Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/eR4Xoi9YMTuZ73AuJLNC1TaFyZ0.roa
File: eR4Xoi9YMTuZ73AuJLNC1TaFyZ0.roa (raw, json)
Hash identifier: CkchKUXI70te+EcL+aQILI8K5KOlsz1LLLRjCeByAJk=
Subject key identifier: 79:1E:17:A2:2F:58:31:3B:99:EF:70:2E:24:B3:42:D5:36:85:C9:9D
Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Certificate serial: 018CC795475FDF4E62B66DBBF8D8FAAE8B98
Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/eR4Xoi9YMTuZ73AuJLNC1TaFyZ0.roa
Signing time: Tue 02 Jan 2024 00:31:38 +0000
ROA not before: Tue 02 Jan 2024 00:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133846
IP address blocks: 2a09:b280:ff80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:47:5f:df:4e:62:b6:6d:bb:f8:d8:fa:ae:8b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Validity
Not Before: Jan 2 00:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=791e17a22f58313b99ef702e24b342d53685c99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:39:fb:bd:30:54:61:83:5b:67:66:67:4d:e8:
80:d7:41:9f:da:1b:de:3d:81:a3:34:39:51:65:a2:
22:38:58:d8:fe:c4:f3:bb:91:88:61:78:24:5c:54:
ec:1c:05:c8:9f:6b:3e:f9:12:02:6c:a1:f9:76:9b:
49:a0:47:cf:30:5e:9f:dd:e1:c9:ad:78:a0:a8:94:
87:65:ff:77:ce:a0:30:ba:4e:8c:93:b7:16:db:94:
6e:4a:3e:98:33:0f:96:09:d6:77:35:f2:15:66:03:
83:bd:89:f0:12:7e:e0:ab:f5:0c:9a:4a:93:f9:7d:
ef:0b:07:56:c7:74:f0:2c:d4:dd:af:42:ef:36:97:
58:84:d8:7b:fd:cb:5e:bc:2f:18:b1:7d:de:d2:42:
7c:d8:08:f0:28:ea:4a:51:77:55:57:cf:89:8e:f0:
08:ac:dd:c8:58:9b:02:0d:26:ad:e1:c0:a2:78:56:
de:a9:e7:7d:ad:9b:37:4f:06:fb:2c:ea:bc:d0:57:
84:d2:1e:3f:81:47:cd:dd:4e:61:90:61:4c:57:fc:
6f:b0:b8:53:95:7c:74:f8:d3:f4:7c:d0:7b:5d:cb:
80:ce:0c:5b:c5:9d:66:78:03:d2:c0:4d:bf:92:ba:
5e:ec:19:10:2f:c0:6f:25:b9:8d:8e:2a:09:2d:72:
88:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1E:17:A2:2F:58:31:3B:99:EF:70:2E:24:B3:42:D5:36:85:C9:9D
X509v3 Authority Key Identifier:
keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/eR4Xoi9YMTuZ73AuJLNC1TaFyZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:b280:ff80::/44
Signature Algorithm: sha256WithRSAEncryption
62:ad:de:c8:b6:f8:ca:cb:a8:eb:c8:af:de:44:e0:18:ab:02:
fb:0d:38:58:48:8a:32:2e:46:e9:62:50:98:11:f6:ff:2f:b5:
fa:98:80:c1:91:a6:6f:17:c3:f7:32:8f:a9:9c:4a:67:d7:a1:
c3:aa:26:3a:85:30:bf:b1:a2:32:3a:6d:87:4d:d0:ef:36:15:
0a:97:f1:40:15:fb:1b:8e:6a:f6:ae:4d:3e:8f:3c:82:aa:d8:
35:88:4d:e8:f3:e0:68:bf:11:a5:38:da:67:a5:f6:c7:1d:43:
41:b5:3a:85:7e:19:88:db:0a:eb:64:c8:91:c4:f7:3e:15:8f:
75:69:4b:6c:65:de:f5:de:57:27:88:83:37:40:0c:5d:4e:41:
75:ce:b3:75:79:c2:50:e9:84:53:6e:24:88:9a:56:16:6f:8d:
93:71:87:fe:37:c7:83:9b:48:82:8d:2b:b8:15:3a:ec:a7:c9:
ea:23:56:e5:3d:1f:ab:07:75:40:ba:ed:8b:bc:c2:22:a9:f4:
b0:f5:42:15:c2:2c:06:fa:64:d1:47:04:fc:45:1f:66:42:1b:
6b:2a:f0:9f:95:f1:cc:dd:b8:dd:f3:41:52:28:c7:51:fd:02:
24:c2:82:a1:43:b7:82:3e:40:14:c7:43:d6:c4:a3:72:0b:85:
27:46:7b:8a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzHlUdf305itm27+Nj6rouYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2
YjJiNDIwHhcNMjQwMTAyMDAzMTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTFlMTdhMjJmNTgzMTNiOTllZjcwMmUyNGIzNDJkNTM2ODVjOTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzn7vTBUYYNbZ2ZnTeiA10Gf2hve
PYGjNDlRZaIiOFjY/sTzu5GIYXgkXFTsHAXIn2s++RICbKH5dptJoEfPMF6f3eHJ
rXigqJSHZf93zqAwuk6Mk7cW25RuSj6YMw+WCdZ3NfIVZgODvYnwEn7gq/UMmkqT
+X3vCwdWx3TwLNTdr0LvNpdYhNh7/ctevC8YsX3e0kJ82AjwKOpKUXdVV8+JjvAI
rN3IWJsCDSat4cCieFbeqed9rZs3Twb7LOq80FeE0h4/gUfN3U5hkGFMV/xvsLhT
lXx0+NP0fNB7XcuAzgxbxZ1meAPSwE2/krpe7BkQL8BvJbmNjioJLXKIFQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHkeF6IvWDE7me9wLiSzQtU2hcmdMB8GA1UdIwQY
MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt
YzEyMjE4NzY1MTU0LzEvZVI0WG9pOVlNVHVaNzNBdUpMTkMxVGFGeVowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0
LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgmygP+A
MA0GCSqGSIb3DQEBCwUAA4IBAQBird7ItvjKy6jryK/eROAYqwL7DThYSIoyLkbp
YlCYEfb/L7X6mIDBkaZvF8P3Mo+pnEpn16HDqiY6hTC/saIyOm2HTdDvNhUKl/FA
Ffsbjmr2rk0+jzyCqtg1iE3o8+BovxGlONpnpfbHHUNBtTqFfhmI2wrrZMiRxPc+
FY91aUtsZd713lcniIM3QAxdTkF1zrN1ecJQ6YRTbiSImlYWb42TcYf+N8eDm0iC
jSu4FTrsp8nqI1blPR+rB3VAuu2LvMIiqfSw9UIVwiwG+mTRRwT8RR9mQhtrKvCf
lfHM3bjd80FSKMdR/QIkwoKhQ7eCPkAUx0PWxKNyC4UnRnuK
-----END CERTIFICATE-----
Generated at Thu May 2 10:12:36 2024 by rpki-client on console-fra.rpki-client.org