Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/Whqpb2xMd_24hkiXW5nEeFn7yeM.roa
File: Whqpb2xMd_24hkiXW5nEeFn7yeM.roa (raw, json)
Hash identifier: 6dwfgGojSzka+R1jXRxdN9rD87fjbZGJVYl9UnZRun8=
Subject key identifier: 5A:1A:A9:6F:6C:4C:77:FD:B8:86:48:97:5B:99:C4:78:59:FB:C9:E3
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018CC9BCD0C8BDB180D4FB0989C1046E1608
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/Whqpb2xMd_24hkiXW5nEeFn7yeM.roa
Signing time: Tue 02 Jan 2024 10:34:03 +0000
ROA not before: Tue 02 Jan 2024 10:34:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39435
IP address blocks: 2a02:2698:1000::/38 maxlen: 48
2a02:2698:c00::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d0:c8:bd:b1:80:d4:fb:09:89:c1:04:6e:16:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 2 10:34:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a1aa96f6c4c77fdb88648975b99c47859fbc9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f8:a1:1f:ea:12:ab:ed:87:cc:6a:82:90:c8:
42:bd:c0:85:fe:3d:02:7c:f1:14:dc:c6:37:f1:26:
b9:82:d3:10:b4:f8:b2:b4:f9:99:1a:39:75:bd:f7:
03:cf:e3:42:b0:7f:b7:30:b5:dc:b8:fd:5a:d9:8e:
7b:50:b0:e0:6d:7d:e6:87:01:da:35:ea:92:bc:dc:
eb:a4:d7:7a:33:fb:a9:54:98:46:6c:7c:a5:31:f1:
f8:c8:b1:bf:be:98:5d:e6:40:02:46:db:4e:77:8c:
ff:98:70:a2:ac:73:dd:d2:57:6e:36:8d:6e:5c:e0:
a3:27:1d:1d:77:39:6e:51:40:46:48:9c:d3:63:4e:
3b:58:1b:57:b6:f7:b6:8c:b9:6d:76:d2:77:63:6f:
18:f8:4e:3d:b1:ed:eb:ea:d1:68:9a:e6:09:7e:01:
65:59:31:74:64:58:35:a0:0c:99:57:7b:f9:3e:57:
fd:f1:a3:12:fc:c6:e8:fd:4b:26:27:2d:ca:c1:98:
f6:2a:91:36:87:4c:52:72:12:90:22:f5:67:9e:7c:
ce:8f:74:29:1e:f9:03:ac:c5:12:5f:ef:3c:db:34:
69:26:16:67:70:55:93:40:e9:d2:f5:7e:d4:08:78:
35:96:9c:8c:e9:0f:81:de:a3:e4:23:ba:1a:f2:60:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1A:A9:6F:6C:4C:77:FD:B8:86:48:97:5B:99:C4:78:59:FB:C9:E3
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/Whqpb2xMd_24hkiXW5nEeFn7yeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:c00::-2a02:2698:13ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
12:2d:70:10:4d:c2:41:dc:dd:49:15:46:40:e0:42:f3:88:84:
9b:48:a8:9e:87:88:42:70:53:60:aa:fc:60:6c:62:fa:b9:cb:
94:f1:14:ff:e7:d4:e5:e7:52:ec:8b:0c:ad:21:de:78:e0:22:
11:76:81:db:5b:fa:48:05:53:b2:4d:2f:f7:7a:dd:de:1c:4f:
0a:52:1e:d5:c0:af:e6:88:87:1d:27:c3:5b:5e:b2:3f:24:cf:
d6:5a:0a:1e:0d:e1:0e:de:d7:5f:01:34:39:ce:57:1d:c2:9d:
25:9e:86:17:32:47:49:5e:28:01:b9:80:79:7f:f1:db:88:b4:
9a:69:99:e3:98:b3:8c:c6:20:39:e2:8b:32:c6:3c:97:a6:8c:
27:83:81:6a:aa:fa:be:57:b1:9c:44:d3:82:80:2b:99:de:7b:
ab:bb:ec:d6:2e:42:8a:bd:be:7b:01:95:6d:fc:ec:54:21:ae:
2d:12:61:6a:c7:52:e9:91:c1:5f:55:bc:c2:7d:5d:f3:49:15:
a1:3a:30:b1:d5:ce:49:46:3d:c1:3a:59:b3:66:34:db:d0:6f:
59:79:7a:a6:ec:76:11:11:07:5e:08:90:f4:60:ff:3a:30:47:
d7:94:c0:05:1a:f5:8d:71:09:d7:3e:25:10:d7:e7:e5:84:2d:
25:8f:db:5e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzJvNDIvbGA1PsJicEEbhYIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi
ODJiNWYwHhcNMjQwMTAyMTAzNDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTFhYTk2ZjZjNGM3N2ZkYjg4NjQ4OTc1Yjk5YzQ3ODU5ZmJjOWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfihH+oSq+2HzGqCkMhCvcCF/j0C
fPEU3MY38Sa5gtMQtPiytPmZGjl1vfcDz+NCsH+3MLXcuP1a2Y57ULDgbX3mhwHa
NeqSvNzrpNd6M/upVJhGbHylMfH4yLG/vphd5kACRttOd4z/mHCirHPd0lduNo1u
XOCjJx0ddzluUUBGSJzTY047WBtXtve2jLltdtJ3Y28Y+E49se3r6tFomuYJfgFl
WTF0ZFg1oAyZV3v5Plf98aMS/Mbo/UsmJy3KwZj2KpE2h0xSchKQIvVnnnzOj3Qp
HvkDrMUSX+882zRpJhZncFWTQOnS9X7UCHg1lpyM6Q+B3qPkI7oa8mBhLQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFoaqW9sTHf9uIZIl1uZxHhZ+8njMB8GA1UdIwQY
MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt
Y2YwYWEzZWNhZDI4LzEvV2hxcGIyeE1kXzI0aGtpWFc1bkVlRm43eWVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4
LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBgIqAiaY
DAMGAioCJpgQMA0GCSqGSIb3DQEBCwUAA4IBAQASLXAQTcJB3N1JFUZA4ELziISb
SKieh4hCcFNgqvxgbGL6ucuU8RT/59Tl51LsiwytId544CIRdoHbW/pIBVOyTS/3
et3eHE8KUh7VwK/miIcdJ8NbXrI/JM/WWgoeDeEO3tdfATQ5zlcdwp0lnoYXMkdJ
XigBuYB5f/HbiLSaaZnjmLOMxiA54osyxjyXpowng4Fqqvq+V7GcRNOCgCuZ3nur
u+zWLkKKvb57AZVt/OxUIa4tEmFqx1LpkcFfVbzCfV3zSRWhOjCx1c5JRj3BOlmz
ZjTb0G9ZeXqm7HYREQdeCJD0YP86MEfXlMAFGvWNcQnXPiUQ1+flhC0lj9te
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:58:31 2024 by rpki-client on console-fra.rpki-client.org