Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/mjwnBLyzBImQhPNxHzvICuw6hM0.roa
File: mjwnBLyzBImQhPNxHzvICuw6hM0.roa (raw, json)
Hash identifier: 1qpfM/xpHgDJ8BFfcOR8gLapWBnub+ga3s8rJjHQHWA=
Subject key identifier: 9A:3C:27:04:BC:B3:04:89:90:84:F3:71:1F:3B:C8:0A:EC:3A:84:CD
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 018CC50156B8CCA0E82EC0948F49C2031681
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/mjwnBLyzBImQhPNxHzvICuw6hM0.roa
Signing time: Mon 01 Jan 2024 12:30:48 +0000
ROA not before: Mon 01 Jan 2024 12:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 2a0f:6580:108::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:56:b8:cc:a0:e8:2e:c0:94:8f:49:c2:03:16:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 12:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a3c2704bcb304899084f3711f3bc80aec3a84cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c9:45:30:27:47:80:09:7c:1a:3e:7a:80:57:
b8:27:87:dc:c1:90:9d:85:ee:57:ca:16:0d:85:e9:
c0:e8:83:b7:aa:45:d0:bf:b7:65:48:fc:2e:ad:90:
32:9e:77:ce:9d:7b:29:a9:4f:78:0a:db:5f:85:af:
8f:35:7a:33:15:bb:ad:bc:21:3c:51:a9:49:77:d9:
dc:a2:9e:11:eb:58:81:44:ab:ae:2a:5c:3d:c2:ec:
3c:9f:d2:6b:70:4d:f8:bf:9b:e6:e6:4c:50:bc:d7:
ff:59:14:09:c2:10:93:28:fd:30:33:3d:4e:01:3f:
ae:dc:2f:34:31:45:bb:31:9b:87:1d:38:60:04:22:
83:c6:1a:97:60:19:0c:25:72:eb:90:df:5d:04:17:
e0:e6:58:c0:5a:80:6b:f6:70:58:b9:16:8d:0a:0e:
c9:be:db:2f:75:00:70:7b:91:18:e6:1e:ff:e0:b3:
1f:15:52:dd:81:ad:28:c1:1d:c1:a6:cc:12:84:c2:
7c:73:02:4e:4c:c5:77:50:4b:4d:1a:dc:5b:b4:47:
f9:65:4e:96:90:56:eb:b1:14:bf:ab:fb:cc:0a:2b:
5e:58:94:6a:27:bc:7a:0c:a5:02:2d:a0:c4:a9:87:
ab:8d:41:dd:f7:41:23:92:7b:fc:8f:eb:91:49:68:
bd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3C:27:04:BC:B3:04:89:90:84:F3:71:1F:3B:C8:0A:EC:3A:84:CD
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/mjwnBLyzBImQhPNxHzvICuw6hM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:108::/48
Signature Algorithm: sha256WithRSAEncryption
cb:6d:34:58:07:2b:c3:6e:ae:8f:a7:4b:bd:bc:6f:be:14:10:
64:b7:f5:42:91:59:c9:98:50:64:72:d9:85:08:1b:fa:17:df:
ec:2d:7d:04:24:d0:e4:2a:f3:3a:32:cf:80:cb:0c:79:97:91:
93:fc:2c:9f:66:ab:a8:b1:1a:68:86:72:cf:fa:f1:a6:0d:4f:
79:28:03:fd:eb:f1:2b:5c:a8:32:5d:8b:c4:55:49:d8:96:7c:
d2:28:53:94:a0:d5:54:01:93:18:5d:24:06:72:96:f0:f2:be:
35:4f:35:1d:e9:03:e0:1f:a0:62:db:3a:58:7c:52:ba:1d:28:
f4:08:54:1a:13:cc:48:87:fc:51:24:31:94:f8:08:68:15:50:
4f:31:28:16:1f:14:77:e8:32:c6:ea:21:39:b5:de:29:c4:19:
69:51:c5:3a:82:90:f6:23:85:d3:fc:23:f5:0c:f5:7d:60:b5:
7b:10:7c:94:0c:62:7c:2a:2c:93:4a:04:1f:89:53:31:8a:d4:
09:a6:81:21:32:47:9e:bd:e9:48:91:cb:21:f3:52:0e:a6:a4:
9f:a1:10:fd:59:f7:a4:8f:c7:d8:5e:59:97:01:82:23:9a:42:
3f:26:d7:24:0c:c9:1a:fb:ba:6a:da:0b:e2:a8:33:e3:85:00:
12:f3:38:b2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzFAVa4zKDoLsCUj0nCAxaBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1
N2E0OGIwHhcNMjQwMTAxMTIzMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTNjMjcwNGJjYjMwNDg5OTA4NGYzNzExZjNiYzgwYWVjM2E4NGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28lFMCdHgAl8Gj56gFe4J4fcwZCd
he5XyhYNhenA6IO3qkXQv7dlSPwurZAynnfOnXspqU94Cttfha+PNXozFbutvCE8
UalJd9ncop4R61iBRKuuKlw9wuw8n9JrcE34v5vm5kxQvNf/WRQJwhCTKP0wMz1O
AT+u3C80MUW7MZuHHThgBCKDxhqXYBkMJXLrkN9dBBfg5ljAWoBr9nBYuRaNCg7J
vtsvdQBwe5EY5h7/4LMfFVLdga0owR3BpswShMJ8cwJOTMV3UEtNGtxbtEf5ZU6W
kFbrsRS/q/vMCiteWJRqJ7x6DKUCLaDEqYerjUHd90Ejknv8j+uRSWi96wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJo8JwS8swSJkITzcR87yArsOoTNMB8GA1UdIwQY
MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt
YjIwZTI4ZjUxODhmLzEvbWp3bkJMeXpCSW1RaFBOeEh6dklDdXc2aE0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm
LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9lgAEI
MA0GCSqGSIb3DQEBCwUAA4IBAQDLbTRYByvDbq6Pp0u9vG++FBBkt/VCkVnJmFBk
ctmFCBv6F9/sLX0EJNDkKvM6Ms+Aywx5l5GT/CyfZquosRpohnLP+vGmDU95KAP9
6/ErXKgyXYvEVUnYlnzSKFOUoNVUAZMYXSQGcpbw8r41TzUd6QPgH6Bi2zpYfFK6
HSj0CFQaE8xIh/xRJDGU+AhoFVBPMSgWHxR36DLG6iE5td4pxBlpUcU6gpD2I4XT
/CP1DPV9YLV7EHyUDGJ8KiyTSgQfiVMxitQJpoEhMkeevelIkcsh81IOpqSfoRD9
Wfekj8fYXlmXAYIjmkI/JtckDMka+7pq2gviqDPjhQAS8ziy
-----END CERTIFICATE-----
Generated at Thu May 2 11:58:39 2024 by rpki-client on console-fra.rpki-client.org