Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Nznpoyd2lxruMMW2YcLS2l2mU1I.roa
File: Nznpoyd2lxruMMW2YcLS2l2mU1I.roa (raw, json)
Hash identifier: LeFhQq7ltC/wK+iikmvtX5FB+niiexUmN9EBN/OcbEU=
Subject key identifier: 37:39:E9:A3:27:76:97:1A:EE:30:C5:B6:61:C2:D2:DA:5D:A6:53:52
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC425732FFC1F4EA71A431AA037D53456
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Nznpoyd2lxruMMW2YcLS2l2mU1I.roa
Signing time: Mon 01 Jan 2024 08:30:37 +0000
ROA not before: Mon 01 Jan 2024 08:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212450
IP address blocks: 2a0b:b87:ffa5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:73:2f:fc:1f:4e:a7:1a:43:1a:a0:37:d5:34:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3739e9a32776971aee30c5b661c2d2da5da65352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:30:a6:dd:3a:b1:34:ff:13:4a:52:cb:cd:
02:d6:11:55:dd:60:e5:7c:c2:92:62:b2:bd:83:7b:
b1:53:b3:ff:94:ff:77:18:d1:2c:3b:e8:4c:bc:97:
32:d5:5a:08:77:36:17:ce:ae:44:ff:b1:1d:d0:2e:
df:ca:78:bc:a2:13:5d:7e:e0:83:c2:04:45:1b:05:
d1:1c:ff:a8:b4:dc:df:dd:f9:7e:f1:e5:26:82:31:
5d:90:a5:1a:2a:8d:9b:43:df:6e:8e:e3:8e:df:c7:
07:fa:35:ea:bf:e5:e2:55:18:4e:13:20:1e:e7:c7:
1a:7c:5e:5b:92:26:e5:6c:dc:10:0d:c2:03:49:68:
4d:21:41:99:95:92:4e:fb:12:52:f4:82:d3:32:b4:
11:59:6a:d3:76:13:0e:c2:7e:3f:93:f4:68:09:35:
0f:fc:6d:9d:56:5d:90:27:da:ca:45:c2:f6:0c:d6:
bc:ad:c0:52:13:7b:9c:08:ea:4c:f5:c0:1a:3b:9e:
2d:91:85:57:32:b4:6f:99:3c:0c:b4:31:cd:4a:36:
4e:5e:04:b7:7a:90:fe:0a:ca:f8:aa:c6:92:45:b6:
09:6d:1e:fd:ee:5e:aa:4b:66:2b:2a:0a:01:3a:4e:
00:98:e5:8c:a9:a5:f1:22:44:20:f0:aa:05:d3:59:
b4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:39:E9:A3:27:76:97:1A:EE:30:C5:B6:61:C2:D2:DA:5D:A6:53:52
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Nznpoyd2lxruMMW2YcLS2l2mU1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffa5::/48
Signature Algorithm: sha256WithRSAEncryption
bf:36:8f:aa:b3:3c:46:02:d8:76:45:77:c2:ca:f7:8e:58:67:
99:39:1c:33:cb:53:08:67:da:c9:c3:e5:13:1a:9c:e6:9c:8f:
23:67:b2:02:f5:8d:c1:24:48:42:de:ed:93:a0:00:b0:f2:ca:
bd:6c:33:c8:2a:f8:b5:8d:54:c9:75:11:a2:91:64:24:dd:fd:
0a:cc:c3:87:3e:f3:af:34:1f:a8:e5:09:c2:26:78:92:59:bc:
aa:5a:d1:0c:0a:2a:fd:a2:63:11:e2:d0:52:82:18:9e:62:a7:
89:ea:a2:57:38:10:51:75:ca:63:be:07:f2:73:b9:7e:6e:c2:
34:75:49:02:1b:d4:b0:c7:19:0b:4c:f1:c4:41:e2:e0:92:1f:
5b:60:c1:66:a0:28:9d:6d:4b:e7:58:5a:f6:48:3b:ec:6c:88:
d8:80:74:0b:0c:56:d1:4c:48:0b:7d:55:c9:5c:f8:fe:70:38:
07:6f:ab:51:d1:ce:15:4f:4e:8a:9c:44:be:32:db:d9:cd:bb:
09:a6:62:fe:38:84:d8:b0:39:24:4f:f9:89:79:c6:57:6d:dc:
63:7c:90:2c:f4:75:21:6b:1e:80:9f:d6:36:72:f5:be:fd:31:
e1:13:d7:48:56:c5:19:16:33:7f:6d:88:0c:c5:40:9f:cc:27:
83:1b:58:6f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzEJXMv/B9OpxpDGqA31TRWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjQwMTAxMDgzMDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzM5ZTlhMzI3NzY5NzFhZWUzMGM1YjY2MWMyZDJkYTVkYTY1MzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy0wpt06sTT/E0pSy80C1hFV3WDl
fMKSYrK9g3uxU7P/lP93GNEsO+hMvJcy1VoIdzYXzq5E/7Ed0C7fyni8ohNdfuCD
wgRFGwXRHP+otNzf3fl+8eUmgjFdkKUaKo2bQ99ujuOO38cH+jXqv+XiVRhOEyAe
58cafF5bkiblbNwQDcIDSWhNIUGZlZJO+xJS9ILTMrQRWWrTdhMOwn4/k/RoCTUP
/G2dVl2QJ9rKRcL2DNa8rcBSE3ucCOpM9cAaO54tkYVXMrRvmTwMtDHNSjZOXgS3
epD+Csr4qsaSRbYJbR797l6qS2YrKgoBOk4AmOWMqaXxIkQg8KoF01m0TwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDc56aMndpca7jDFtmHC0tpdplNSMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvTnpucG95ZDJseHJ1TU1XMlljTFMybDJtVTFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh/+l
MA0GCSqGSIb3DQEBCwUAA4IBAQC/No+qszxGAth2RXfCyveOWGeZORwzy1MIZ9rJ
w+UTGpzmnI8jZ7IC9Y3BJEhC3u2ToACw8sq9bDPIKvi1jVTJdRGikWQk3f0KzMOH
PvOvNB+o5QnCJniSWbyqWtEMCir9omMR4tBSghieYqeJ6qJXOBBRdcpjvgfyc7l+
bsI0dUkCG9SwxxkLTPHEQeLgkh9bYMFmoCidbUvnWFr2SDvsbIjYgHQLDFbRTEgL
fVXJXPj+cDgHb6tR0c4VT06KnES+MtvZzbsJpmL+OITYsDkkT/mJecZXbdxjfJAs
9HUhax6An9Y2cvW+/THhE9dIVsUZFjN/bYgMxUCfzCeDG1hv
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:18:58 2024 by rpki-client on console-ams.rpki-client.org