Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/vtIo4CLbl3ph6096UtzMxK6Ew10.roa
File: vtIo4CLbl3ph6096UtzMxK6Ew10.roa (raw, json)
Hash identifier: j9xVxWNIN7GFOpSPXCH7DliIQ/9SMF5pabHmJ1fx6cc=
Subject key identifier: BE:D2:28:E0:22:DB:97:7A:61:EB:4F:7A:52:DC:CC:C4:AE:84:C3:5D
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018CC3B67CBFB1A7BA5486D7FFADA15755C3
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/vtIo4CLbl3ph6096UtzMxK6Ew10.roa
Signing time: Mon 01 Jan 2024 06:29:25 +0000
ROA not before: Mon 01 Jan 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203728
IP address blocks: 2a09:ff00:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7c:bf:b1:a7:ba:54:86:d7:ff:ad:a1:57:55:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bed228e022db977a61eb4f7a52dcccc4ae84c35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:e1:93:7a:ea:9a:3c:06:e1:fa:1c:d4:f1:
8b:ed:b2:b7:8c:26:57:44:98:67:d1:e4:ee:2e:32:
cf:67:5b:8c:34:2c:a1:a7:f5:4f:5f:cb:0f:1a:78:
5c:a6:61:dc:67:64:ca:c6:59:d9:e6:85:5d:35:c9:
aa:d1:5a:c9:c1:43:96:2e:af:11:a5:2d:17:94:26:
ec:15:b3:cb:3f:0a:cc:e7:ce:38:f9:48:05:61:27:
31:6b:ac:7d:6a:52:0f:0e:83:20:30:1b:65:9b:90:
f1:98:a3:7c:f6:83:e2:8b:b7:6f:84:64:45:d1:6e:
25:2a:16:3c:80:1a:50:ee:d8:0a:d9:03:c8:07:05:
fb:93:42:4c:06:69:c5:74:11:eb:a9:da:24:f2:42:
33:6a:13:cf:0e:69:a6:ed:b5:60:bf:ac:1c:35:2b:
1a:b5:4c:bd:f2:12:b5:ba:5a:3c:a1:14:2f:57:36:
8e:89:c4:0d:f2:66:f5:e9:62:3a:86:02:b3:a7:9a:
3f:73:2d:2b:6a:89:8c:9d:80:8c:fe:b9:81:8c:41:
b6:21:fb:60:e0:bc:a2:49:cf:56:f0:9d:97:3d:ce:
a7:1e:d8:6e:d2:d9:60:1a:70:56:ba:4f:6a:f2:1f:
56:c0:3f:d0:7e:0a:2d:c4:70:56:ff:a2:32:13:88:
15:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D2:28:E0:22:DB:97:7A:61:EB:4F:7A:52:DC:CC:C4:AE:84:C3:5D
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/vtIo4CLbl3ph6096UtzMxK6Ew10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:ff00:100::/48
Signature Algorithm: sha256WithRSAEncryption
43:8d:e7:38:62:76:31:6f:3a:9e:c0:4a:e9:b5:88:49:65:8c:
74:04:c4:d9:81:49:67:3c:55:5f:4c:5d:1e:eb:0b:89:2a:0d:
d8:79:1b:fe:c3:f2:01:8b:37:21:2a:1a:79:da:57:53:39:f7:
d0:9a:4d:86:2a:46:22:3a:c8:da:62:c9:aa:86:03:83:8a:4a:
43:3c:88:e0:65:ba:59:85:f8:62:f1:ca:6f:7f:66:1b:6c:87:
99:b1:27:56:c3:08:88:19:e7:36:6d:f3:c7:8f:b5:0e:1a:aa:
67:5b:6b:59:b1:59:57:90:97:28:cc:86:0c:24:6d:bc:b6:6c:
6e:ac:bf:0b:cd:7f:97:f5:0c:c8:08:ba:00:24:f3:a6:dc:66:
42:54:f0:54:11:77:29:86:97:b3:39:89:ed:ea:a8:c6:1b:10:
b2:05:c2:cc:77:d9:86:8f:10:87:16:47:7b:e1:38:09:f1:b3:
40:fc:30:c8:2e:75:a3:47:a2:64:6b:ab:0d:84:a1:15:d5:ce:
87:52:4a:02:45:60:7c:d3:06:61:88:11:19:3e:1b:bc:3b:20:
70:88:e5:e7:e6:0e:5b:42:57:76:0d:dd:f9:fb:c0:6b:0b:08:
f9:af:fc:ce:78:fa:00:02:fa:85:96:7b:d0:86:4d:43:7f:11:
7d:60:86:de
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzDtny/sae6VIbX/62hV1XDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk
YTEzNzAwHhcNMjQwMTAxMDYyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWQyMjhlMDIyZGI5NzdhNjFlYjRmN2E1MmRjY2NjNGFlODRjMzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzzhk3rqmjwG4foc1PGL7bK3jCZX
RJhn0eTuLjLPZ1uMNCyhp/VPX8sPGnhcpmHcZ2TKxlnZ5oVdNcmq0VrJwUOWLq8R
pS0XlCbsFbPLPwrM5844+UgFYScxa6x9alIPDoMgMBtlm5DxmKN89oPii7dvhGRF
0W4lKhY8gBpQ7tgK2QPIBwX7k0JMBmnFdBHrqdok8kIzahPPDmmm7bVgv6wcNSsa
tUy98hK1ulo8oRQvVzaOicQN8mb16WI6hgKzp5o/cy0raomMnYCM/rmBjEG2Iftg
4LyiSc9W8J2XPc6nHthu0tlgGnBWuk9q8h9WwD/QfgotxHBW/6IyE4gVjQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL7SKOAi25d6YetPelLczMSuhMNdMB8GA1UdIwQY
MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt
NjA4MDk1MmYwZTA0LzEvdnRJbzRDTGJsM3BoNjA5NlV0ek14SzZFdzEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0
LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgn/AAEA
MA0GCSqGSIb3DQEBCwUAA4IBAQBDjec4YnYxbzqewErptYhJZYx0BMTZgUlnPFVf
TF0e6wuJKg3YeRv+w/IBizchKhp52ldTOffQmk2GKkYiOsjaYsmqhgODikpDPIjg
ZbpZhfhi8cpvf2YbbIeZsSdWwwiIGec2bfPHj7UOGqpnW2tZsVlXkJcozIYMJG28
tmxurL8LzX+X9QzICLoAJPOm3GZCVPBUEXcphpezOYnt6qjGGxCyBcLMd9mGjxCH
Fkd74TgJ8bNA/DDILnWjR6Jka6sNhKEV1c6HUkoCRWB80wZhiBEZPhu8OyBwiOXn
5g5bQld2Dd35+8BrCwj5r/zOePoAAvqFlnvQhk1DfxF9YIbe
-----END CERTIFICATE-----
Generated at Sat May 18 15:44:34 2024 by rpki-client on console-fra.rpki-client.org