Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/AQEy-BvD2l884GUMbvHopBGUv5A.roa
File: AQEy-BvD2l884GUMbvHopBGUv5A.roa (raw, json)
Hash identifier: hm2LvSRCgWBLaI4eeZJgCrEExjzuYWrsCC2UJaweG9E=
Subject key identifier: 01:01:32:F8:1B:C3:DA:5F:3C:E0:65:0C:6E:F1:E8:A4:11:94:BF:90
Certificate issuer: /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial: 0192EDE5EC8153D16FCEC364AA0DE0AAE74C
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/AQEy-BvD2l884GUMbvHopBGUv5A.roa
Signing time: Sat 02 Nov 2024 17:22:01 +0000
ROA not before: Sat 02 Nov 2024 17:22:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199326
IP address blocks: 2a13:7700::/40 maxlen: 40
2a13:7700:100::/40 maxlen: 40
2a13:7705::/40 maxlen: 40
2a13:7705::/48 maxlen: 48
2a13:7705:a::/48 maxlen: 48
2a13:7705:10::/48 maxlen: 48
2a13:7705:80::/48 maxlen: 48
2a13:7705:90::/48 maxlen: 48
2a13:7705:ff00::/40 maxlen: 40
2a13:7705:ff00::/48 maxlen: 48
2a13:7705:ff01::/48 maxlen: 48
2a13:7705:ff04::/48 maxlen: 48
2a13:7705:ff08::/48 maxlen: 48
2a13:7705:ff10::/48 maxlen: 48
2a13:7705:ff14::/48 maxlen: 48
2a13:7705:ff18::/48 maxlen: 48
2a13:7705:ff1c::/48 maxlen: 48
2a13:7705:ff20::/48 maxlen: 48
2a13:7705:ff24::/48 maxlen: 48
2a13:7705:ff28::/48 maxlen: 48
2a13:7705:ff2c::/48 maxlen: 48
2a13:7705:ff30::/48 maxlen: 48
2a13:7705:ff34::/48 maxlen: 48
2a13:7705:ff38::/48 maxlen: 48
2a13:7705:ff3c::/48 maxlen: 48
2a13:7705:ff40::/48 maxlen: 48
2a13:7705:ff44::/48 maxlen: 48
2a13:7705:ff4c::/48 maxlen: 48
2a13:7705:ff50::/48 maxlen: 48
2a13:7705:ff54::/48 maxlen: 48
2a13:7705:ff58::/48 maxlen: 48
2a13:7705:ff5c::/48 maxlen: 48
2a13:7705:ff60::/48 maxlen: 48
2a13:7705:ff64::/48 maxlen: 48
2a13:7705:ff68::/48 maxlen: 48
2a13:7705:ff6c::/48 maxlen: 48
2a13:7705:ff70::/48 maxlen: 48
2a13:7705:ff74::/48 maxlen: 48
2a13:7705:ff78::/48 maxlen: 48
2a13:7705:ff7c::/48 maxlen: 48
2a13:7705:ff80::/48 maxlen: 48
2a13:7705:ff84::/48 maxlen: 48
2a13:7705:ff88::/48 maxlen: 48
2a13:7705:ff8c::/48 maxlen: 48
2a13:7705:ff90::/48 maxlen: 48
2a13:7705:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ed:e5:ec:81:53:d1:6f:ce:c3:64:aa:0d:e0:aa:e7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Validity
Not Before: Nov 2 17:22:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=010132f81bc3da5f3ce0650c6ef1e8a41194bf90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:dd:10:3e:b9:a3:3c:aa:29:f3:c7:d2:fc:
97:f8:cb:bf:99:00:f7:0c:1f:e7:da:e3:bf:98:3a:
71:4f:e4:57:83:65:4b:3c:83:e3:03:ab:96:4d:cf:
25:dc:e1:ac:33:69:7d:c9:ef:1f:25:21:e6:32:3f:
32:92:e9:7f:77:57:ce:85:a1:6d:14:b3:5b:ee:f0:
93:b2:b7:4e:a3:22:b0:77:7f:35:f0:da:f0:ee:63:
18:b9:a9:03:8b:16:a5:c5:62:37:58:f3:06:a3:6d:
aa:24:7a:6c:ff:8c:c2:4e:55:91:b8:97:2c:01:9b:
01:2c:3a:c0:df:90:e5:14:20:fb:08:d0:c9:71:31:
15:56:2b:29:e2:cc:4a:40:91:6f:39:aa:41:48:c0:
95:4b:ba:e1:90:d8:02:cf:f2:c0:71:71:9e:48:83:
1e:fa:a1:1e:ba:83:0f:53:14:86:71:d7:a8:15:25:
84:c5:60:95:08:4f:19:6c:0b:fa:4a:4f:30:90:f5:
b2:e1:c9:88:5d:f2:4e:e5:fa:c6:13:76:c4:a1:99:
d3:d2:ca:bc:e8:a9:29:07:d4:61:24:bb:cd:d9:0c:
60:5a:38:73:4f:f3:58:9c:5b:c6:8f:7c:11:47:81:
52:d9:c9:b1:7e:66:00:44:30:32:7a:23:a5:a2:1c:
2b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:01:32:F8:1B:C3:DA:5F:3C:E0:65:0C:6E:F1:E8:A4:11:94:BF:90
X509v3 Authority Key Identifier:
keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/AQEy-BvD2l884GUMbvHopBGUv5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7700::/39
2a13:7705::/40
2a13:7705:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
35:27:b0:75:59:7e:e7:b0:1f:03:bc:26:73:ab:ed:11:d1:dc:
f4:66:16:21:6f:bb:55:65:68:b4:61:37:c6:9f:60:d5:d8:4f:
6b:3d:d8:09:e9:98:95:95:f9:40:d5:0f:2c:36:dc:7a:d4:df:
be:6b:d6:b6:87:4e:a4:cf:16:69:69:b5:54:f0:a6:69:87:2b:
ac:66:67:61:72:5d:22:6e:a6:fa:b7:8b:9f:4f:67:f3:c6:81:
fb:53:9d:de:99:d1:f7:dd:5e:40:c0:96:61:45:b0:80:97:3e:
f8:c0:88:62:68:b3:4e:b1:71:de:17:0e:83:75:35:fc:bc:3b:
a7:8f:8c:e0:df:5e:9a:2c:82:ff:f8:41:fe:e7:47:41:7b:33:
da:95:c5:49:25:8f:b4:96:44:1e:f0:48:05:30:22:3f:04:96:
9c:8c:64:9f:56:4b:3f:ef:0b:92:6c:6f:92:c3:9e:e0:0c:74:
d7:cb:84:80:b2:8f:d9:e9:d2:65:2e:bb:4d:d6:2e:dd:ca:34:
77:34:6e:29:cc:72:ca:36:b5:71:4c:86:53:51:74:e2:d2:1e:
73:88:d9:58:e6:ac:d4:5c:06:b3:8e:5f:04:b3:cf:00:45:21:
7d:a4:06:45:10:ab:6f:ee:f6:74:86:72:bc:c0:cd:fa:fd:0b:
bc:08:cd:68
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZLt5eyBU9FvzsNkqg3gqudMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNmMyOTU4MTQ1ZjQ1ZmFkNWRhZWViMzhiNzViNTJjMDk2
NjEwNDYwHhcNMjQxMTAyMTcyMjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTAxMzJmODFiYzNkYTVmM2NlMDY1MGM2ZWYxZThhNDExOTRiZjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo3dED65ozyqKfPH0vyX+Mu/mQD3
DB/n2uO/mDpxT+RXg2VLPIPjA6uWTc8l3OGsM2l9ye8fJSHmMj8ykul/d1fOhaFt
FLNb7vCTsrdOoyKwd3818Nrw7mMYuakDixalxWI3WPMGo22qJHps/4zCTlWRuJcs
AZsBLDrA35DlFCD7CNDJcTEVVisp4sxKQJFvOapBSMCVS7rhkNgCz/LAcXGeSIMe
+qEeuoMPUxSGcdeoFSWExWCVCE8ZbAv6Sk8wkPWy4cmIXfJO5frGE3bEoZnT0sq8
6KkpB9RhJLvN2QxgWjhzT/NYnFvGj3wRR4FS2cmxfmYARDAyeiOlohwriQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAEBMvgbw9pfPOBlDG7x6KQRlL+QMB8GA1UdIwQY
MBaAFD1sKVgUX0X61drus4t1tSwJZhBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFd3cFdCUmZSZnJWMnU2emkzVzFMQWxtRUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yYTU1NzQtN2IxMi00ZGEyLWEwNjQt
NWUxYjA3ODg5MjNiLzEvQVFFeS1CdkQybDg4NEdVTWJ2SG9wQkdVdjVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8yYTU1NzQtN2IxMi00ZGEyLWEwNjQtNWUxYjA3ODg5MjNi
LzEvUFd3cFdCUmZSZnJWMnU2emkzVzFMQWxtRUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYAwYBKhN3AAAD
BgAqE3cFAAMGACoTdwX/MA0GCSqGSIb3DQEBCwUAA4IBAQA1J7B1WX7nsB8DvCZz
q+0R0dz0ZhYhb7tVZWi0YTfGn2DV2E9rPdgJ6ZiVlflA1Q8sNtx61N++a9a2h06k
zxZpabVU8KZphyusZmdhcl0ibqb6t4ufT2fzxoH7U53emdH33V5AwJZhRbCAlz74
wIhiaLNOsXHeFw6DdTX8vDunj4zg316aLIL/+EH+50dBezPalcVJJY+0lkQe8EgF
MCI/BJacjGSfVks/7wuSbG+Sw57gDHTXy4SAso/Z6dJlLrtN1i7dyjR3NG4pzHLK
NrVxTIZTUXTi0h5ziNlY5qzUXAazjl8Es88ARSF9pAZFEKtv7vZ0hnK8wM36/Qu8
CM1o
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:21:46 2024 by rpki-client on console-fra.rpki-client.org