Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/1ApCj1mTKGawNsfwzr18sOFA7J8.roa
File: 1ApCj1mTKGawNsfwzr18sOFA7J8.roa (raw, json)
Hash identifier: NnlubluZDlMJf3QvMT0KFthGvW5hM+M/CcBDX+IMPQw=
Subject key identifier: D4:0A:42:8F:59:93:28:66:B0:36:C7:F0:CE:BD:7C:B0:E1:40:EC:9F
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 018CC3B737CBDF125D75BF3F40D7CB6F4D88
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/1ApCj1mTKGawNsfwzr18sOFA7J8.roa
Signing time: Mon 01 Jan 2024 06:30:13 +0000
ROA not before: Mon 01 Jan 2024 06:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141776
IP address blocks: 2a13:b487:1500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:37:cb:df:12:5d:75:bf:3f:40:d7:cb:6f:4d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 1 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d40a428f59932866b036c7f0cebd7cb0e140ec9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:35:07:66:ed:10:20:8d:3c:1a:cc:fc:bf:7a:
85:2b:6a:ea:b3:42:5e:82:1b:93:7d:e4:a3:87:ec:
c4:0d:95:9a:e6:27:bb:2f:23:75:12:aa:e1:79:7a:
29:55:af:ba:db:90:59:ef:05:d0:f9:d2:20:d4:ec:
53:8f:73:73:83:43:7b:96:ca:56:47:32:c3:89:69:
0e:72:87:29:80:1a:c9:d3:79:fb:cb:4c:c0:27:95:
e2:51:73:36:37:4b:ed:b6:34:bf:ab:8c:82:1d:04:
6b:07:3d:10:bc:2d:84:e9:8e:01:17:89:e1:c4:89:
f2:3a:a0:ab:2f:c8:71:f1:eb:c4:48:ad:c8:03:0a:
27:89:a6:c2:8f:66:dd:50:ad:1d:b4:8c:c3:58:16:
ae:a9:b8:d1:50:f8:84:55:6a:4e:32:c8:77:0c:b6:
f9:29:cd:e9:d4:61:55:e7:d8:45:75:7f:26:2e:59:
27:41:91:80:e3:c9:6e:29:c0:fa:c7:84:82:81:91:
a9:fa:e6:c3:a1:a6:af:97:3c:43:23:4d:50:55:05:
82:da:db:4c:13:47:58:07:c4:4a:c1:a4:80:43:2b:
93:9c:61:e1:86:30:3d:33:c2:b5:6a:f3:db:68:b7:
04:45:8f:64:a7:4d:1d:87:85:d2:5a:73:ea:7b:18:
dd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0A:42:8F:59:93:28:66:B0:36:C7:F0:CE:BD:7C:B0:E1:40:EC:9F
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/1ApCj1mTKGawNsfwzr18sOFA7J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1500::/40
Signature Algorithm: sha256WithRSAEncryption
29:8e:9f:c3:1d:ff:fa:d5:37:4b:7e:d9:7f:a3:33:68:3c:bc:
a6:49:93:6a:56:8e:73:5d:83:12:d3:e0:05:64:d6:4c:1a:d0:
c5:01:c6:fe:d5:1e:39:54:89:65:f2:4d:f4:c9:1d:3b:d6:53:
9f:c5:1f:63:aa:f7:ed:42:af:ff:53:28:30:17:ac:30:1d:58:
4f:e2:d7:3b:14:08:6a:1e:0d:28:3e:d2:66:56:01:c8:db:c5:
b8:3a:02:7f:fd:4c:cc:51:fa:a4:fb:98:82:4b:be:e4:eb:af:
a2:55:ff:62:fc:66:2a:1a:3e:ee:3a:1f:8e:15:e6:74:7c:82:
cb:f1:a1:14:b5:25:30:05:82:b1:75:e9:03:56:3d:c0:58:61:
fb:dc:4b:90:be:9c:94:99:4a:3d:61:16:3e:b6:28:f1:1a:8d:
71:8d:0e:d1:b0:dd:0e:70:d3:ea:4e:df:36:e7:b6:10:97:a9:
6d:f3:18:a5:8d:c5:dc:71:1b:4d:c1:a8:c7:21:42:5f:9b:0c:
f4:9b:8d:89:c1:81:3b:ba:85:7e:e4:da:04:e4:a5:4b:59:25:
b8:4c:e9:17:80:92:70:b9:66:cb:79:9a:79:5c:44:93:8d:2a:
e0:e5:a7:2c:e9:3e:74:d7:f0:0d:25:79:9c:4d:1b:9f:66:f3:
b5:d1:70:ef
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzDtzfL3xJddb8/QNfLb02IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh
NWQzODQwHhcNMjQwMTAxMDYzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDBhNDI4ZjU5OTMyODY2YjAzNmM3ZjBjZWJkN2NiMGUxNDBlYzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDUHZu0QII08Gsz8v3qFK2rqs0Je
ghuTfeSjh+zEDZWa5ie7LyN1EqrheXopVa+625BZ7wXQ+dIg1OxTj3Nzg0N7lspW
RzLDiWkOcocpgBrJ03n7y0zAJ5XiUXM2N0vttjS/q4yCHQRrBz0QvC2E6Y4BF4nh
xInyOqCrL8hx8evESK3IAwoniabCj2bdUK0dtIzDWBauqbjRUPiEVWpOMsh3DLb5
Kc3p1GFV59hFdX8mLlknQZGA48luKcD6x4SCgZGp+ubDoaavlzxDI01QVQWC2ttM
E0dYB8RKwaSAQyuTnGHhhjA9M8K1avPbaLcERY9kp00dh4XSWnPqexjdbQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFNQKQo9ZkyhmsDbH8M69fLDhQOyfMB8GA1UdIwQY
MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt
ZDZhNTk1MGNhZGYyLzEvMUFwQ2oxbVRLR2F3TnNmd3pyMThzT0ZBN0o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy
LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhO0hxUw
DQYJKoZIhvcNAQELBQADggEBACmOn8Md//rVN0t+2X+jM2g8vKZJk2pWjnNdgxLT
4AVk1kwa0MUBxv7VHjlUiWXyTfTJHTvWU5/FH2Oq9+1Cr/9TKDAXrDAdWE/i1zsU
CGoeDSg+0mZWAcjbxbg6An/9TMxR+qT7mIJLvuTrr6JV/2L8ZioaPu46H44V5nR8
gsvxoRS1JTAFgrF16QNWPcBYYfvcS5C+nJSZSj1hFj62KPEajXGNDtGw3Q5w0+pO
3zbnthCXqW3zGKWNxdxxG03BqMchQl+bDPSbjYnBgTu6hX7k2gTkpUtZJbhM6ReA
knC5Zst5mnlcRJONKuDlpyzpPnTX8A0leZxNG59m87XRcO8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:33:41 2024 by rpki-client on console-ams.rpki-client.org