Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/wOvD5zvKn4gZmcJ1_xmXSZjs2pQ.roa
File: wOvD5zvKn4gZmcJ1_xmXSZjs2pQ.roa (raw, json)
Hash identifier: z2vofBAU2GH1KAeRw0d265BHmFYAfyoWkSx0qKyzrkU=
Subject key identifier: C0:EB:C3:E7:3B:CA:9F:88:19:99:C2:75:FF:19:97:49:98:EC:DA:94
Certificate issuer: /CN=115152233829aefd4679b51471798debc98237ef
Certificate serial: 018CC5DBE88F3D96C4735BBFAB37EBDD24B2
Authority key identifier: 11:51:52:23:38:29:AE:FD:46:79:B5:14:71:79:8D:EB:C9:82:37:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/wOvD5zvKn4gZmcJ1_xmXSZjs2pQ.roa
Signing time: Mon 01 Jan 2024 16:29:32 +0000
ROA not before: Mon 01 Jan 2024 16:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212337
IP address blocks: 2001:678:92c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e8:8f:3d:96:c4:73:5b:bf:ab:37:eb:dd:24:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115152233829aefd4679b51471798debc98237ef
Validity
Not Before: Jan 1 16:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0ebc3e73bca9f881999c275ff19974998ecda94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:70:ef:0c:e9:1d:00:ae:a7:54:04:26:33:69:
59:29:70:28:ad:b3:2b:b6:bb:28:38:5d:fa:a5:c0:
0a:52:9d:34:36:b5:91:b4:90:32:eb:8e:73:4a:1e:
10:22:79:7e:80:36:11:3c:ee:b2:02:24:7d:c8:4c:
6a:87:8c:39:cb:24:18:9d:73:92:e9:6b:5a:bc:7b:
e3:33:b9:70:a6:b5:02:15:cb:1f:71:1d:5a:ed:c5:
13:a5:2d:5e:d9:c0:5d:be:ca:67:17:45:e2:ee:25:
db:fb:40:89:b2:43:ec:04:8b:3a:96:25:86:79:ec:
be:99:c1:4d:1e:21:02:b3:ec:bb:d8:ca:c8:85:0e:
d2:05:1a:e6:7a:c5:5a:9a:59:41:e7:6b:f0:b4:02:
c6:6c:dc:29:57:ba:d7:70:bd:9f:1b:81:93:8f:ad:
f7:fc:aa:74:88:7a:dd:f4:7a:15:eb:73:c3:03:ff:
64:cd:b9:4f:51:e4:d3:65:be:6c:32:9e:cb:64:12:
b6:a3:43:b6:7d:84:3b:13:d5:66:92:91:8a:6c:b7:
bb:fa:0e:38:b7:43:9b:a6:27:c6:26:80:f9:df:f7:
0d:7c:c8:aa:33:20:31:6f:26:7c:97:15:3f:44:c6:
a4:db:b6:8e:9d:29:33:17:d5:c3:c0:7d:e9:b3:09:
2b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EB:C3:E7:3B:CA:9F:88:19:99:C2:75:FF:19:97:49:98:EC:DA:94
X509v3 Authority Key Identifier:
keyid:11:51:52:23:38:29:AE:FD:46:79:B5:14:71:79:8D:EB:C9:82:37:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/wOvD5zvKn4gZmcJ1_xmXSZjs2pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:92c::/48
Signature Algorithm: sha256WithRSAEncryption
cc:8b:c1:dd:5b:a9:c8:56:1e:d5:4f:ed:50:62:7d:b8:ed:aa:
71:56:32:aa:7b:50:57:98:15:14:c5:54:82:fd:1c:89:67:e4:
75:7d:63:eb:cc:0b:9c:66:b4:fd:29:bb:38:0f:42:ef:8e:14:
c3:c3:d2:b6:8d:25:23:31:bd:e8:ce:1b:ed:a1:6e:c7:e8:09:
6f:31:a4:98:e0:26:bf:15:bb:f5:52:22:b8:35:25:8c:13:5f:
ee:53:cc:d4:d6:b0:0d:ad:02:5b:58:0c:87:85:8b:e2:42:20:
6b:1d:99:0d:08:14:bb:93:bc:0d:82:20:bc:c5:ed:fc:be:81:
04:77:2f:c5:71:1d:c3:db:fb:75:6d:2a:16:c8:ce:0c:0b:7b:
75:e7:24:5a:06:5d:92:ad:02:8b:a9:ab:1c:50:35:59:54:26:
6f:69:5d:f6:3d:99:58:ea:80:3f:23:2d:0a:d4:44:5b:fc:b6:
61:10:a1:19:8a:2f:7d:0d:61:80:99:0b:6b:3d:00:70:8f:cc:
82:00:5d:63:10:5e:61:10:8f:01:69:2f:8a:27:3d:09:b3:c0:
ba:6a:27:ec:13:35:a9:4a:69:6c:05:a6:04:d9:dc:d7:a0:94:
06:84:13:da:43:9d:cc:5c:57:af:0a:0d:93:59:64:04:88:8e:
97:75:c4:f1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzF2+iPPZbEc1u/qzfr3SSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNTE1MjIzMzgyOWFlZmQ0Njc5YjUxNDcxNzk4ZGViYzk4
MjM3ZWYwHhcNMjQwMTAxMTYyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGViYzNlNzNiY2E5Zjg4MTk5OWMyNzVmZjE5OTc0OTk4ZWNkYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXDvDOkdAK6nVAQmM2lZKXAorbMr
trsoOF36pcAKUp00NrWRtJAy645zSh4QInl+gDYRPO6yAiR9yExqh4w5yyQYnXOS
6WtavHvjM7lwprUCFcsfcR1a7cUTpS1e2cBdvspnF0Xi7iXb+0CJskPsBIs6liWG
eey+mcFNHiECs+y72MrIhQ7SBRrmesVamllB52vwtALGbNwpV7rXcL2fG4GTj633
/Kp0iHrd9HoV63PDA/9kzblPUeTTZb5sMp7LZBK2o0O2fYQ7E9VmkpGKbLe7+g44
t0ObpifGJoD53/cNfMiqMyAxbyZ8lxU/RMak27aOnSkzF9XDwH3pswkrDQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMDrw+c7yp+IGZnCdf8Zl0mY7NqUMB8GA1UdIwQY
MBaAFBFRUiM4Ka79Rnm1FHF5jevJgjfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVZGU0l6Z3BydjFHZWJVVWNYbU42OG1DTi04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kYmVhNWQtMjc3Yi00Njc1LThkMDUt
ZWQxN2Q2YzQyYjJmLzEvd092RDV6dktuNGdabWNKMV94bVhTWmpzMnBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9kYmVhNWQtMjc3Yi00Njc1LThkMDUtZWQxN2Q2YzQyYjJm
LzEvRVZGU0l6Z3BydjFHZWJVVWNYbU42OG1DTi04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAks
MA0GCSqGSIb3DQEBCwUAA4IBAQDMi8HdW6nIVh7VT+1QYn247apxVjKqe1BXmBUU
xVSC/RyJZ+R1fWPrzAucZrT9Kbs4D0LvjhTDw9K2jSUjMb3ozhvtoW7H6AlvMaSY
4Ca/Fbv1UiK4NSWME1/uU8zU1rANrQJbWAyHhYviQiBrHZkNCBS7k7wNgiC8xe38
voEEdy/FcR3D2/t1bSoWyM4MC3t15yRaBl2SrQKLqascUDVZVCZvaV32PZlY6oA/
Iy0K1ERb/LZhEKEZii99DWGAmQtrPQBwj8yCAF1jEF5hEI8BaS+KJz0Js8C6aifs
EzWpSmlsBaYE2dzXoJQGhBPaQ53MXFevCg2TWWQEiI6XdcTx
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:43:57 2024 by rpki-client on console-ams.rpki-client.org