Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cr0TpKI6pEKH9n764BW-gy5APDQ.roa
File: cr0TpKI6pEKH9n764BW-gy5APDQ.roa (raw, json)
Hash identifier: ggjJVd8Sw4rAv/3P6fipVAIJpSanq4Lz8IWP2bE06pk=
Subject key identifier: 72:BD:13:A4:A2:3A:A4:42:87:F6:7E:FA:E0:15:BE:83:2E:40:3C:34
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8E9ED47FA17C87D028298FDF35BFA
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cr0TpKI6pEKH9n764BW-gy5APDQ.roa
Signing time: Mon 01 Jan 2024 20:30:56 +0000
ROA not before: Mon 01 Jan 2024 20:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208752
IP address blocks: 2a0c:9a40:81c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e9:ed:47:fa:17:c8:7d:02:82:98:fd:f3:5b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72bd13a4a23aa44287f67efae015be832e403c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3a:fa:98:26:1b:bd:eb:97:8b:78:3c:67:a8:
0b:3a:ff:2a:37:54:5f:85:89:ae:b5:ee:b4:26:ec:
ab:c8:c2:b7:92:91:f6:51:35:3d:d2:5a:2e:cf:82:
45:e8:46:db:ec:46:39:8c:11:39:94:4d:59:fd:8d:
9c:38:e5:c2:b0:f5:40:ed:04:e6:b7:6c:45:82:7c:
b8:10:86:2b:6a:5f:ea:60:65:e0:98:d7:e1:43:12:
38:91:de:36:bb:97:dc:4a:cd:9e:49:63:bf:61:46:
3a:7c:f7:ef:13:b6:3f:7b:1d:e0:07:b9:42:23:5c:
e8:b9:e1:c8:65:07:f9:c0:20:9b:8f:80:c6:c3:00:
5b:fc:b7:0c:25:ba:50:fd:bd:11:1a:a2:8a:bf:9c:
81:79:51:c3:e2:fd:74:ca:c6:03:58:14:c9:0d:4d:
d8:5c:ac:e4:44:71:98:3d:44:39:16:05:56:ff:79:
8a:04:99:d0:51:42:12:b9:04:07:08:ed:b2:ca:08:
1c:5a:c4:4d:50:ce:d2:e3:b3:19:87:60:db:dd:85:
25:08:d3:fe:5f:e7:66:63:d4:5d:ed:25:85:20:1c:
e3:fa:4c:da:f6:1e:6e:df:b7:25:b5:25:a6:f0:ac:
2d:5a:07:b9:e2:ca:07:24:9d:69:97:88:f0:81:7b:
fc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BD:13:A4:A2:3A:A4:42:87:F6:7E:FA:E0:15:BE:83:2E:40:3C:34
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cr0TpKI6pEKH9n764BW-gy5APDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:81c0::/48
Signature Algorithm: sha256WithRSAEncryption
54:26:42:95:57:b4:02:8b:20:02:e2:59:08:e1:d0:c1:cd:93:
35:e4:9b:60:b3:c9:7d:77:2d:bc:ea:94:69:60:f3:53:d1:e6:
e6:fe:8b:ec:85:e5:50:d5:fa:64:36:cb:10:6c:fb:b9:81:64:
03:84:60:5d:d3:6a:f0:b6:b8:72:6e:41:14:04:07:bd:05:85:
e1:bb:e2:b3:84:53:f0:a4:ff:85:83:07:03:74:e4:cd:8a:58:
35:bf:86:ca:03:ec:2f:54:0e:59:3a:18:cb:1e:0e:96:d6:77:
0c:6d:d8:b3:51:ef:0e:7d:d9:07:cb:11:f9:cd:b7:1e:9f:c4:
64:b8:53:ba:53:45:c0:5e:3f:8b:97:90:e1:e8:4d:28:56:6b:
ed:4e:d3:64:45:55:07:32:23:89:35:16:61:fc:a2:94:22:28:
54:c1:89:87:de:59:03:af:63:25:53:e9:a3:5e:a1:01:d3:c8:
f4:aa:86:0a:5c:38:61:de:6e:01:53:40:4b:56:15:79:60:b9:
d7:3e:0e:58:ef:d9:89:64:da:8e:6a:37:b5:6c:28:e2:99:95:
e4:61:08:76:11:63:23:66:7b:c5:00:dd:00:b8:a2:81:0d:d5:
35:24:bb:9a:29:1c:5a:f3:56:2a:17:02:c4:c0:4b:9c:29:6d:
6e:c6:2a:2a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzGuOntR/oXyH0Cgpj981v6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjQwMTAxMjAzMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmJkMTNhNGEyM2FhNDQyODdmNjdlZmFlMDE1YmU4MzJlNDAzYzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizr6mCYbveuXi3g8Z6gLOv8qN1Rf
hYmute60JuyryMK3kpH2UTU90louz4JF6Ebb7EY5jBE5lE1Z/Y2cOOXCsPVA7QTm
t2xFgny4EIYral/qYGXgmNfhQxI4kd42u5fcSs2eSWO/YUY6fPfvE7Y/ex3gB7lC
I1zoueHIZQf5wCCbj4DGwwBb/LcMJbpQ/b0RGqKKv5yBeVHD4v10ysYDWBTJDU3Y
XKzkRHGYPUQ5FgVW/3mKBJnQUUISuQQHCO2yyggcWsRNUM7S47MZh2Db3YUlCNP+
X+dmY9Rd7SWFIBzj+kza9h5u37cltSWm8KwtWge54soHJJ1pl4jwgXv8EwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHK9E6SiOqRCh/Z++uAVvoMuQDw0MB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvY3IwVHBLSTZwRUtIOW43NjRCVy1neTVBUERRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIHA
MA0GCSqGSIb3DQEBCwUAA4IBAQBUJkKVV7QCiyAC4lkI4dDBzZM15Jtgs8l9dy28
6pRpYPNT0ebm/ovsheVQ1fpkNssQbPu5gWQDhGBd02rwtrhybkEUBAe9BYXhu+Kz
hFPwpP+FgwcDdOTNilg1v4bKA+wvVA5ZOhjLHg6W1ncMbdizUe8OfdkHyxH5zbce
n8RkuFO6U0XAXj+Ll5Dh6E0oVmvtTtNkRVUHMiOJNRZh/KKUIihUwYmH3lkDr2Ml
U+mjXqEB08j0qoYKXDhh3m4BU0BLVhV5YLnXPg5Y79mJZNqOaje1bCjimZXkYQh2
EWMjZnvFAN0AuKKBDdU1JLuaKRxa81YqFwLEwEucKW1uxioq
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:41:16 2024 by rpki-client on console-fra.rpki-client.org