Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/0u09mRaJESqAmh-D6thoRD_KkH0.roa
File: 0u09mRaJESqAmh-D6thoRD_KkH0.roa (raw, json)
Hash identifier: JhVO6eIALTDUBlyfKLwLaBBcKLTqSt93HNRosnKpu2s=
Subject key identifier: D2:ED:3D:99:16:89:11:2A:80:9A:1F:83:EA:D8:68:44:3F:CA:90:7D
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 018ECCAA2702F26BB5F61A93FBD3034EA7A7
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/0u09mRaJESqAmh-D6thoRD_KkH0.roa
Signing time: Thu 11 Apr 2024 10:18:06 +0000
ROA not before: Thu 11 Apr 2024 10:18:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2a06:7380::/29 maxlen: 29
2a06:7d00::/29 maxlen: 29
2a07:4980::/29 maxlen: 29
2a07:ec40::/29 maxlen: 29
2a0a:db80::/29 maxlen: 29
2a0b:6500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:aa:27:02:f2:6b:b5:f6:1a:93:fb:d3:03:4e:a7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Apr 11 10:18:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2ed3d991689112a809a1f83ead868443fca907d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:55:27:b8:0f:80:49:1b:7e:0f:fc:d5:18:40:
f1:00:20:63:23:2c:54:4e:fc:84:02:9f:8e:0d:ef:
55:52:12:5d:04:9b:5b:fb:36:c2:33:c8:be:64:04:
6e:ae:88:09:7c:7c:eb:5f:8e:6e:47:fc:66:67:1f:
18:3e:6c:31:25:d0:dd:da:d9:2c:aa:b8:0a:b8:15:
b5:b2:b5:3b:2d:7a:11:42:6a:a7:12:36:2c:60:85:
b8:be:8b:c0:65:5b:39:af:00:b6:05:e9:af:4a:06:
70:63:e3:8b:47:7f:db:55:f4:f8:c6:46:07:c6:df:
1f:08:5b:87:1a:6c:ba:8e:da:66:3e:6c:79:95:b3:
99:75:cf:98:86:dd:be:de:c6:84:e0:59:10:22:c1:
22:e6:c1:e9:14:15:ab:8d:81:22:8e:78:c6:14:6b:
9f:6f:5e:1c:05:4e:25:14:37:e7:58:ab:d7:29:4f:
34:61:20:3f:c9:c2:3d:2c:48:6a:32:68:f9:9f:19:
6a:6b:4f:ff:bd:34:4a:2d:70:ab:ba:fe:86:f4:c1:
a0:6a:d0:3f:1d:33:8c:70:f3:20:52:52:3b:a4:41:
04:19:c0:d6:60:df:95:00:7e:90:d4:cb:28:92:85:
3e:0b:04:32:24:61:d8:14:74:b5:7b:dd:eb:e6:11:
8b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:ED:3D:99:16:89:11:2A:80:9A:1F:83:EA:D8:68:44:3F:CA:90:7D
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/0u09mRaJESqAmh-D6thoRD_KkH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:7380::/29
2a06:7d00::/29
2a07:4980::/29
2a07:ec40::/29
2a0a:db80::/29
2a0b:6500::/29
Signature Algorithm: sha256WithRSAEncryption
82:e3:af:32:27:5e:b9:29:9a:2f:30:9b:a8:be:73:02:90:f0:
7e:b0:52:fb:7b:38:7e:f5:62:af:c6:0e:e4:64:c9:ae:f8:71:
3e:f3:96:49:7a:a4:46:cd:19:6d:32:4e:75:01:14:22:7c:5e:
ad:80:88:cf:37:40:2f:1e:a7:38:e3:fd:3a:f3:ad:b0:91:4d:
cb:ec:32:50:f4:ac:ca:ee:e5:be:e1:c3:2f:c0:de:50:05:9c:
60:9e:d9:a5:27:08:09:da:15:3c:f9:83:6e:26:8e:2b:37:29:
2e:a0:e6:6e:6e:7b:9b:bc:ba:eb:9d:f5:27:9c:c1:69:c4:2b:
8c:fc:ad:80:f3:1b:d3:ba:1e:d2:fe:1d:3d:9c:fb:3a:9c:fd:
eb:e4:78:87:c7:be:a6:1c:2d:1e:a6:41:fd:e0:59:d4:ff:ae:
67:96:f2:e2:ae:e4:4b:3b:f4:f0:90:8b:51:e0:21:fe:2a:7c:
d6:a0:25:d4:01:ce:30:16:d2:e9:42:75:3f:7f:0e:61:d1:bc:
56:5a:dc:4b:9e:b5:bb:12:44:81:15:5f:72:dc:19:e2:72:c6:
78:84:3e:3c:41:be:11:c9:5e:d3:39:6c:48:8a:d6:7d:75:11:
8a:64:b1:04:79:a9:f4:9b:48:9b:39:e6:aa:ce:92:5c:af:60:
50:74:1a:44
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAY7MqicC8mu19hqT+9MDTqenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj
NTBkMjAwHhcNMjQwNDExMTAxODA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmVkM2Q5OTE2ODkxMTJhODA5YTFmODNlYWQ4Njg0NDNmY2E5MDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1UnuA+ASRt+D/zVGEDxACBjIyxU
TvyEAp+ODe9VUhJdBJtb+zbCM8i+ZARurogJfHzrX45uR/xmZx8YPmwxJdDd2tks
qrgKuBW1srU7LXoRQmqnEjYsYIW4vovAZVs5rwC2BemvSgZwY+OLR3/bVfT4xkYH
xt8fCFuHGmy6jtpmPmx5lbOZdc+Yht2+3saE4FkQIsEi5sHpFBWrjYEijnjGFGuf
b14cBU4lFDfnWKvXKU80YSA/ycI9LEhqMmj5nxlqa0//vTRKLXCruv6G9MGgatA/
HTOMcPMgUlI7pEEEGcDWYN+VAH6Q1MsokoU+CwQyJGHYFHS1e93r5hGLGQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFNLtPZkWiREqgJofg+rYaEQ/ypB9MB8GA1UdIwQY
MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt
YTY4NzNiMzc0ZTI2LzEvMHUwOW1SYUpFU3FBbWgtRDZ0aG9SRF9La0gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2
LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwUDKgZzgAMF
AyoGfQADBQMqB0mAAwUDKgfsQAMFAyoK24ADBQMqC2UAMA0GCSqGSIb3DQEBCwUA
A4IBAQCC468yJ165KZovMJuovnMCkPB+sFL7ezh+9WKvxg7kZMmu+HE+85ZJeqRG
zRltMk51ARQifF6tgIjPN0AvHqc44/06862wkU3L7DJQ9KzK7uW+4cMvwN5QBZxg
ntmlJwgJ2hU8+YNuJo4rNykuoOZubnubvLrrnfUnnMFpxCuM/K2A8xvTuh7S/h09
nPs6nP3r5HiHx76mHC0epkH94FnU/65nlvLiruRLO/TwkItR4CH+KnzWoCXUAc4w
FtLpQnU/fw5h0bxWWtxLnrW7EkSBFV9y3BnicsZ4hD48Qb4RyV7TOWxIitZ9dRGK
ZLEEean0m0ibOeaqzpJcr2BQdBpE
-----END CERTIFICATE-----
Generated at Thu Apr 25 16:45:47 2024 by rpki-client on console-fra.rpki-client.org