Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jfcXUC1NytQN0hS3kDb4A0dr5ak.roa
File: jfcXUC1NytQN0hS3kDb4A0dr5ak.roa (raw, json)
Hash identifier: g1ikioNoiVlD5K93+JaiPrRFj3G8HKd2BLclFUEQ0DE=
Subject key identifier: 8D:F7:17:50:2D:4D:CA:D4:0D:D2:14:B7:90:36:F8:03:47:6B:E5:A9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCE575CCF2621932EB61885F8F5915
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jfcXUC1NytQN0hS3kDb4A0dr5ak.roa
Signing time: Tue 02 Jan 2024 06:29:28 +0000
ROA not before: Tue 02 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47748
IP address blocks: 2a00:1728:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:e5:75:cc:f2:62:19:32:eb:61:88:5f:8f:59:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8df717502d4dcad40dd214b79036f803476be5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:22:86:a2:78:c5:97:86:a2:a0:62:66:70:d8:
9d:d7:6f:b1:fe:29:b2:28:64:41:00:a0:13:d0:27:
8a:6f:82:87:57:37:82:8d:8b:c8:16:95:b2:17:60:
b9:89:d6:a0:59:cb:6f:5d:d0:36:80:52:80:c5:8c:
7f:a3:3d:ac:0f:20:9d:c4:d7:4b:8a:fc:41:b8:eb:
eb:db:71:46:d0:10:c7:8e:bf:81:df:1e:d0:2b:e1:
4a:ff:74:e7:04:e6:ab:9f:71:49:c7:ec:46:17:2e:
14:38:86:56:2f:48:a7:94:3f:10:3b:ca:fa:11:47:
b9:e0:ee:5f:be:7a:42:c3:8a:94:d8:43:d6:19:6d:
ab:dd:8a:a3:b8:89:5e:a2:02:f1:63:1f:8a:88:4e:
5b:82:f8:97:c3:33:cc:41:ef:5f:39:ef:50:2f:cb:
67:99:a5:d2:09:fb:1d:ef:40:3b:20:d4:13:2d:f0:
ab:ab:f0:68:81:45:c7:84:52:f5:92:60:83:0b:94:
8f:bf:59:38:7e:73:b9:3f:a6:35:70:97:ba:9d:f1:
59:69:e3:e0:99:44:53:c3:0f:2a:69:07:dd:38:59:
73:b9:14:ea:77:fb:f5:23:01:9f:2c:20:9c:aa:09:
84:f9:5c:3c:af:7b:d1:cc:bc:30:ba:ad:43:8d:22:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F7:17:50:2D:4D:CA:D4:0D:D2:14:B7:90:36:F8:03:47:6B:E5:A9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jfcXUC1NytQN0hS3kDb4A0dr5ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1728:19::/48
Signature Algorithm: sha256WithRSAEncryption
02:0b:70:08:05:40:d7:83:8b:bd:cd:44:15:95:c7:34:ee:5e:
bc:56:dd:6c:34:76:cd:44:c0:c5:37:ab:86:a2:26:11:a2:e4:
02:ca:9d:2c:f8:29:c5:5e:11:35:ad:3c:de:4c:60:bb:ce:37:
7e:b6:25:37:51:fb:00:76:52:13:4c:96:bf:94:da:59:c5:02:
54:08:84:c2:b1:a6:1c:f8:7d:4b:93:1c:86:cd:73:39:b8:91:
d9:86:af:6f:b2:81:4e:cc:17:67:75:1f:13:9c:58:c2:dd:b6:
10:c1:1c:f0:27:84:03:9d:ed:9f:7e:d1:63:0a:9d:a0:51:8d:
6c:e3:63:d4:ea:d6:90:73:79:d3:8f:2e:95:64:73:b0:e4:dd:
5a:45:57:11:59:79:cd:e9:4c:78:18:36:a5:5d:43:5f:b7:f0:
c8:62:b9:f9:ed:6a:0a:14:f9:a6:ff:75:65:ea:5a:9d:62:45:
2b:8b:ed:51:1c:c8:1f:85:bb:6d:4c:db:9a:fd:3d:4f:76:82:
22:68:59:cc:5e:13:a2:e7:b3:73:91:e9:3b:3f:9e:06:26:10:
f8:8b:a3:33:67:30:6d:15:7c:54:55:4d:dc:10:3a:c6:fc:c6:
3c:5d:d2:49:24:95:a5:db:65:77:83:57:04:d8:d9:31:29:fd:
a6:01:17:da
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzI3OV1zPJiGTLrYYhfj1kVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTAyMDYyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGY3MTc1MDJkNGRjYWQ0MGRkMjE0Yjc5MDM2ZjgwMzQ3NmJlNWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyKGonjFl4aioGJmcNid12+x/imy
KGRBAKAT0CeKb4KHVzeCjYvIFpWyF2C5idagWctvXdA2gFKAxYx/oz2sDyCdxNdL
ivxBuOvr23FG0BDHjr+B3x7QK+FK/3TnBOarn3FJx+xGFy4UOIZWL0inlD8QO8r6
EUe54O5fvnpCw4qU2EPWGW2r3YqjuIleogLxYx+KiE5bgviXwzPMQe9fOe9QL8tn
maXSCfsd70A7INQTLfCrq/BogUXHhFL1kmCDC5SPv1k4fnO5P6Y1cJe6nfFZaePg
mURTww8qaQfdOFlzuRTqd/v1IwGfLCCcqgmE+Vw8r3vRzLwwuq1DjSKRSQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI33F1AtTcrUDdIUt5A2+ANHa+WpMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvamZjWFVDMU55dFFOMGhTM2tEYjRBMGRyNWFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgAXKAAZ
MA0GCSqGSIb3DQEBCwUAA4IBAQACC3AIBUDXg4u9zUQVlcc07l68Vt1sNHbNRMDF
N6uGoiYRouQCyp0s+CnFXhE1rTzeTGC7zjd+tiU3UfsAdlITTJa/lNpZxQJUCITC
saYc+H1LkxyGzXM5uJHZhq9vsoFOzBdndR8TnFjC3bYQwRzwJ4QDne2fftFjCp2g
UY1s42PU6taQc3nTjy6VZHOw5N1aRVcRWXnN6Ux4GDalXUNft/DIYrn57WoKFPmm
/3Vl6lqdYkUri+1RHMgfhbttTNua/T1PdoIiaFnMXhOi57Nzkek7P54GJhD4i6Mz
ZzBtFXxUVU3cEDrG/MY8XdJJJJWl22V3g1cE2NkxKf2mARfa
-----END CERTIFICATE-----
Generated at Sun Apr 28 10:04:20 2024 by rpki-client on console-ams.rpki-client.org