Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/TuT9yzZ0rRKdfklVHH6cnpyLNEI.roa
File: TuT9yzZ0rRKdfklVHH6cnpyLNEI.roa (raw, json)
Hash identifier: gc4+1/u9P+t4EZu1/R+lxNo/lJZoUt4BMVcJsY0OjPg=
Subject key identifier: 4E:E4:FD:CB:36:74:AD:12:9D:7E:49:55:1C:7E:9C:9E:9C:8B:34:42
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018D0A12CD20F4E9B384E63E49D1FA729F35
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/TuT9yzZ0rRKdfklVHH6cnpyLNEI.roa
Signing time: Sun 14 Jan 2024 22:23:40 +0000
ROA not before: Sun 14 Jan 2024 22:23:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215745
IP address blocks: 2a12:bec0:638::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0a:12:cd:20:f4:e9:b3:84:e6:3e:49:d1:fa:72:9f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 14 22:23:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ee4fdcb3674ad129d7e49551c7e9c9e9c8b3442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e0:c1:0e:d8:f4:3b:d3:4f:cb:f0:85:33:a2:
a0:84:1c:a9:65:d4:47:4f:c8:b7:f1:d5:ce:96:38:
11:36:ab:2d:11:39:bd:28:29:1e:37:ea:d7:20:ab:
01:37:18:2c:f3:c0:9f:98:2a:f3:55:b7:35:23:59:
88:3e:8a:6c:7b:6a:fb:d1:3b:48:6c:3f:e0:d2:3a:
30:8b:ff:10:af:bf:c1:e4:ff:31:2b:87:aa:b0:04:
36:b3:cb:8c:f9:12:80:84:87:9f:74:77:a3:be:d0:
1d:05:5f:85:67:14:e0:ef:f6:fd:96:c3:95:13:5e:
2b:3a:9a:e3:66:ab:50:a7:dd:d3:0a:3f:bc:81:8b:
db:b7:37:ea:67:dc:3c:a5:a9:1f:9a:5f:68:47:5f:
9b:bb:5b:03:44:00:7f:19:3d:49:07:1f:dd:d1:67:
b3:96:c4:f0:0d:03:f6:23:db:38:bd:e5:8a:5a:3f:
ca:5c:fe:8b:61:ed:84:b3:df:28:49:a9:d0:cb:68:
73:3a:46:a2:44:9a:45:f2:36:78:60:df:bd:86:7b:
f2:1b:c3:c5:92:59:dc:84:ae:cb:3e:e2:69:1f:e4:
fb:bd:f5:59:de:bc:57:fc:f8:4d:31:fb:a3:18:24:
cd:be:80:79:3c:24:20:36:45:4f:e0:d7:b7:bb:c7:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E4:FD:CB:36:74:AD:12:9D:7E:49:55:1C:7E:9C:9E:9C:8B:34:42
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/TuT9yzZ0rRKdfklVHH6cnpyLNEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:638::/46
Signature Algorithm: sha256WithRSAEncryption
43:51:0f:2d:fd:d2:35:26:85:fa:0f:ae:44:39:2a:cf:33:fb:
ac:c1:a5:99:ee:70:a6:1f:4f:4d:07:05:43:cf:e6:4c:96:78:
7e:6a:c2:6e:22:18:c2:7e:f7:d5:31:d4:dc:1a:43:bc:5a:9b:
b1:3d:bf:87:40:77:e2:c1:99:59:cd:ea:bc:cf:8b:b9:04:81:
2d:0b:cc:60:92:69:f9:9b:99:e4:52:3e:16:e6:eb:0f:3a:0b:
92:01:ab:62:5d:34:4c:ab:e5:43:e7:ef:54:99:d1:87:14:00:
d9:5f:a7:46:6e:d5:e4:2a:8e:a3:f6:85:44:91:72:00:6a:64:
fe:a2:ba:ab:f2:3f:85:f1:4f:4f:3e:bf:19:1f:d4:0d:48:5e:
dc:82:db:96:11:04:2f:2f:86:15:72:9d:bf:13:0e:82:da:64:
04:50:42:ec:3f:24:bc:0b:7b:8e:78:e6:3b:4e:90:4f:5c:15:
dc:aa:bd:72:34:8c:e8:71:fa:85:31:24:e5:33:10:7a:25:d3:
5a:b9:13:7a:78:c2:25:14:9c:37:34:ba:91:dd:75:f2:dd:66:
8a:7c:73:2f:bd:d7:7a:33:75:47:8d:0c:0c:e8:2a:be:cd:81:
0c:c4:97:04:ef:58:4f:c3:2a:2a:3b:4d:36:09:dc:e5:6e:e8:
ba:35:83:20
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY0KEs0g9OmzhOY+SdH6cp81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjQwMTE0MjIyMzQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWU0ZmRjYjM2NzRhZDEyOWQ3ZTQ5NTUxYzdlOWM5ZTljOGIzNDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluDBDtj0O9NPy/CFM6KghBypZdRH
T8i38dXOljgRNqstETm9KCkeN+rXIKsBNxgs88CfmCrzVbc1I1mIPopse2r70TtI
bD/g0jowi/8Qr7/B5P8xK4eqsAQ2s8uM+RKAhIefdHejvtAdBV+FZxTg7/b9lsOV
E14rOprjZqtQp93TCj+8gYvbtzfqZ9w8pakfml9oR1+bu1sDRAB/GT1JBx/d0Wez
lsTwDQP2I9s4veWKWj/KXP6LYe2Es98oSanQy2hzOkaiRJpF8jZ4YN+9hnvyG8PF
klnchK7LPuJpH+T7vfVZ3rxX/PhNMfujGCTNvoB5PCQgNkVP4Ne3u8cR8wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFE7k/cs2dK0SnX5JVRx+nJ6cizRCMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvVHVUOXl6WjByUktkZmtsVkhINmNucHlMTkVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKhK+wAY4
MA0GCSqGSIb3DQEBCwUAA4IBAQBDUQ8t/dI1JoX6D65EOSrPM/uswaWZ7nCmH09N
BwVDz+ZMlnh+asJuIhjCfvfVMdTcGkO8WpuxPb+HQHfiwZlZzeq8z4u5BIEtC8xg
kmn5m5nkUj4W5usPOguSAatiXTRMq+VD5+9UmdGHFADZX6dGbtXkKo6j9oVEkXIA
amT+orqr8j+F8U9PPr8ZH9QNSF7cgtuWEQQvL4YVcp2/Ew6C2mQEUELsPyS8C3uO
eOY7TpBPXBXcqr1yNIzocfqFMSTlMxB6JdNauRN6eMIlFJw3NLqR3XXy3WaKfHMv
vdd6M3VHjQwM6Cq+zYEMxJcE71hPwyoqO002Cdzlbui6NYMg
-----END CERTIFICATE-----
Generated at Sat Jun 1 04:53:39 2024 by rpki-client on console-ams.rpki-client.org