Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/bMmMkN3PMslPOQ2WiSUGxhHl09k.roa
File: bMmMkN3PMslPOQ2WiSUGxhHl09k.roa (raw, json)
Hash identifier: M9aar4BZzTT+aaCqf2ce1PsfFC7TpXm8RitX+IEva60=
Subject key identifier: 6C:C9:8C:90:DD:CF:32:C9:4F:39:0D:96:89:25:06:C6:11:E5:D3:D9
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC4256E7AF9C12E9317008446A10E2EB7
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/bMmMkN3PMslPOQ2WiSUGxhHl09k.roa
Signing time: Mon 01 Jan 2024 08:30:36 +0000
ROA not before: Mon 01 Jan 2024 08:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210667
IP address blocks: 2a0b:b87:ff14::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:6e:7a:f9:c1:2e:93:17:00:84:46:a1:0e:2e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cc98c90ddcf32c94f390d96892506c611e5d3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:14:c1:02:00:03:70:35:13:85:54:6c:f9:b9:
3e:04:ba:04:39:59:40:42:58:09:cb:2e:fd:58:be:
e2:1d:57:c2:87:23:85:81:1d:e4:ed:f8:cc:82:69:
92:f2:0b:91:2d:f2:dc:f0:b3:fd:54:70:90:6d:89:
67:e0:53:be:d6:64:2f:18:f8:ee:66:8e:23:29:7e:
e5:10:b7:cd:b3:6c:36:cc:bf:d3:3f:bd:e2:40:c3:
73:7b:2c:99:8f:38:4d:51:bc:9e:87:71:bf:26:cc:
0c:46:80:e6:55:53:3a:18:9e:07:f9:15:b5:09:41:
3d:8e:79:9c:f1:a2:69:fb:49:6d:84:b2:eb:59:e8:
5e:6d:c1:ba:79:35:7b:60:d9:46:bf:cd:47:a2:04:
7b:b3:13:42:04:a5:97:38:0b:35:05:e4:12:55:78:
69:95:bc:1f:3a:b6:7a:cc:04:66:21:f5:4d:08:64:
43:47:24:7b:1c:0f:7a:91:20:1d:e2:e6:85:c7:ce:
b3:85:07:89:b6:4f:93:dc:00:16:e4:f9:bc:ce:db:
9c:82:34:fc:8d:94:f9:d7:20:da:8a:09:dd:43:57:
dd:7f:cd:e9:83:a7:86:8e:e5:38:1d:e0:1f:08:3d:
df:ed:ba:f6:0e:29:dc:ac:92:24:92:a4:d8:31:ae:
1e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C9:8C:90:DD:CF:32:C9:4F:39:0D:96:89:25:06:C6:11:E5:D3:D9
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/bMmMkN3PMslPOQ2WiSUGxhHl09k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ff14::/48
Signature Algorithm: sha256WithRSAEncryption
93:5c:26:14:b9:7d:d3:a9:3d:29:3a:18:2e:35:a2:88:dd:6f:
c6:33:1a:a7:0b:1e:f4:aa:76:e0:6e:a5:3f:af:0d:c5:b0:89:
bf:e5:2e:38:44:9b:8e:13:c7:a4:3a:cb:b1:7d:ff:0d:88:da:
f6:1f:38:f8:09:d0:89:15:e4:54:b2:f3:53:a9:47:d4:dd:15:
74:4e:6e:76:52:02:86:58:43:c6:80:23:02:6e:88:62:bb:62:
65:88:55:fd:d4:c7:50:0f:01:86:e3:f8:49:d6:0c:18:29:ab:
ce:b7:92:ba:b8:a7:b6:a3:4e:54:54:d5:2b:87:72:f8:66:e7:
95:66:b3:8b:82:eb:5c:ce:fe:a9:00:28:7c:1d:bb:93:3c:76:
3e:0e:f6:bf:0f:f1:3b:77:9b:04:8a:f1:4d:45:a5:f9:4d:e8:
ee:ed:07:d4:d8:9b:f1:be:7f:84:f6:2c:87:1a:26:ca:4a:20:
a1:53:2a:7d:d1:3d:0c:97:2a:8c:5c:d8:9f:56:01:99:ef:ab:
f6:67:d9:f8:86:69:10:f1:6d:b8:41:4d:d7:3f:eb:fa:7b:9b:
8e:89:c3:0a:ea:af:45:43:d9:ee:81:b9:1d:5c:36:df:24:81:
42:86:cf:ba:f8:e5:89:76:f6:1e:6f:b2:60:5b:ca:be:28:33:
18:6e:88:15
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzEJW56+cEukxcAhEahDi63MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjQwMTAxMDgzMDM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2M5OGM5MGRkY2YzMmM5NGYzOTBkOTY4OTI1MDZjNjExZTVkM2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBTBAgADcDUThVRs+bk+BLoEOVlA
QlgJyy79WL7iHVfChyOFgR3k7fjMgmmS8guRLfLc8LP9VHCQbYln4FO+1mQvGPju
Zo4jKX7lELfNs2w2zL/TP73iQMNzeyyZjzhNUbyeh3G/JswMRoDmVVM6GJ4H+RW1
CUE9jnmc8aJp+0lthLLrWehebcG6eTV7YNlGv81HogR7sxNCBKWXOAs1BeQSVXhp
lbwfOrZ6zARmIfVNCGRDRyR7HA96kSAd4uaFx86zhQeJtk+T3AAW5Pm8ztucgjT8
jZT51yDaigndQ1fdf83pg6eGjuU4HeAfCD3f7br2DincrJIkkqTYMa4epQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGzJjJDdzzLJTzkNloklBsYR5dPZMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvYk1tTWtOM1BNc2xQT1EyV2lTVUd4aEhsMDlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh/8U
MA0GCSqGSIb3DQEBCwUAA4IBAQCTXCYUuX3TqT0pOhguNaKI3W/GMxqnCx70qnbg
bqU/rw3FsIm/5S44RJuOE8ekOsuxff8NiNr2Hzj4CdCJFeRUsvNTqUfU3RV0Tm52
UgKGWEPGgCMCbohiu2JliFX91MdQDwGG4/hJ1gwYKavOt5K6uKe2o05UVNUrh3L4
ZueVZrOLgutczv6pACh8HbuTPHY+Dva/D/E7d5sEivFNRaX5Teju7QfU2Jvxvn+E
9iyHGibKSiChUyp90T0MlyqMXNifVgGZ76v2Z9n4hmkQ8W24QU3XP+v6e5uOicMK
6q9FQ9nugbkdXDbfJIFChs+6+OWJdvYeb7JgW8q+KDMYbogV
-----END CERTIFICATE-----
Generated at Wed May 15 16:13:52 2024 by rpki-client on console-ams.rpki-client.org