Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/SqO6yHNgwsNOjtv4CZwU6RSKQlM.roa
File: SqO6yHNgwsNOjtv4CZwU6RSKQlM.roa (raw, json)
Hash identifier: U8JNS9W+Sjj28zE43FixkLwbmraMARdM0SqF4MiLHt0=
Subject key identifier: 4A:A3:BA:C8:73:60:C2:C3:4E:8E:DB:F8:09:9C:14:E9:14:8A:42:53
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01904EC2E834EA58B5235196D6A6CCCDCFA0
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/SqO6yHNgwsNOjtv4CZwU6RSKQlM.roa
Signing time: Tue 25 Jun 2024 09:38:34 +0000
ROA not before: Tue 25 Jun 2024 09:38:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215259
IP address blocks: 2a0c:9a40:8530::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:c2:e8:34:ea:58:b5:23:51:96:d6:a6:cc:cd:cf:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jun 25 09:38:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4aa3bac87360c2c34e8edbf8099c14e9148a4253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:66:60:63:8e:1d:f8:53:cd:fc:94:31:64:
71:f1:85:14:7f:fd:9d:ad:55:ab:e5:a5:0b:18:4f:
14:b7:56:b4:f0:19:ac:6c:4b:02:ce:b3:c6:c5:7b:
c4:7c:d3:80:93:74:d2:41:76:47:d9:b0:ca:e4:bd:
7d:c5:45:34:9c:cd:42:9c:c6:bb:15:a0:13:2c:36:
ed:b4:e4:ea:36:b7:61:b3:93:91:ca:ae:02:b9:2f:
8a:9b:3d:93:08:ad:cf:b5:69:f3:84:a5:db:18:c9:
22:78:b3:08:8d:b9:13:2a:b8:43:fc:b8:dd:97:5b:
f3:13:48:45:27:09:4b:06:5d:4e:f2:52:4d:43:c4:
69:91:56:61:b4:32:6d:39:2a:d8:de:54:ef:05:cf:
34:fd:1e:63:33:4d:43:8f:41:7d:3a:ef:34:b5:c2:
3e:e8:f6:ca:24:3c:89:86:fa:09:68:01:c8:ef:f3:
da:db:e4:99:cf:0a:bd:b1:c4:7f:e3:12:5e:4d:74:
d6:6b:55:ac:cd:0f:73:6d:45:1d:d8:38:ba:26:ba:
73:58:42:0c:42:23:04:57:37:aa:93:e8:3f:1c:ef:
bf:a0:c3:b8:d8:67:91:f5:f6:e9:d6:c3:ae:d6:38:
5e:e4:f2:d3:7d:db:92:05:1b:66:8d:31:1c:74:47:
40:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A3:BA:C8:73:60:C2:C3:4E:8E:DB:F8:09:9C:14:E9:14:8A:42:53
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/SqO6yHNgwsNOjtv4CZwU6RSKQlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8530::/48
Signature Algorithm: sha256WithRSAEncryption
1d:69:e9:89:36:bc:db:69:c8:0e:b8:29:20:95:a9:ac:18:8a:
87:ac:af:5c:65:7b:d6:ec:bd:5c:d9:d9:0e:a7:1a:dc:8f:60:
86:fc:91:8b:43:a2:c0:5c:6f:c0:fe:1e:0c:6d:66:4c:82:09:
cd:c5:fc:47:36:ed:49:d8:55:0d:ef:eb:b7:bf:e4:45:6e:12:
02:64:b4:7a:de:8e:e7:f7:d7:87:02:da:57:c3:f7:cf:fa:a2:
0c:b5:82:0e:20:0f:be:5d:75:20:d1:09:5a:5b:92:e8:df:fe:
2d:6f:b8:d7:e7:71:fa:a6:01:f0:22:f8:54:93:ac:3c:a9:30:
6e:c8:e5:fb:67:e1:00:89:58:f0:fc:2d:3c:bb:53:91:8e:ed:
1e:75:be:9d:e9:79:33:0d:b0:ce:a9:5c:65:af:03:df:ac:23:
1b:7c:0b:64:08:53:a7:d4:2d:0b:f9:e0:9d:30:c2:39:7c:46:
dc:8c:c7:3a:8c:1a:c2:6d:7d:8e:ee:7a:c6:11:33:84:16:fc:
f2:3a:a5:b4:5e:56:3c:42:d6:b8:f5:61:37:9f:8e:12:41:b5:
08:01:ca:b8:36:fa:ee:34:5e:a0:61:21:c9:dd:5b:7d:1d:fc:
67:79:44:76:9c:cb:06:4f:26:b4:41:50:cb:a9:55:17:bb:26:
7e:81:22:08
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZBOwug06li1I1GW1qbMzc+gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjQwNjI1MDkzODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWEzYmFjODczNjBjMmMzNGU4ZWRiZjgwOTljMTRlOTE0OGE0MjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgFmYGOOHfhTzfyUMWRx8YUUf/2d
rVWr5aULGE8Ut1a08BmsbEsCzrPGxXvEfNOAk3TSQXZH2bDK5L19xUU0nM1CnMa7
FaATLDbttOTqNrdhs5ORyq4CuS+Kmz2TCK3PtWnzhKXbGMkieLMIjbkTKrhD/Ljd
l1vzE0hFJwlLBl1O8lJNQ8RpkVZhtDJtOSrY3lTvBc80/R5jM01Dj0F9Ou80tcI+
6PbKJDyJhvoJaAHI7/Pa2+SZzwq9scR/4xJeTXTWa1WszQ9zbUUd2Di6JrpzWEIM
QiMEVzeqk+g/HO+/oMO42GeR9fbp1sOu1jhe5PLTfduSBRtmjTEcdEdAMwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEqjushzYMLDTo7b+AmcFOkUikJTMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvU3FPNnlITmd3c05PanR2NENad1U2UlNLUWxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIUw
MA0GCSqGSIb3DQEBCwUAA4IBAQAdaemJNrzbacgOuCkglamsGIqHrK9cZXvW7L1c
2dkOpxrcj2CG/JGLQ6LAXG/A/h4MbWZMggnNxfxHNu1J2FUN7+u3v+RFbhICZLR6
3o7n99eHAtpXw/fP+qIMtYIOIA++XXUg0QlaW5Lo3/4tb7jX53H6pgHwIvhUk6w8
qTBuyOX7Z+EAiVjw/C08u1ORju0edb6d6XkzDbDOqVxlrwPfrCMbfAtkCFOn1C0L
+eCdMMI5fEbcjMc6jBrCbX2O7nrGETOEFvzyOqW0XlY8Qta49WE3n44SQbUIAcq4
NvruNF6gYSHJ3Vt9HfxneUR2nMsGTya0QVDLqVUXuyZ+gSII
-----END CERTIFICATE-----
Generated at Sun Nov 24 17:24:50 2024 by rpki-client on console-fra.rpki-client.org