Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EG41h85MLAr5_7HmlQZ7U0diKyE.roa
File: EG41h85MLAr5_7HmlQZ7U0diKyE.roa (raw, json)
Hash identifier: EsQ08H7lcnWBNVWn43YvQ/SYuK4n84gv0ddAapazo0Y=
Subject key identifier: 10:6E:35:87:CE:4C:2C:0A:F9:FF:B1:E6:95:06:7B:53:47:62:2B:21
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A090A24E913735281C683B5165838
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EG41h85MLAr5_7HmlQZ7U0diKyE.roa
Signing time: Mon 01 Jan 2024 18:29:49 +0000
ROA not before: Mon 01 Jan 2024 18:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207862
IP address blocks: 2a12:bec0:420::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:09:0a:24:e9:13:73:52:81:c6:83:b5:16:58:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=106e3587ce4c2c0af9ffb1e695067b5347622b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:58:08:28:b7:d3:1e:52:04:19:ea:c6:28:
7f:62:5f:ca:93:7e:11:36:e2:a4:4a:d0:6b:d9:da:
f0:02:b2:86:89:70:76:eb:19:6e:00:c4:77:af:c8:
42:d0:bd:5c:00:56:33:6e:de:2e:c4:7b:25:53:b3:
48:80:d0:71:4b:c9:17:05:75:76:f7:00:35:2a:37:
42:b7:f1:a5:e6:dd:23:cf:eb:1f:ca:80:8f:f9:20:
e8:60:23:2d:40:e8:72:a9:67:b3:59:07:6f:4a:e7:
cf:16:19:68:54:f5:ed:26:b6:27:b9:6d:7f:cc:d5:
be:3b:74:6b:22:ea:7a:15:cc:e8:f0:10:e6:eb:b3:
1e:46:8a:ec:e8:51:34:5a:26:7e:c2:58:50:8d:a7:
b8:78:36:1d:16:43:6d:99:e8:c0:d7:14:76:4e:06:
5e:f5:d1:bc:81:fb:b6:5e:75:1f:94:cb:86:6f:ba:
03:7f:7a:7c:69:31:79:22:fb:b0:48:b4:78:2e:a2:
c5:38:fa:08:fd:a7:f1:68:2d:f2:f5:d5:ea:e4:a8:
67:15:11:bf:07:0e:f6:38:e7:b7:c1:d5:07:a3:a1:
00:1a:9c:6f:1e:03:05:8c:c0:d5:b4:e1:1c:90:14:
b1:61:93:47:31:e4:7c:61:56:03:ee:f1:81:ae:9b:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6E:35:87:CE:4C:2C:0A:F9:FF:B1:E6:95:06:7B:53:47:62:2B:21
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EG41h85MLAr5_7HmlQZ7U0diKyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:420::/44
Signature Algorithm: sha256WithRSAEncryption
6e:b4:47:0b:7c:85:0e:ec:80:4a:5b:b6:d4:ae:7c:1c:ca:55:
24:5a:95:44:91:72:2b:87:9e:7a:f0:70:85:7c:d3:13:8f:26:
32:10:b6:93:db:24:1e:55:59:75:d3:e1:92:d4:29:de:c6:7d:
71:bc:d7:97:37:86:a6:f9:9f:55:c1:32:14:2a:42:4c:53:11:
44:57:83:54:6a:94:4f:b4:3a:ca:38:78:a4:75:45:c6:fd:c4:
00:bf:95:d6:4e:32:4c:87:d1:21:50:cd:bd:cb:ef:f7:81:da:
30:13:3f:b7:0c:21:b4:98:f8:55:7a:76:8a:ae:81:24:53:14:
24:46:0e:83:7d:e3:48:03:89:da:70:e5:9e:82:26:e7:1d:63:
49:56:61:ad:b4:87:8d:1d:71:d3:41:dc:87:94:db:14:db:f7:
b9:d8:63:42:52:a1:63:b0:22:5f:5c:68:6a:a9:99:4d:2d:42:
76:fa:c9:0f:10:c7:eb:e3:a7:76:04:e1:0a:c9:6b:91:c5:ff:
3d:a1:1e:16:e5:b6:7d:ae:53:f7:71:59:66:50:99:2d:ac:6b:
6b:0e:0b:03:5f:29:52:41:df:c9:66:6e:e4:3d:f7:f9:5a:e1:
f8:87:b2:8c:af:80:6a:43:18:e4:c7:cc:cd:0e:15:0b:1c:47:
e2:7f:97:58
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzGSgkKJOkTc1KBxoO1Flg4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjQwMTAxMTgyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDZlMzU4N2NlNGMyYzBhZjlmZmIxZTY5NTA2N2I1MzQ3NjIyYjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSxYCCi30x5SBBnqxih/Yl/Kk34R
NuKkStBr2drwArKGiXB26xluAMR3r8hC0L1cAFYzbt4uxHslU7NIgNBxS8kXBXV2
9wA1KjdCt/Gl5t0jz+sfyoCP+SDoYCMtQOhyqWezWQdvSufPFhloVPXtJrYnuW1/
zNW+O3RrIup6Fczo8BDm67MeRors6FE0WiZ+wlhQjae4eDYdFkNtmejA1xR2TgZe
9dG8gfu2XnUflMuGb7oDf3p8aTF5IvuwSLR4LqLFOPoI/afxaC3y9dXq5KhnFRG/
Bw72OOe3wdUHo6EAGpxvHgMFjMDVtOEckBSxYZNHMeR8YVYD7vGBrpsGDQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBBuNYfOTCwK+f+x5pUGe1NHYishMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvRUc0MWg4NU1MQXI1XzdIbWxRWjdVMGRpS3lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAQg
MA0GCSqGSIb3DQEBCwUAA4IBAQButEcLfIUO7IBKW7bUrnwcylUkWpVEkXIrh556
8HCFfNMTjyYyELaT2yQeVVl10+GS1Cnexn1xvNeXN4am+Z9VwTIUKkJMUxFEV4NU
apRPtDrKOHikdUXG/cQAv5XWTjJMh9EhUM29y+/3gdowEz+3DCG0mPhVenaKroEk
UxQkRg6DfeNIA4nacOWegibnHWNJVmGttIeNHXHTQdyHlNsU2/e52GNCUqFjsCJf
XGhqqZlNLUJ2+skPEMfr46d2BOEKyWuRxf89oR4W5bZ9rlP3cVlmUJktrGtrDgsD
XylSQd/JZm7kPff5WuH4h7KMr4BqQxjkx8zNDhULHEfif5dY
-----END CERTIFICATE-----
Generated at Sat Jun 1 03:24:16 2024 by rpki-client on console-fra.rpki-client.org