Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/H3ad1Ln1JB-9ZF-yDhYXD3nOQKU.roa
File: H3ad1Ln1JB-9ZF-yDhYXD3nOQKU.roa (raw, json)
Hash identifier: C3SmrDBCaRItZNmYFxULauLuWnsb4tgrw2hPfISTi2U=
Subject key identifier: 1F:76:9D:D4:B9:F5:24:1F:BD:64:5F:B2:0E:16:17:0F:79:CE:40:A5
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018CC5DC0CD4B41D986098FE29A8F9416436
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/H3ad1Ln1JB-9ZF-yDhYXD3nOQKU.roa
Signing time: Mon 01 Jan 2024 16:29:41 +0000
ROA not before: Mon 01 Jan 2024 16:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203638
IP address blocks: 2a05:b0c6:500::/48 maxlen: 48
2a05:b0c6:5ec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:0c:d4:b4:1d:98:60:98:fe:29:a8:f9:41:64:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 1 16:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f769dd4b9f5241fbd645fb20e16170f79ce40a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2a:33:b8:0f:6a:a9:b3:83:b3:fb:0b:ec:15:
2a:e0:eb:00:f4:f2:1a:84:35:ad:40:40:ab:02:36:
8f:27:45:72:c2:df:bf:c2:6e:aa:8c:da:2b:39:bc:
ba:6a:ed:2e:ca:ad:73:d8:aa:21:41:39:b5:d4:6d:
4c:08:1a:02:f2:73:65:3d:96:92:0f:4a:ae:10:e3:
35:f5:30:42:79:d3:3f:37:ee:29:be:cc:7c:45:39:
7f:30:8b:dd:13:c1:ad:27:6d:5c:37:78:3b:2d:4e:
72:f7:d7:ff:d0:41:31:a3:4d:ac:b7:b0:d5:c8:f3:
26:7e:49:e0:c3:6c:8c:e2:00:60:d0:71:96:29:c2:
bf:c3:d8:af:1f:d6:ba:98:74:8d:6d:be:c6:83:7d:
d4:5e:89:25:68:95:16:a1:18:4c:02:d2:c9:b0:7e:
01:39:9b:6c:40:43:d2:75:86:85:7e:d1:eb:94:00:
18:3b:b7:c3:4d:d0:70:fb:ea:f8:b8:ac:0e:ea:b2:
c7:ca:ed:1f:dd:ab:87:59:b8:88:f5:b5:23:f6:00:
00:22:f0:8f:1a:31:d5:5d:c1:d8:e4:84:c2:e7:cc:
a0:68:36:6b:2c:55:7e:04:2e:0f:32:af:48:fa:9b:
e7:d1:6e:b5:a9:68:8d:4f:9b:08:3a:93:84:5b:93:
e9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:76:9D:D4:B9:F5:24:1F:BD:64:5F:B2:0E:16:17:0F:79:CE:40:A5
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/H3ad1Ln1JB-9ZF-yDhYXD3nOQKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:500::/48
2a05:b0c6:5ec::/48
Signature Algorithm: sha256WithRSAEncryption
30:69:75:5f:fc:e3:d3:72:f7:aa:40:3f:8f:f3:3e:0d:af:22:
ff:0c:d6:eb:2b:0c:10:8b:50:e1:d6:be:83:90:9f:66:b4:99:
45:af:39:42:f8:d1:74:9c:18:ef:c3:94:d2:27:e7:84:41:2d:
ee:12:08:13:dd:98:35:e2:6f:60:90:7a:37:bb:6e:07:be:3d:
8c:06:77:33:1c:bc:e8:57:bd:a3:27:ae:b9:09:46:ce:4a:a6:
68:67:f0:8f:f2:86:e8:03:fb:c6:1d:6d:a9:3b:83:18:77:4a:
5b:d8:e5:3d:c1:44:37:c4:14:59:fe:44:db:71:f8:50:3c:90:
5a:46:b4:6a:a0:14:e4:a1:8f:cc:aa:8e:05:ef:93:08:03:0e:
22:69:6d:68:2f:b8:21:c4:88:6b:0d:d2:3e:b4:08:4d:55:11:
b5:a6:ac:62:4f:b6:d5:de:73:ef:27:19:73:c1:92:8c:53:97:
50:48:6f:c3:6d:30:d2:18:14:a9:3d:e5:f8:bc:75:a2:e1:d2:
2f:ee:3f:02:5b:2f:91:4b:07:06:85:47:34:db:98:d4:4a:1f:
f8:49:99:39:b5:d2:52:77:ba:5c:8a:51:8a:85:e0:8d:da:cd:
8c:53:ba:ad:0b:b6:b2:c1:83:98:48:96:1e:34:13:cb:7f:87:
bb:6d:f0:8b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzF3AzUtB2YYJj+Kaj5QWQ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjgzNDhlOTA1NDk3M2Q3YTVmODE5M2JkNGU1YzQ0ZjY3
Mzk5ZTEwHhcNMjQwMTAxMTYyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjc2OWRkNGI5ZjUyNDFmYmQ2NDVmYjIwZTE2MTcwZjc5Y2U0MGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiozuA9qqbODs/sL7BUq4OsA9PIa
hDWtQECrAjaPJ0Vywt+/wm6qjNorOby6au0uyq1z2KohQTm11G1MCBoC8nNlPZaS
D0quEOM19TBCedM/N+4pvsx8RTl/MIvdE8GtJ21cN3g7LU5y99f/0EExo02st7DV
yPMmfkngw2yM4gBg0HGWKcK/w9ivH9a6mHSNbb7Gg33UXoklaJUWoRhMAtLJsH4B
OZtsQEPSdYaFftHrlAAYO7fDTdBw++r4uKwO6rLHyu0f3auHWbiI9bUj9gAAIvCP
GjHVXcHY5ITC58ygaDZrLFV+BC4PMq9I+pvn0W61qWiNT5sIOpOEW5Pp3wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFB92ndS59SQfvWRfsg4WFw95zkClMB8GA1UdIwQY
MBaAFMIoNI6QVJc9el+Bk71OXET2c5nhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMt
ZTg4ZmZmODJkNTUzLzEvSDNhZDFMbjFKQi05WkYteURoWVhEM25PUUtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMtZTg4ZmZmODJkNTUz
LzEvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgWwxgUA
AwcAKgWwxgXsMA0GCSqGSIb3DQEBCwUAA4IBAQAwaXVf/OPTcveqQD+P8z4NryL/
DNbrKwwQi1Dh1r6DkJ9mtJlFrzlC+NF0nBjvw5TSJ+eEQS3uEggT3Zg14m9gkHo3
u24Hvj2MBnczHLzoV72jJ665CUbOSqZoZ/CP8oboA/vGHW2pO4MYd0pb2OU9wUQ3
xBRZ/kTbcfhQPJBaRrRqoBTkoY/Mqo4F75MIAw4iaW1oL7ghxIhrDdI+tAhNVRG1
pqxiT7bV3nPvJxlzwZKMU5dQSG/DbTDSGBSpPeX4vHWi4dIv7j8CWy+RSwcGhUc0
25jUSh/4SZk5tdJSd7pcilGKheCN2s2MU7qtC7aywYOYSJYeNBPLf4e7bfCL
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:19:51 2024 by rpki-client on console-fra.rpki-client.org