Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/Un3HZMsYaGcdsoqD4W7Y5gJ0PiQ.roa
File: Un3HZMsYaGcdsoqD4W7Y5gJ0PiQ.roa (raw, json)
Hash identifier: zf2Pu1+W9pI+WvtFq6d3ecZtvKny4JaQzeEXAuxLJ0o=
Subject key identifier: 52:7D:C7:64:CB:18:68:67:1D:B2:8A:83:E1:6E:D8:E6:02:74:3E:24
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 01933EE4EBDA9231290B457100BDFBB30A35
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/Un3HZMsYaGcdsoqD4W7Y5gJ0PiQ.roa
Signing time: Mon 18 Nov 2024 10:50:10 +0000
ROA not before: Mon 18 Nov 2024 10:50:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204137
IP address blocks: 2a02:6860::/34 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:e4:eb:da:92:31:29:0b:45:71:00:bd:fb:b3:0a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Nov 18 10:50:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=527dc764cb1868671db28a83e16ed8e602743e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:a7:39:cd:8a:bc:ad:f3:14:95:bb:cc:9a:
ad:16:89:b2:81:0d:b3:54:a8:19:18:a4:f4:27:cb:
19:b6:fa:02:1d:04:80:67:05:e9:07:b9:c4:69:ea:
ce:d8:6c:91:cf:ab:08:67:2d:16:02:bb:8e:5c:25:
9f:c2:4c:22:50:b4:db:f7:52:eb:4d:aa:0d:d1:82:
90:5e:31:7b:39:fe:40:cd:c2:fe:99:7b:9e:01:23:
22:6c:70:4d:4f:81:a8:e1:c0:47:ec:d9:06:be:ef:
c9:f1:68:42:33:20:d0:d1:37:04:f6:7d:64:49:1e:
bb:5e:84:11:29:ca:14:63:2d:0a:ff:bc:c4:aa:8e:
08:c7:fb:84:0a:6a:81:ad:02:87:b8:aa:a7:6e:e8:
a6:1a:f4:68:f5:73:b8:5c:0c:79:30:bf:18:2d:0a:
6e:e5:3e:bd:d1:48:22:a1:17:4f:9f:c4:fd:64:22:
40:4c:cb:d7:93:3e:de:11:62:e4:06:96:22:16:ea:
bf:fd:89:24:9c:f3:c6:4a:9f:e4:5c:e6:9e:d9:c4:
ae:2a:b0:6b:45:4d:46:06:a4:28:55:6d:4a:42:53:
71:05:2f:e6:2d:33:34:f6:02:c9:db:34:aa:8c:b8:
42:66:9e:dc:9f:c6:8b:b8:ae:5d:8b:e6:bb:7a:cb:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7D:C7:64:CB:18:68:67:1D:B2:8A:83:E1:6E:D8:E6:02:74:3E:24
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/Un3HZMsYaGcdsoqD4W7Y5gJ0PiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6860::/34
Signature Algorithm: sha256WithRSAEncryption
33:97:6f:d1:94:70:1a:c7:6f:e8:ce:22:4d:d9:e2:37:d3:85:
d1:2e:8c:17:fd:09:53:da:d7:b7:69:8a:c5:8d:27:3a:76:c7:
ef:c4:a9:62:6a:c5:20:4e:54:e1:74:69:05:bb:d7:66:fc:25:
5d:9e:71:31:00:ea:9c:8d:6c:b2:38:aa:ef:7e:97:ce:43:86:
f0:dc:13:96:52:93:f7:35:86:5e:a2:46:90:2e:b9:4a:ea:51:
41:c8:64:f7:32:ae:44:87:28:6b:35:db:7c:36:ed:98:cf:67:
33:14:b9:2e:ad:00:cd:8f:ea:53:bb:57:88:e4:a1:bf:06:00:
74:31:58:3e:90:62:ee:9a:cf:e8:59:3a:18:5d:21:4c:a6:c5:
1b:9d:22:16:32:4c:bc:e5:bb:64:bd:55:96:43:83:5c:f6:16:
f2:60:7b:b0:95:1a:cb:e9:a2:c4:c8:46:0d:80:a3:94:54:d3:
b0:ed:0f:57:7a:d4:85:05:c6:ed:76:8a:9c:8c:5f:97:3e:e4:
aa:56:ec:48:6c:27:59:2c:85:16:25:16:e2:79:3c:a7:40:20:
02:b1:88:7d:80:6b:7f:a2:ee:8a:01:f0:f1:a5:64:77:db:f8:
2a:9c:68:39:b5:9e:e8:11:c3:cb:f4:05:5b:24:83:2b:7a:fd:
cf:c8:2a:07
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZM+5OvakjEpC0VxAL37swo1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMjFkZmYzNWVkZjBjZTZlNDI4ZDZhZmZjMjEyYzQ3MTc2
NzllZTEwHhcNMjQxMTE4MTA1MDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjdkYzc2NGNiMTg2ODY3MWRiMjhhODNlMTZlZDhlNjAyNzQzZTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTanOc2KvK3zFJW7zJqtFomygQ2z
VKgZGKT0J8sZtvoCHQSAZwXpB7nEaerO2GyRz6sIZy0WAruOXCWfwkwiULTb91Lr
TaoN0YKQXjF7Of5AzcL+mXueASMibHBNT4Go4cBH7NkGvu/J8WhCMyDQ0TcE9n1k
SR67XoQRKcoUYy0K/7zEqo4Ix/uECmqBrQKHuKqnbuimGvRo9XO4XAx5ML8YLQpu
5T690UgioRdPn8T9ZCJATMvXkz7eEWLkBpYiFuq//YkknPPGSp/kXOae2cSuKrBr
RU1GBqQoVW1KQlNxBS/mLTM09gLJ2zSqjLhCZp7cn8aLuK5di+a7esvB4QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFFJ9x2TLGGhnHbKKg+Fu2OYCdD4kMB8GA1UdIwQY
MBaAFEAh3/Ne3wzm5CjWr/whLEcXZ57hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAt
ZWI1M2E1MThjMjYzLzEvVW4zSFpNc1lhR2Nkc29xRDRXN1k1Z0owUGlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAtZWI1M2E1MThjMjYz
LzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGKgJoYAAw
DQYJKoZIhvcNAQELBQADggEBADOXb9GUcBrHb+jOIk3Z4jfThdEujBf9CVPa17dp
isWNJzp2x+/EqWJqxSBOVOF0aQW712b8JV2ecTEA6pyNbLI4qu9+l85DhvDcE5ZS
k/c1hl6iRpAuuUrqUUHIZPcyrkSHKGs123w27ZjPZzMUuS6tAM2P6lO7V4jkob8G
AHQxWD6QYu6az+hZOhhdIUymxRudIhYyTLzlu2S9VZZDg1z2FvJge7CVGsvposTI
Rg2Ao5RU07DtD1d61IUFxu12ipyMX5c+5KpW7EhsJ1kshRYlFuJ5PKdAIAKxiH2A
a3+i7ooB8PGlZHfb+CqcaDm1nugRw8v0BVskgyt6/c/IKgc=
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:30:54 2024 by rpki-client on console-ams.rpki-client.org