Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/z3SImEjyDtsST6Uj8xi22poo1_M.roa
File: z3SImEjyDtsST6Uj8xi22poo1_M.roa (raw, json)
Hash identifier: tYhP/jhCMM/gVWpsesY1vf5EEPozl9lYv//+vMQIeuw=
Subject key identifier: CF:74:88:98:48:F2:0E:DB:12:4F:A5:23:F3:18:B6:DA:9A:28:D7:F3
Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial: 018CC7260FA6D30747ACFFDFABD8BC195D35
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/z3SImEjyDtsST6Uj8xi22poo1_M.roa
Signing time: Mon 01 Jan 2024 22:30:09 +0000
ROA not before: Mon 01 Jan 2024 22:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209915
IP address blocks: 2a0b:1300:81dc::/48 maxlen: 48
2a0b:1306:1dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:0f:a6:d3:07:47:ac:ff:df:ab:d8:bc:19:5d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
Validity
Not Before: Jan 1 22:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf74889848f20edb124fa523f318b6da9a28d7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:aa:43:70:3b:25:ed:5c:2c:ee:84:f3:14:
c3:c0:20:8a:27:92:99:35:77:e2:3d:b4:c4:2a:5a:
15:c5:53:fa:ff:13:9e:8f:92:8f:de:96:9e:00:b3:
f0:de:46:81:2c:43:93:5f:fa:5e:dc:56:62:c0:3b:
76:f8:d6:b8:5e:12:46:a4:99:73:2c:12:b0:64:29:
18:45:80:3a:15:60:99:e1:f8:8e:ce:c8:fc:f1:73:
78:f5:9c:07:1e:41:0d:75:b4:a8:a8:a8:d1:af:53:
34:ee:b9:a4:25:41:64:83:8f:8e:25:ee:c2:73:24:
66:75:77:5f:09:a6:a1:6e:7f:94:41:fb:2a:4c:99:
94:d5:5a:0e:ae:4c:d0:6b:d4:c3:bc:0d:58:60:4b:
0c:01:a6:47:c7:16:6c:9a:fe:51:4c:01:7e:a5:83:
36:22:14:d5:1d:32:22:b6:f4:46:6a:5b:eb:75:af:
9e:6d:f7:cd:67:77:ae:a6:3d:aa:8c:08:6e:0c:37:
3d:94:af:dd:6f:39:2c:c2:36:a3:31:fa:d3:2b:63:
93:d9:50:83:1b:49:b2:78:70:37:8c:24:51:09:ca:
5c:31:2d:f1:9a:94:51:70:ee:88:32:4a:53:0e:d4:
fc:08:87:96:59:78:fc:f2:a6:e9:27:2e:14:6c:ac:
2b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:74:88:98:48:F2:0E:DB:12:4F:A5:23:F3:18:B6:DA:9A:28:D7:F3
X509v3 Authority Key Identifier:
keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/z3SImEjyDtsST6Uj8xi22poo1_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1300:81dc::/48
2a0b:1306:1dc::/48
Signature Algorithm: sha256WithRSAEncryption
5d:3d:4d:89:f7:09:d6:ef:99:bb:73:87:54:3a:88:48:52:51:
97:72:04:61:c6:8d:74:0b:d7:ec:2d:04:ec:18:f4:e3:fd:aa:
ac:78:05:99:0b:af:e5:35:a3:58:d5:23:f8:a3:6e:10:cf:56:
e5:12:ac:31:e0:5f:cf:cc:04:78:f4:f5:59:d4:8e:6b:43:63:
43:34:54:26:6f:69:64:81:1d:f0:f6:15:8a:b8:1c:1e:94:aa:
6c:83:c2:75:b2:93:66:a2:c3:d4:0c:e4:12:76:71:4c:d4:b4:
ec:4f:7c:97:30:bb:d6:fa:56:ff:f5:ac:2f:b6:e8:94:8b:a8:
67:2f:ca:d1:a0:05:3b:eb:61:6a:91:9e:71:d5:91:2e:77:32:
95:4d:b8:bf:c7:b4:ec:74:c6:ce:b4:f7:e9:6e:d1:b3:e9:ab:
1d:ac:48:73:58:38:c7:83:ce:4c:1b:f8:5d:ac:93:02:7c:46:
ee:22:99:6d:30:e8:b4:90:b0:18:c3:3e:44:ec:de:18:27:3b:
c6:88:4a:58:71:83:a6:b9:40:6c:ea:59:01:41:49:45:da:58:
80:ba:80:2f:2f:71:13:c6:a1:48:35:ba:89:8a:d3:fd:c7:cf:
6d:37:c1:cc:fa:6e:10:86:63:bd:bf:bf:10:de:aa:b0:aa:3e:
0e:9d:7e:e7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzHJg+m0wdHrP/fq9i8GV01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODkzMTgyYjE2NzE4OTgzYmMwMDhjOGQwODdmOGRkY2Ez
ZDg2MTQwHhcNMjQwMTAxMjIzMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjc0ODg5ODQ4ZjIwZWRiMTI0ZmE1MjNmMzE4YjZkYTlhMjhkN2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgeqQ3A7Je1cLO6E8xTDwCCKJ5KZ
NXfiPbTEKloVxVP6/xOej5KP3paeALPw3kaBLEOTX/pe3FZiwDt2+Na4XhJGpJlz
LBKwZCkYRYA6FWCZ4fiOzsj88XN49ZwHHkENdbSoqKjRr1M07rmkJUFkg4+OJe7C
cyRmdXdfCaahbn+UQfsqTJmU1VoOrkzQa9TDvA1YYEsMAaZHxxZsmv5RTAF+pYM2
IhTVHTIitvRGalvrda+ebffNZ3eupj2qjAhuDDc9lK/dbzkswjajMfrTK2OT2VCD
G0myeHA3jCRRCcpcMS3xmpRRcO6IMkpTDtT8CIeWWXj88qbpJy4UbKwrEQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFM90iJhI8g7bEk+lI/MYttqaKNfzMB8GA1UdIwQY
MBaAFJeJMYKxZxiYO8AIyNCH+N3KPYYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDct
YmMwZTUxMWMyMGNlLzEvejNTSW1FanlEdHNTVDZVajh4aTIycG9vMV9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDctYmMwZTUxMWMyMGNl
LzEvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgsTAIHc
AwcAKgsTBgHcMA0GCSqGSIb3DQEBCwUAA4IBAQBdPU2J9wnW75m7c4dUOohIUlGX
cgRhxo10C9fsLQTsGPTj/aqseAWZC6/lNaNY1SP4o24Qz1blEqwx4F/PzAR49PVZ
1I5rQ2NDNFQmb2lkgR3w9hWKuBwelKpsg8J1spNmosPUDOQSdnFM1LTsT3yXMLvW
+lb/9awvtuiUi6hnL8rRoAU762FqkZ5x1ZEudzKVTbi/x7TsdMbOtPfpbtGz6asd
rEhzWDjHg85MG/hdrJMCfEbuIpltMOi0kLAYwz5E7N4YJzvGiEpYcYOmuUBs6lkB
QUlF2liAuoAvL3ETxqFINbqJitP9x89tN8HM+m4QhmO9v78Q3qqwqj4OnX7n
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:29:24 2024 by rpki-client on console-ams.rpki-client.org