4f:40:f8:26:74:93:20:37:38:1c:
51:6a:cb:e8:c3:ba:cb:cd:c7:c3:01:e8:78:96:c9:dc:15:d4:
0d:b2:a5:12:1d:e0:c8:64:4f:bf:3a:80:4d:ad:cb:f2:8d:30:
b3:f6:b5:3e:aa:42:b3:57:97:44:e3:b3:f4:83:0c:a4:da:de:
ab:0c:4b:ae:7c:dd:fc:e3:58:47:72:52:c5:a0:ae:65:9c:3f:
95:60:4a:a2:bd:34:2f:1f:65:09:d2:f3:5e:37:db:66:d5:82:
30:a3:31:f2
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzFACmET06xoQaQkJeWG7RvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YWZjZDhmYjQwYWFlMWQyNDNjMmE4Y2UyNTQxYTY5OTg3
ZWVkMTMwHhcNMjQwMTAxMTIyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjNmZTMxZGJhYzRkMDg4MDQwZTczMjE1NWQ0ZDUwMzFlMTZmMTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfLzY5kXGUyFh1JYqFRLGEjslkCY
08zfUI2bcbF5YzEFEhzgEXm4YTliuBW5C3ilZclGaGt+eOpVJWWQy9TfpMEzVy+W
+dw1kZitNDGYp2uK4lXA1bsVFVgUHccHTJqQX8rypiImsx63HZYT9BCQS4+7/9BM
nNOwL7wDGXcd4UCMxb8XCFXAWXQo6B/rRTBxsRUX2TWfWllXRFRcs/+6u+0bJs81
eE7CSKPat+1CL+2s4R1QTYgrqyplqIu644ngEhDTtA3i+RTqPnTppUl0eA52C0Qb
BUHzrZmiNLEhbww6vvjBXfCuktEGIBrV+ExOV6e+6XEcQ+07D4/BpqgAuQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJY/4x26xNCIBA5zIVXU1QMeFvFrMB8GA1UdIwQY
MBaAFFavzY+0Cq4dJDwqjOJUGmmYfu0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS80YzI2MzctM2JiYi00YTUzLWEyMTYt
MjM3YmU3NzMwMDdhLzEvbGpfakhickUwSWdFRG5NaFZkVFZBeDRXOFdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS80YzI2MzctM2JiYi00YTUzLWEyMTYtMjM3YmU3NzMwMDdh
LzEvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhHkh/8w
DQYJKoZIhvcNAQELBQADggEBADyavJCKGdyM9KZS+B5SN1H3lVq5FXkWMNnc+mrP
x5gi0bH97IBiwpAwH0ewlw0PNmvKm2msElQoYV7rnjKa/Hxv3qY/5xNW31uLIhOp
ssYKCoEVK7CHhptzeYM5kmPDINAUHpBZabaEdu3ItoB+m2oS4MVnxRqUNGLkDfT8
30WLtYo1uaX1dOTDo4l/av0qPS+Pr/vGz6BbT0D4JnSTIDc4HFFqy+jDusvNx8MB
6HiWydwV1A2ypRId4MhkT786gE2ty/KNMLP2tT6qQrNXl0Tjs/SDDKTa3qsMS658
3fzjWEdyUsWgrmWcP5VgSqK9NC8fZQnS814322bVgjCjMfI=
-----END CERTIFICATE-----
Generated at Sun May 19 23:01:17 2024 by rpki-client on console-ams.rpki-client.org