Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/U1FVLRAA0U568kx-Pf4yLKXa4Tg.roa
File: U1FVLRAA0U568kx-Pf4yLKXa4Tg.roa (raw, json)
Hash identifier: YnvClmWKINFIG0NFjg/qqZ7vVXudVgAQNIj6kx5T4b0=
Subject key identifier: 53:51:55:2D:10:00:D1:4E:7A:F2:4C:7E:3D:FE:32:2C:A5:DA:E1:38
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018EACF30FBA0BD25F8F12754FF8A791B7C4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/U1FVLRAA0U568kx-Pf4yLKXa4Tg.roa
Signing time: Fri 05 Apr 2024 06:29:54 +0000
ROA not before: Fri 05 Apr 2024 06:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 2a07:7880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ac:f3:0f:ba:0b:d2:5f:8f:12:75:4f:f8:a7:91:b7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 5 06:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5351552d1000d14e7af24c7e3dfe322ca5dae138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a0:b1:f6:5b:4e:61:8f:f4:f8:52:fd:97:fb:
6f:15:e5:f0:a1:37:83:e9:b9:28:32:1f:6d:d1:7c:
0d:72:cf:a9:53:7d:e3:24:37:bd:79:22:d2:c0:b7:
9d:41:0e:95:c1:a6:a4:83:75:42:71:a8:06:ed:fc:
5e:80:63:1f:56:2f:20:c7:f8:db:25:45:e8:67:52:
94:d1:16:c9:7a:c1:03:f6:bc:01:2f:e0:cd:a6:3f:
87:9f:24:29:38:1b:8c:fb:11:62:ce:05:2f:32:6c:
fb:af:a4:bb:ac:91:f6:c8:80:07:d5:76:29:4f:33:
6d:e2:84:fa:b3:2a:09:50:54:34:93:f7:a9:82:91:
86:bd:ed:51:e3:0c:9d:99:76:d7:1a:03:18:c0:7e:
8f:db:fd:18:a7:b7:1c:55:c0:05:0d:64:0c:b6:06:
86:bf:4c:3d:36:39:a9:d9:a4:f3:9d:80:4c:61:32:
ee:34:89:7a:a6:b9:dc:b2:bc:62:7b:ba:25:cb:7d:
f0:25:91:2b:3f:42:f1:3e:cc:1a:22:26:61:56:59:
bf:23:fc:00:74:70:75:b6:81:58:5d:4f:5a:e0:69:
3b:19:bb:90:3b:df:be:d0:85:37:c4:bf:d9:13:19:
4d:dd:e0:b7:fa:10:f3:45:8e:79:a1:1d:9c:69:db:
f6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:51:55:2D:10:00:D1:4E:7A:F2:4C:7E:3D:FE:32:2C:A5:DA:E1:38
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/U1FVLRAA0U568kx-Pf4yLKXa4Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:7880::/29
Signature Algorithm: sha256WithRSAEncryption
3d:dd:bf:27:5c:a9:ed:3d:2d:de:f3:99:1c:4f:94:7b:40:03:
eb:5c:72:f4:80:a2:e2:a6:ae:c6:44:f6:d9:9b:1b:8d:f4:81:
41:4f:35:1a:6a:46:57:ec:6d:35:d5:6f:19:a0:0c:4a:9f:81:
ea:18:45:01:cc:d3:65:db:f0:ee:f9:1f:a4:63:a5:e7:88:ca:
87:cf:54:7f:57:f3:ea:4f:42:ec:d2:b0:1a:31:81:23:6d:49:
37:29:83:22:89:31:ca:b3:63:a2:78:c2:0e:b3:ff:bd:03:fe:
88:7b:e8:4d:5c:36:82:c9:88:2d:db:2f:f0:a6:60:7f:1c:ae:
f4:c9:f9:78:92:de:05:2a:24:32:c4:f5:6f:b2:60:51:ef:62:
46:66:65:c5:e5:3c:72:ad:8b:cf:d4:4b:1c:f7:0c:d4:16:5b:
4f:85:bd:01:03:5a:56:75:30:76:0f:16:4c:8f:67:10:4c:4e:
13:6a:62:3e:b2:96:b0:1f:f8:96:37:85:3d:a0:49:17:05:8f:
12:6c:c6:8a:1e:ad:00:14:30:85:fb:b9:d3:f3:fa:1c:98:16:
2a:ff:11:bb:b1:58:20:aa:79:a5:de:fd:ee:b9:44:93:b2:41:
18:e0:dd:7f:27:84:ff:bc:b2:88:8e:09:44:7a:69:52:54:f9:
f3:27:90:66
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY6s8w+6C9JfjxJ1T/inkbfEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwNDA1MDYyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzUxNTUyZDEwMDBkMTRlN2FmMjRjN2UzZGZlMzIyY2E1ZGFlMTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6Cx9ltOYY/0+FL9l/tvFeXwoTeD
6bkoMh9t0XwNcs+pU33jJDe9eSLSwLedQQ6Vwaakg3VCcagG7fxegGMfVi8gx/jb
JUXoZ1KU0RbJesED9rwBL+DNpj+HnyQpOBuM+xFizgUvMmz7r6S7rJH2yIAH1XYp
TzNt4oT6syoJUFQ0k/epgpGGve1R4wydmXbXGgMYwH6P2/0Yp7ccVcAFDWQMtgaG
v0w9Njmp2aTznYBMYTLuNIl6prncsrxie7oly33wJZErP0LxPswaIiZhVlm/I/wA
dHB1toFYXU9a4Gk7GbuQO9++0IU3xL/ZExlN3eC3+hDzRY55oR2cadv2ewIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFNRVS0QANFOevJMfj3+Miyl2uE4MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvVTFGVkxSQUEwVTU2OGt4LVBmNHlMS1hhNFRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgd4gDAN
BgkqhkiG9w0BAQsFAAOCAQEAPd2/J1yp7T0t3vOZHE+Ue0AD61xy9ICi4qauxkT2
2ZsbjfSBQU81GmpGV+xtNdVvGaAMSp+B6hhFAczTZdvw7vkfpGOl54jKh89Uf1fz
6k9C7NKwGjGBI21JNymDIokxyrNjonjCDrP/vQP+iHvoTVw2gsmILdsv8KZgfxyu
9Mn5eJLeBSokMsT1b7JgUe9iRmZlxeU8cq2Lz9RLHPcM1BZbT4W9AQNaVnUwdg8W
TI9nEExOE2piPrKWsB/4ljeFPaBJFwWPEmzGih6tABQwhfu50/P6HJgWKv8Ru7FY
IKp5pd797rlEk7JBGODdfyeE/7yyiI4JRHppUlT58yeQZg==
-----END CERTIFICATE-----
Generated at Thu May 2 22:37:42 2024 by rpki-client on console-ams.rpki-client.org