Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/P_PmSlBtNo5ZanXVT2tKMsn9yZw.roa
File: P_PmSlBtNo5ZanXVT2tKMsn9yZw.roa (raw, json)
Hash identifier: lML3C47qW5MY/iVLGx5cFreTXaKHjUvJpO7UFox5iMw=
Subject key identifier: 3F:F3:E6:4A:50:6D:36:8E:59:6A:75:D5:4F:6B:4A:32:C9:FD:C9:9C
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 018CC26D54F92363FC14044AE3D037AD6B86
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/P_PmSlBtNo5ZanXVT2tKMsn9yZw.roa
Signing time: Mon 01 Jan 2024 00:29:54 +0000
ROA not before: Mon 01 Jan 2024 00:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35402
IP address blocks: 2a01:5c8:800::/48 maxlen: 48
2a01:5c8:803::/48 maxlen: 48
2a01:5c8:801::/48 maxlen: 48
2a01:5c8:804::/48 maxlen: 48
2a01:5c8:805::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jul 2024 10:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:54:f9:23:63:fc:14:04:4a:e3:d0:37:ad:6b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: Jan 1 00:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ff3e64a506d368e596a75d54f6b4a32c9fdc99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2a:4f:63:e2:4b:e9:81:a4:c9:b9:81:61:f7:
d8:80:6d:93:81:f4:6b:fb:a3:29:bd:b6:39:f4:09:
5b:d6:dd:2b:b2:d2:e8:93:7f:aa:f6:84:5f:64:dd:
48:30:7c:33:aa:2d:49:d8:a1:ba:aa:04:5c:df:05:
b9:04:93:e3:5b:e3:13:f9:2e:8d:cd:18:c9:51:40:
a1:e8:c7:d7:2d:cb:d1:d5:bd:cb:83:91:ba:94:ca:
86:66:87:1c:76:c9:d8:e2:19:1f:72:44:ed:d3:e5:
ce:f2:85:a7:86:bc:0c:bb:dd:21:f0:48:c8:f5:47:
d8:e2:ef:7b:41:8c:74:bc:8e:c9:d8:78:81:de:6c:
13:b7:f3:ad:f6:e8:c1:6c:1a:96:d5:f3:c5:b0:40:
6f:3f:bc:13:0e:1b:ee:be:a2:64:56:99:79:88:26:
cd:ab:31:ad:9a:33:63:9a:2b:74:c7:89:b8:7e:ae:
a1:8a:7d:ed:ad:57:8c:0c:2a:ae:52:4e:6e:f2:71:
94:62:b6:1e:73:0e:51:90:3d:f8:c5:ce:f8:b3:23:
5d:e0:66:c6:18:6d:8f:4b:57:0b:6e:54:13:34:11:
21:0c:6c:f3:dc:c5:42:90:dd:76:58:e3:e1:10:a8:
90:78:c7:46:a3:6d:73:b9:fb:20:da:78:0e:ca:fa:
4c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F3:E6:4A:50:6D:36:8E:59:6A:75:D5:4F:6B:4A:32:C9:FD:C9:9C
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/P_PmSlBtNo5ZanXVT2tKMsn9yZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:5c8:800::/47
2a01:5c8:803::-2a01:5c8:805:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a5:6a:97:15:7b:ac:e2:0e:80:ea:4f:82:00:9a:c5:bd:64:8b:
30:ec:d5:e2:29:e9:6a:94:11:68:0f:8f:ac:06:39:0a:29:f1:
5a:07:df:df:2a:6a:eb:fd:b2:71:51:54:61:e1:fe:30:01:98:
88:1b:58:d5:ab:40:0a:ce:35:66:2e:08:6b:8a:37:a1:c2:00:
86:87:8f:39:e8:0b:3b:6a:19:bf:d4:1d:e7:6b:9b:48:81:3c:
33:17:8a:34:c3:cf:02:0c:0e:ad:5e:5f:ac:59:31:2c:d4:f8:
5f:92:78:99:82:47:5f:06:dd:1a:e3:82:1b:19:c5:fe:20:d4:
dc:86:13:90:de:82:8f:84:a0:21:44:b4:97:fb:16:c5:52:10:
3b:0c:a0:ea:17:c7:64:6b:79:a8:55:9c:66:f2:46:60:0b:94:
13:3a:48:2e:9f:9d:34:c2:73:92:4e:15:d7:fb:2b:ad:5d:65:
ee:28:23:bb:bd:00:42:70:30:fb:61:be:da:36:a5:05:92:1b:
a7:47:db:9b:73:51:59:70:9c:f7:e3:5d:97:82:f5:4c:38:61:
f5:03:12:37:a0:62:3a:48:59:05:07:15:f7:58:1e:ed:67:90:
7d:f9:4d:63:fe:49:ca:67:83:9d:37:5b:63:64:11:f6:4e:d6:
69:ba:2b:ca
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYzCbVT5I2P8FARK49A3rWuGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMWQ3MmFjMDgyNmUwOWJjMGQxN2RkZWU4YmE4N2Q5NzMx
ZGQ0MTMwHhcNMjQwMTAxMDAyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmYzZTY0YTUwNmQzNjhlNTk2YTc1ZDU0ZjZiNGEzMmM5ZmRjOTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCpPY+JL6YGkybmBYffYgG2TgfRr
+6MpvbY59Alb1t0rstLok3+q9oRfZN1IMHwzqi1J2KG6qgRc3wW5BJPjW+MT+S6N
zRjJUUCh6MfXLcvR1b3Lg5G6lMqGZoccdsnY4hkfckTt0+XO8oWnhrwMu90h8EjI
9UfY4u97QYx0vI7J2HiB3mwTt/Ot9ujBbBqW1fPFsEBvP7wTDhvuvqJkVpl5iCbN
qzGtmjNjmit0x4m4fq6hin3trVeMDCquUk5u8nGUYrYecw5RkD34xc74syNd4GbG
GG2PS1cLblQTNBEhDGzz3MVCkN12WOPhEKiQeMdGo21zufsg2ngOyvpMzwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFD/z5kpQbTaOWWp11U9rSjLJ/cmcMB8GA1UdIwQY
MBaAFAodcqwIJuCbwNF93ui6h9lzHdQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTct
OTU4MTEyYTQ4OWE0LzEvUF9QbVNsQnRObzVaYW5YVlQydEtNc245eVp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTctOTU4MTEyYTQ4OWE0
LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcBKgEFyAgA
MBIDBwAqAQXICAMDBwEqAQXICAQwDQYJKoZIhvcNAQELBQADggEBAKVqlxV7rOIO
gOpPggCaxb1kizDs1eIp6WqUEWgPj6wGOQop8VoH398qauv9snFRVGHh/jABmIgb
WNWrQArONWYuCGuKN6HCAIaHjznoCztqGb/UHedrm0iBPDMXijTDzwIMDq1eX6xZ
MSzU+F+SeJmCR18G3RrjghsZxf4g1NyGE5Dego+EoCFEtJf7FsVSEDsMoOoXx2Rr
eahVnGbyRmALlBM6SC6fnTTCc5JOFdf7K61dZe4oI7u9AEJwMPthvto2pQWSG6dH
25tzUVlwnPfjXZeC9Uw4YfUDEjegYjpIWQUHFfdYHu1nkH35TWP+Scpng503W2Nk
EfZO1mm6K8o=
-----END CERTIFICATE-----
Generated at Fri Jul 5 13:41:57 2024 by rpki-client on console-ams.rpki-client.org