Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/I92zcuhE3ti1RfZSaz_OlUPUm-Q.roa
File: I92zcuhE3ti1RfZSaz_OlUPUm-Q.roa (raw, json)
Hash identifier: vOynwGxyuamd8urhOvVFhHS7TE9yCoIiw8tdtnjKmQs=
Subject key identifier: 23:DD:B3:72:E8:44:DE:D8:B5:45:F6:52:6B:3F:CE:95:43:D4:9B:E4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CC9BC2B3B92CA14CA0FFAAA45D65F1D77
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/I92zcuhE3ti1RfZSaz_OlUPUm-Q.roa
Signing time: Tue 02 Jan 2024 10:33:21 +0000
ROA not before: Tue 02 Jan 2024 10:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216246
IP address blocks: 2a0f:4f80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:2b:3b:92:ca:14:ca:0f:fa:aa:45:d6:5f:1d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 10:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23ddb372e844ded8b545f6526b3fce9543d49be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:b9:1c:64:df:7b:dd:99:8c:bb:7e:4d:18:
43:9d:1a:98:42:24:cc:bc:19:18:46:05:2f:be:7b:
70:59:e8:b3:6a:a0:a8:7b:93:b5:29:b2:a0:83:88:
51:43:38:94:ee:8b:8d:f0:bc:00:6a:a9:7b:cd:74:
e6:c4:e5:7a:e5:3d:3f:c7:bc:f0:5f:f9:22:08:61:
12:ba:61:5a:9d:3f:10:52:f6:27:62:8f:ca:0f:20:
c2:66:39:d0:87:7a:a7:93:8d:67:e5:c7:67:71:ba:
f9:63:0a:e4:d5:a9:f9:6b:8a:2a:73:05:e2:b1:ac:
86:f2:12:d8:9d:22:39:ee:61:91:06:e3:2d:80:b0:
4b:1d:ad:20:be:e2:1b:cc:9a:38:fb:a2:ed:49:08:
ca:13:ad:64:4b:56:8c:8b:55:dc:3d:74:c8:e1:4d:
67:71:d3:94:90:c1:be:6e:a5:45:b9:48:d7:38:36:
c6:d2:6b:48:2f:72:cd:d9:11:91:82:99:4a:be:83:
1b:76:c0:a9:cb:e0:33:76:63:8a:60:56:a3:67:06:
c4:ca:cf:63:4b:bc:59:00:01:a1:3f:9c:fc:12:7b:
e3:e9:57:9a:e2:0a:4b:2a:36:98:08:5c:3c:b6:fe:
e1:7b:da:4a:6e:36:70:7e:9c:18:df:bb:fd:0e:6f:
9d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DD:B3:72:E8:44:DE:D8:B5:45:F6:52:6B:3F:CE:95:43:D4:9B:E4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/I92zcuhE3ti1RfZSaz_OlUPUm-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4f80::/29
Signature Algorithm: sha256WithRSAEncryption
3f:0b:da:eb:b1:a5:45:5c:ca:28:bb:19:6d:bf:7d:86:f0:e6:
c2:dc:f8:6f:7f:c2:15:7f:19:02:78:6f:95:a3:e4:86:cc:a4:
18:21:15:58:1d:d2:e4:95:22:a9:e2:c6:86:b7:9e:24:b6:99:
f1:6c:8e:62:12:1c:6f:51:ab:9d:e0:89:95:b0:a4:05:82:15:
de:be:63:e0:d8:7a:ca:3d:e8:6d:fd:10:ec:a6:3c:d2:f2:f8:
7d:aa:e9:86:6d:9e:58:45:ee:03:81:81:39:91:3d:d4:0c:d4:
7f:f0:d7:d1:01:da:d9:5d:cb:84:a9:c8:b6:d6:23:df:5c:75:
cf:b7:b9:2d:ac:20:b4:e4:9a:33:45:5d:fc:57:5d:ea:90:84:
99:fd:3d:10:da:42:86:c3:84:91:9c:69:03:81:85:cd:4e:0f:
a2:9f:20:55:e9:76:8c:75:c3:99:18:1a:98:ad:aa:29:30:bc:
b6:73:3a:ad:6a:7a:b0:c0:ec:bf:f9:9a:2a:5d:f8:55:16:3e:
18:6c:64:18:a4:7f:eb:7b:03:30:9e:a8:1d:9a:d1:47:cc:8d:
93:97:2e:dc:f1:c3:7f:d3:b3:09:fb:60:af:78:04:bf:8e:95:
46:78:79:08:8f:dc:47:14:39:a3:7f:64:08:1f:f0:5f:2e:7e:
1f:c5:ef:7a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzJvCs7ksoUyg/6qkXWXx13MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwMTAyMTAzMzIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2RkYjM3MmU4NDRkZWQ4YjU0NWY2NTI2YjNmY2U5NTQzZDQ5YmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMm5HGTfe92ZjLt+TRhDnRqYQiTM
vBkYRgUvvntwWeizaqCoe5O1KbKgg4hRQziU7ouN8LwAaql7zXTmxOV65T0/x7zw
X/kiCGESumFanT8QUvYnYo/KDyDCZjnQh3qnk41n5cdncbr5Ywrk1an5a4oqcwXi
sayG8hLYnSI57mGRBuMtgLBLHa0gvuIbzJo4+6LtSQjKE61kS1aMi1XcPXTI4U1n
cdOUkMG+bqVFuUjXODbG0mtIL3LN2RGRgplKvoMbdsCpy+AzdmOKYFajZwbEys9j
S7xZAAGhP5z8Envj6Vea4gpLKjaYCFw8tv7he9pKbjZwfpwY37v9Dm+dcwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCPds3LoRN7YtUX2Ums/zpVD1JvkMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvSTkyemN1aEUzdGkxUmZaU2F6X09sVVBVbS1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg9PgDAN
BgkqhkiG9w0BAQsFAAOCAQEAPwva67GlRVzKKLsZbb99hvDmwtz4b3/CFX8ZAnhv
laPkhsykGCEVWB3S5JUiqeLGhreeJLaZ8WyOYhIcb1GrneCJlbCkBYIV3r5j4Nh6
yj3obf0Q7KY80vL4farphm2eWEXuA4GBOZE91AzUf/DX0QHa2V3LhKnIttYj31x1
z7e5LawgtOSaM0Vd/Fdd6pCEmf09ENpChsOEkZxpA4GFzU4Pop8gVel2jHXDmRga
mK2qKTC8tnM6rWp6sMDsv/maKl34VRY+GGxkGKR/63sDMJ6oHZrRR8yNk5cu3PHD
f9OzCftgr3gEv46VRnh5CI/cRxQ5o39kCB/wXy5+H8Xveg==
-----END CERTIFICATE-----
Generated at Sat Jun 1 05:07:41 2024 by rpki-client on console-fra.rpki-client.org