Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/1-FDYjlAnQZxCptAWSAxvBMyvtdM.roa
File: 1-FDYjlAnQZxCptAWSAxvBMyvtdM.roa (raw, json)
Hash identifier: aa1bPsjDFid9D8ftCEJ1Ns44rfrk1DQE33TtdhCG+QA=
Subject key identifier: F8:50:D8:8E:50:27:41:9C:42:A6:D0:16:48:0C:6F:04:CC:AF:B5:D3
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018CC9BCDC8DFF7D64F3B1E5A820AC59D270
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/1-FDYjlAnQZxCptAWSAxvBMyvtdM.roa
Signing time: Tue 02 Jan 2024 10:34:06 +0000
ROA not before: Tue 02 Jan 2024 10:34:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50544
IP address blocks: 2a02:2698:3000::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:dc:8d:ff:7d:64:f3:b1:e5:a8:20:ac:59:d2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 2 10:34:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f850d88e5027419c42a6d016480c6f04ccafb5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:4c:27:24:15:55:0b:db:41:f1:a7:49:32:
03:c1:fa:d8:cd:65:9c:5e:db:51:d6:42:70:6e:22:
f6:f8:45:e8:f0:36:02:a6:cb:09:19:1e:a8:a2:c9:
4d:f4:9d:8c:39:bb:8e:cb:0f:e5:69:b6:6d:e7:f0:
62:e2:fc:10:3c:61:97:42:42:cf:9d:b7:89:6c:ae:
16:14:bd:02:0a:9d:a3:0a:a3:5d:59:ee:e1:66:78:
cc:9c:1d:40:9f:03:9a:f1:7e:14:db:02:c1:45:e0:
96:df:13:7e:03:d1:32:28:58:73:55:c0:02:30:cf:
cd:f3:a2:e3:17:0f:0c:c3:47:2e:e3:8a:3c:0b:06:
8a:8c:4e:5e:ce:80:64:7b:9e:03:84:c4:81:3f:7b:
38:36:1e:d0:b6:e6:e4:c0:5c:e5:96:43:f1:54:ee:
fb:7f:3e:5f:fc:2e:39:34:51:13:9f:6b:b5:27:5d:
9a:1e:4a:56:98:d4:ea:d7:ea:bf:36:0e:d1:5e:07:
1b:29:f3:99:5b:ff:e5:60:b9:13:00:af:56:c9:f4:
5c:76:c8:dc:4b:83:5e:c8:0f:26:09:07:ca:a2:95:
85:bf:96:40:5d:41:77:63:f2:6e:71:1a:d7:96:e4:
65:11:ce:05:10:10:39:42:0b:6d:cb:fa:2b:08:15:
fa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:50:D8:8E:50:27:41:9C:42:A6:D0:16:48:0C:6F:04:CC:AF:B5:D3
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/1-FDYjlAnQZxCptAWSAxvBMyvtdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:3000::/38
Signature Algorithm: sha256WithRSAEncryption
47:5c:79:2c:61:b4:b6:57:1e:ae:8b:2e:c6:ad:72:ed:38:15:
d0:f6:72:e4:b1:bd:9a:17:eb:b5:d0:fc:eb:8e:15:10:dd:b4:
02:e3:ad:d1:58:0f:2c:e2:1e:65:ea:f0:87:20:33:bd:b0:c2:
c2:fb:18:51:12:7a:59:b9:36:bb:7f:d5:f9:e2:17:55:06:03:
3d:ed:4f:10:80:72:16:33:2e:05:7c:eb:78:a5:19:3a:26:ce:
8c:f2:19:64:e9:5d:c4:ac:00:4f:6d:61:ef:a4:71:78:dd:42:
f4:92:c7:3d:a8:c3:3d:95:ef:85:73:c2:a0:ca:1d:61:02:d3:
c6:91:de:44:83:72:af:a0:66:10:b4:41:ab:30:af:d0:52:55:
16:b9:08:c1:98:2a:7a:bd:cd:73:2f:2e:44:e6:fa:15:32:18:
fe:41:3d:84:57:ee:2e:a1:cc:ee:d6:55:a3:05:41:d6:de:62:
91:f5:d3:45:e3:ca:ec:6a:41:13:fd:a1:9b:6c:ea:45:02:64:
d2:dc:09:09:de:02:c0:38:51:5b:fa:fe:4f:3e:4a:3b:28:e5:
30:43:24:11:79:73:c3:06:be:b7:4f:4b:02:ae:06:4c:36:28:
ca:cf:f4:86:27:01:29:c0:d9:25:ef:8f:05:7d:2f:c3:b9:26:
84:f6:f8:4f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvNyN/31k87HlqCCsWdJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi
ODJiNWYwHhcNMjQwMTAyMTAzNDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODUwZDg4ZTUwMjc0MTljNDJhNmQwMTY0ODBjNmYwNGNjYWZiNWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlVMJyQVVQvbQfGnSTIDwfrYzWWc
XttR1kJwbiL2+EXo8DYCpssJGR6ooslN9J2MObuOyw/labZt5/Bi4vwQPGGXQkLP
nbeJbK4WFL0CCp2jCqNdWe7hZnjMnB1AnwOa8X4U2wLBReCW3xN+A9EyKFhzVcAC
MM/N86LjFw8Mw0cu44o8CwaKjE5ezoBke54DhMSBP3s4Nh7QtubkwFzllkPxVO77
fz5f/C45NFETn2u1J12aHkpWmNTq1+q/Ng7RXgcbKfOZW//lYLkTAK9WyfRcdsjc
S4NeyA8mCQfKopWFv5ZAXUF3Y/JucRrXluRlEc4FEBA5Qgtty/orCBX6ywIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPhQ2I5QJ0GcQqbQFkgMbwTMr7XTMB8GA1UdIwQY
MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt
Y2YwYWEzZWNhZDI4LzEvMS1GRFlqbEFuUVp4Q3B0QVdTQXh2Qk15dnRkTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTQvMTBlOTY1LTc0MDktNDRkOC05NTAyLWNmMGFhM2VjYWQy
OC8xL0NBSzVYT1lqblZKc05hNTZqaXpyU0s2NEsxOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioCJpgw
MA0GCSqGSIb3DQEBCwUAA4IBAQBHXHksYbS2Vx6uiy7GrXLtOBXQ9nLksb2aF+u1
0PzrjhUQ3bQC463RWA8s4h5l6vCHIDO9sMLC+xhREnpZuTa7f9X54hdVBgM97U8Q
gHIWMy4FfOt4pRk6Js6M8hlk6V3ErABPbWHvpHF43UL0ksc9qMM9le+Fc8Kgyh1h
AtPGkd5Eg3KvoGYQtEGrMK/QUlUWuQjBmCp6vc1zLy5E5voVMhj+QT2EV+4uoczu
1lWjBUHW3mKR9dNF48rsakET/aGbbOpFAmTS3AkJ3gLAOFFb+v5PPko7KOUwQyQR
eXPDBr63T0sCrgZMNijKz/SGJwEpwNkl748FfS/DuSaE9vhP
-----END CERTIFICATE-----
Generated at Sun Jun 2 04:25:00 2024 by rpki-client on console-ams.rpki-client.org