Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/Y2lx6LWshcc4lJ5Im3LG9-t5ayI.roa
File: Y2lx6LWshcc4lJ5Im3LG9-t5ayI.roa (raw, json)
Hash identifier: Y/PVTf+Obrg1jP6BKzxWSCsM5d4pvqa6jzBMIlf0NRo=
Subject key identifier: 63:69:71:E8:B5:AC:85:C7:38:94:9E:48:9B:72:C6:F7:EB:79:6B:22
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018CC348978F262A5E71F38F31798F7D6C2C
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/Y2lx6LWshcc4lJ5Im3LG9-t5ayI.roa
Signing time: Mon 01 Jan 2024 04:29:23 +0000
ROA not before: Mon 01 Jan 2024 04:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211013
IP address blocks: 2a05:1082:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:97:8f:26:2a:5e:71:f3:8f:31:79:8f:7d:6c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=636971e8b5ac85c738949e489b72c6f7eb796b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6c:2c:8a:97:9d:16:4a:06:1b:73:50:5f:08:
5b:85:0d:18:fa:e0:28:1c:15:98:b1:70:12:d2:8b:
8d:7e:40:bd:4f:2f:6f:e9:a5:41:c6:ae:e7:6c:c4:
a0:36:23:84:87:5f:ae:fd:05:ce:1c:85:8c:51:15:
bd:8e:a4:89:43:b8:e5:55:3b:df:42:99:a5:e3:72:
84:fc:3d:50:d5:64:80:31:b8:df:d6:4e:68:eb:2a:
aa:bf:a3:45:4f:03:ec:bc:83:aa:40:7e:58:66:50:
aa:e6:6f:6b:3f:0c:0b:48:5a:14:07:13:7e:8d:15:
e3:6c:0e:ac:30:57:cc:da:3e:d8:df:05:57:18:27:
00:cf:a8:9a:00:6f:29:ed:62:ae:89:90:9a:18:07:
c8:9b:ed:d3:8e:19:c0:34:37:6f:a3:50:92:0f:d7:
4d:e6:89:93:c9:9e:90:2b:91:5b:81:d6:e4:5a:7e:
fe:1c:74:ff:57:15:98:05:c2:a7:61:3f:21:f0:40:
6d:cc:ee:38:6f:8b:1a:50:49:4b:88:ac:77:b5:62:
d1:3b:7b:8f:19:8b:a2:03:ab:eb:9b:a1:ba:6e:0d:
fd:8a:16:ab:88:ca:e3:5b:7c:10:71:c2:60:73:72:
8c:94:f6:33:fc:e3:13:67:38:38:6d:93:2b:6a:bb:
ac:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:69:71:E8:B5:AC:85:C7:38:94:9E:48:9B:72:C6:F7:EB:79:6B:22
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/Y2lx6LWshcc4lJ5Im3LG9-t5ayI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1082:f000::/48
Signature Algorithm: sha256WithRSAEncryption
3f:bd:79:92:b7:ef:7f:1b:b3:37:37:ab:18:0c:69:ab:f4:5c:
1f:09:c8:2d:86:17:9e:a3:68:93:17:b3:81:c4:46:2c:9e:ff:
a2:f4:0b:6b:9e:f0:9c:10:d2:30:33:18:5b:5e:f7:19:e8:27:
9c:c4:f1:6d:e8:3a:2d:18:2b:50:a1:60:d8:f0:74:18:7e:b3:
1d:b3:8b:5b:f9:c7:dd:ed:64:a6:fc:20:bf:27:fd:99:3e:0e:
48:07:2f:55:9e:b0:82:c5:15:8c:7a:a5:44:7e:fd:11:b7:b8:
b1:e6:17:76:ad:44:9d:ff:05:75:41:f0:35:0e:8e:3d:7c:56:
b7:a7:32:15:e8:23:c0:f3:45:7b:c0:3a:8e:b5:d6:a6:8a:81:
7d:3a:af:6c:02:05:55:45:1b:7f:1a:fb:8b:47:c1:3e:45:95:
c8:c8:2f:c5:bc:8e:e4:c8:a7:38:8d:d4:5b:24:ce:6e:29:e8:
f6:49:6d:8c:83:a7:b1:e0:59:b8:f8:ec:13:b8:d8:b0:31:f7:
d4:74:10:4b:ee:37:d9:d9:7f:0d:98:f3:e0:8b:53:d5:46:c1:
64:a4:0d:7c:f7:64:31:e5:16:dc:44:f0:e4:a1:fd:fe:14:b0:
fd:e0:12:af:39:73:3e:e4:4d:6f:41:58:78:1b:63:f7:3a:e6:
2c:f2:d4:14
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzDSJePJipecfOPMXmPfWwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi
Yjg2Y2UwHhcNMjQwMTAxMDQyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzY5NzFlOGI1YWM4NWM3Mzg5NDllNDg5YjcyYzZmN2ViNzk2YjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmwsipedFkoGG3NQXwhbhQ0Y+uAo
HBWYsXAS0ouNfkC9Ty9v6aVBxq7nbMSgNiOEh1+u/QXOHIWMURW9jqSJQ7jlVTvf
Qpml43KE/D1Q1WSAMbjf1k5o6yqqv6NFTwPsvIOqQH5YZlCq5m9rPwwLSFoUBxN+
jRXjbA6sMFfM2j7Y3wVXGCcAz6iaAG8p7WKuiZCaGAfIm+3TjhnANDdvo1CSD9dN
5omTyZ6QK5FbgdbkWn7+HHT/VxWYBcKnYT8h8EBtzO44b4saUElLiKx3tWLRO3uP
GYuiA6vrm6G6bg39ihariMrjW3wQccJgc3KMlPYz/OMTZzg4bZMrarusrwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGNpcei1rIXHOJSeSJtyxvfreWsiMB8GA1UdIwQY
MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt
ZjljYjBhN2IyMDZjLzEvWTJseDZMV3NoY2M0bEo1SW0zTEc5LXQ1YXlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj
LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgUQgvAA
MA0GCSqGSIb3DQEBCwUAA4IBAQA/vXmSt+9/G7M3N6sYDGmr9FwfCcgthheeo2iT
F7OBxEYsnv+i9AtrnvCcENIwMxhbXvcZ6CecxPFt6DotGCtQoWDY8HQYfrMds4tb
+cfd7WSm/CC/J/2ZPg5IBy9VnrCCxRWMeqVEfv0Rt7ix5hd2rUSd/wV1QfA1Do49
fFa3pzIV6CPA80V7wDqOtdamioF9Oq9sAgVVRRt/GvuLR8E+RZXIyC/FvI7kyKc4
jdRbJM5uKej2SW2Mg6ex4Fm4+OwTuNiwMffUdBBL7jfZ2X8NmPPgi1PVRsFkpA18
92Qx5RbcRPDkof3+FLD94BKvOXM+5E1vQVh4G2P3OuYs8tQU
-----END CERTIFICATE-----
Generated at Wed May 15 18:27:02 2024 by rpki-client on console-fra.rpki-client.org