Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/S4gtWYTYDEjS39eHVUxbFmHGZV4.roa
File: S4gtWYTYDEjS39eHVUxbFmHGZV4.roa (raw, json)
Hash identifier: zKLPTHhzh4CAXPLKwlgSG4GwY02X+J75JpY4N3k3zgw=
Subject key identifier: 4B:88:2D:59:84:D8:0C:48:D2:DF:D7:87:55:4C:5B:16:61:C6:65:5E
Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial: 018CC3B68E9957CCFF64BFEA50BD6D564D6C
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/S4gtWYTYDEjS39eHVUxbFmHGZV4.roa
Signing time: Mon 01 Jan 2024 06:29:30 +0000
ROA not before: Mon 01 Jan 2024 06:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 2a14:2a00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8e:99:57:cc:ff:64:bf:ea:50:bd:6d:56:4d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Validity
Not Before: Jan 1 06:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b882d5984d80c48d2dfd787554c5b1661c6655e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1a:eb:f6:56:0d:de:3f:27:14:7c:f1:53:78:
eb:5c:1f:88:52:a6:cd:3e:cd:b1:ea:82:86:67:b0:
32:f4:5c:98:0d:89:bd:98:6c:28:53:5c:93:54:da:
fd:93:e0:4c:c4:ae:d2:fd:c9:08:e4:9a:be:86:5e:
39:ac:48:4c:5d:c3:27:e3:6f:21:6d:83:c3:e1:c6:
21:ad:61:de:0f:01:44:26:52:b2:ae:a3:e9:e5:87:
ae:09:ab:9f:17:26:7b:f9:59:37:79:3a:53:a5:f4:
30:21:7c:1c:c8:13:b4:08:35:30:81:82:64:0c:9d:
4e:e9:07:63:59:8f:73:25:bf:05:6e:bc:1b:fc:5e:
9e:0d:1d:82:d7:36:04:4a:36:93:4c:bf:34:04:dc:
d9:74:9c:6d:1e:4f:49:79:00:11:10:48:07:c6:b3:
a3:a5:da:d9:e3:09:85:ac:cd:75:33:49:8f:eb:ee:
05:1c:53:b0:e7:65:1f:65:98:20:3f:23:77:76:f3:
b3:21:ad:69:a0:6f:67:ff:72:cc:8b:9c:af:bb:d4:
8e:ab:2c:0e:ec:03:20:44:d7:a3:6f:c3:ab:7a:91:
50:6b:56:dc:43:44:57:05:04:dd:7f:61:f8:66:4c:
8c:0a:5c:d4:12:db:a6:df:f4:8f:20:9f:cf:f2:d2:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:88:2D:59:84:D8:0C:48:D2:DF:D7:87:55:4C:5B:16:61:C6:65:5E
X509v3 Authority Key Identifier:
keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/S4gtWYTYDEjS39eHVUxbFmHGZV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2a00::/40
Signature Algorithm: sha256WithRSAEncryption
57:3e:45:60:39:ad:9e:50:35:38:9b:41:ff:dc:34:03:c1:58:
4c:7b:19:aa:20:2b:5d:c0:f5:a1:25:7a:fe:a6:7b:98:0c:2d:
a0:6d:8f:eb:0d:60:fa:d0:1a:72:38:e7:3b:6d:78:b8:66:a3:
74:73:12:8b:01:5e:cb:eb:35:12:d4:bd:92:ce:4f:a6:2a:66:
4b:c1:30:8e:5a:6c:9d:e3:04:03:2e:a4:63:a5:d8:df:a9:14:
01:7c:0e:ac:c0:9b:f2:5b:68:6a:63:99:2d:d9:e1:69:67:b3:
7e:e0:b5:f5:f4:5c:72:9c:1f:cd:07:d4:21:85:b4:1e:d0:c8:
2c:63:e2:6f:b1:2a:d3:0b:a8:da:78:69:b2:16:12:e9:62:ab:
3c:1f:0b:6b:1c:ce:14:ad:cf:2f:4d:74:4d:a7:95:1c:9d:f0:
e2:e2:69:2c:7e:14:18:af:68:9f:87:7f:d8:56:94:8c:d1:73:
5d:d8:c9:19:ed:67:1d:fe:41:30:15:27:89:4f:ed:5b:b5:bd:
99:e1:47:f9:1b:8f:57:a2:33:f2:99:72:8c:3c:57:74:a2:e5:
61:5f:2c:0c:77:ba:d2:6c:1c:fb:30:29:15:7a:70:de:92:44:
f7:d0:90:c6:03:52:67:ff:1c:8e:29:48:d1:aa:93:16:45:ca:
fd:53:10:a8
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzDto6ZV8z/ZL/qUL1tVk1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNjBmMDA5N2JlNDgxYzIxYmIxZDUxYzg1ZDQ0ZjY1NzQx
NThhYTkwHhcNMjQwMTAxMDYyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yjg4MmQ1OTg0ZDgwYzQ4ZDJkZmQ3ODc1NTRjNWIxNjYxYzY2NTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxrr9lYN3j8nFHzxU3jrXB+IUqbN
Ps2x6oKGZ7Ay9FyYDYm9mGwoU1yTVNr9k+BMxK7S/ckI5Jq+hl45rEhMXcMn428h
bYPD4cYhrWHeDwFEJlKyrqPp5YeuCaufFyZ7+Vk3eTpTpfQwIXwcyBO0CDUwgYJk
DJ1O6QdjWY9zJb8Fbrwb/F6eDR2C1zYESjaTTL80BNzZdJxtHk9JeQAREEgHxrOj
pdrZ4wmFrM11M0mP6+4FHFOw52UfZZggPyN3dvOzIa1poG9n/3LMi5yvu9SOqywO
7AMgRNejb8OrepFQa1bcQ0RXBQTdf2H4ZkyMClzUEtum3/SPIJ/P8tLKvQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFEuILVmE2AxI0t/Xh1VMWxZhxmVeMB8GA1UdIwQY
MBaAFLNg8Al75IHCG7HVHIXUT2V0FYqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80YWE1YTctOGJlYy00MjQ3LWExNWYt
NWEzNjEyMzUyYjM3LzEvUzRndFdZVFlERWpTMzllSFZVeGJGbUhHWlY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi80YWE1YTctOGJlYy00MjQ3LWExNWYtNWEzNjEyMzUyYjM3
LzEvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhQqAAAw
DQYJKoZIhvcNAQELBQADggEBAFc+RWA5rZ5QNTibQf/cNAPBWEx7GaogK13A9aEl
ev6me5gMLaBtj+sNYPrQGnI45ztteLhmo3RzEosBXsvrNRLUvZLOT6YqZkvBMI5a
bJ3jBAMupGOl2N+pFAF8DqzAm/JbaGpjmS3Z4Wlns37gtfX0XHKcH80H1CGFtB7Q
yCxj4m+xKtMLqNp4abIWEuliqzwfC2sczhStzy9NdE2nlRyd8OLiaSx+FBivaJ+H
f9hWlIzRc13YyRntZx3+QTAVJ4lP7Vu1vZnhR/kbj1eiM/KZcow8V3Si5WFfLAx3
utJsHPswKRV6cN6SRPfQkMYDUmf/HI4pSNGqkxZFyv1TEKg=
-----END CERTIFICATE-----
Generated at Sun May 5 19:11:39 2024 by rpki-client on console-fra.rpki-client.org