Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/fa9bgVzG_NqW505Mr9fKcyQox0Y.roa
File: fa9bgVzG_NqW505Mr9fKcyQox0Y.roa (raw, json)
Hash identifier: e96VaTYxTsBVb2yjFKMWL0FYHJK7j/D8/BLvGgMAUHQ=
Subject key identifier: 7D:AF:5B:81:5C:C6:FC:DA:96:E7:4E:4C:AF:D7:CA:73:24:28:C7:46
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 018CC3B737A39C6DD257CE46A8AB6DF3B8F5
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/fa9bgVzG_NqW505Mr9fKcyQox0Y.roa
Signing time: Mon 01 Jan 2024 06:30:13 +0000
ROA not before: Mon 01 Jan 2024 06:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139317
IP address blocks: 2a13:b487:4200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:37:a3:9c:6d:d2:57:ce:46:a8:ab:6d:f3:b8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 1 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7daf5b815cc6fcda96e74e4cafd7ca732428c746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:2d:2a:18:fe:a5:99:ab:5a:6b:fa:8f:da:
bb:66:d0:72:b8:8b:fb:e2:53:47:1a:51:8b:e4:9d:
9b:c7:d5:0c:02:d6:41:80:ad:ee:b6:8f:8f:99:da:
5d:a7:29:84:5e:38:51:65:98:56:b0:d2:38:01:88:
3d:52:8a:2d:7b:ef:10:2c:06:8d:e3:9f:ca:11:ae:
1f:ad:ec:af:94:0a:d2:1f:d1:0b:65:fa:17:1c:a8:
39:d8:dd:6e:fc:ab:ac:be:f0:75:8d:e0:4a:98:91:
47:88:c3:2e:c1:c5:b8:bd:90:19:3a:bb:6c:1b:3d:
9c:a6:b4:6d:71:68:75:0e:2a:08:e0:a0:2b:ce:09:
d8:9f:9d:0b:29:8a:11:34:94:7b:f1:cb:df:78:77:
20:33:19:22:59:f4:4e:be:48:b7:77:b9:03:4d:d8:
c2:57:b8:c8:17:11:0c:c4:47:d8:a0:45:a5:9a:81:
66:70:9e:8c:53:96:4e:56:f2:9c:d7:f0:6e:2e:0e:
9b:22:4d:a8:a3:43:01:a7:63:f4:28:0b:25:ff:b6:
55:50:6e:0a:53:78:17:70:a4:6e:93:69:99:c7:ef:
88:b2:9c:a6:83:a2:99:38:a6:66:da:b9:75:09:e8:
21:9d:5c:93:12:7c:66:78:aa:63:db:47:d3:b0:e5:
46:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AF:5B:81:5C:C6:FC:DA:96:E7:4E:4C:AF:D7:CA:73:24:28:C7:46
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/fa9bgVzG_NqW505Mr9fKcyQox0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:4200::/40
Signature Algorithm: sha256WithRSAEncryption
8c:c9:1c:54:22:1d:a3:46:0a:08:ee:a6:0e:8c:00:30:79:00:
ff:8f:8b:fb:f4:8b:31:05:81:eb:ac:00:10:fa:66:9e:04:de:
23:82:c1:b0:50:ad:1a:38:7a:c7:8d:e2:b8:24:a4:c5:75:86:
e6:49:ba:b8:db:ba:57:50:0d:1e:cf:0b:10:3f:cc:2a:07:22:
0f:49:01:78:fc:81:e5:53:7e:c1:23:69:ed:af:4f:aa:40:2c:
82:9c:e9:38:f0:cc:12:08:0c:e4:24:5f:03:8c:5f:77:5a:12:
87:b6:1b:25:ef:c9:d1:b3:c5:90:3c:46:37:19:aa:b0:d7:86:
61:fc:56:4f:49:d9:08:94:73:bf:85:fa:07:1d:88:8b:a7:d2:
43:2d:95:41:9a:5a:10:ee:44:9f:f4:a0:92:ae:f5:94:74:84:
07:72:bf:f0:20:f2:62:cc:f3:fb:e1:ca:bf:6c:80:07:fd:97:
f1:4b:f3:4d:59:86:69:e5:6f:a4:5e:10:2e:e4:a1:42:8a:76:
bd:78:a5:63:5e:3c:f3:9b:1c:f7:54:8e:ce:ac:d5:80:75:74:
05:ba:0f:c3:8a:df:e0:7a:96:e9:a6:2f:9c:28:59:3c:ba:16:
dd:af:40:b4:4f:cb:84:90:94:b5:c1:6d:87:45:b5:13:45:33:
79:1b:bd:ce
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzDtzejnG3SV85GqKtt87j1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh
NWQzODQwHhcNMjQwMTAxMDYzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGFmNWI4MTVjYzZmY2RhOTZlNzRlNGNhZmQ3Y2E3MzI0MjhjNzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY4tKhj+pZmrWmv6j9q7ZtByuIv7
4lNHGlGL5J2bx9UMAtZBgK3uto+PmdpdpymEXjhRZZhWsNI4AYg9Uoote+8QLAaN
45/KEa4freyvlArSH9ELZfoXHKg52N1u/KusvvB1jeBKmJFHiMMuwcW4vZAZOrts
Gz2cprRtcWh1DioI4KArzgnYn50LKYoRNJR78cvfeHcgMxkiWfROvki3d7kDTdjC
V7jIFxEMxEfYoEWlmoFmcJ6MU5ZOVvKc1/BuLg6bIk2oo0MBp2P0KAsl/7ZVUG4K
U3gXcKRuk2mZx++Ispymg6KZOKZm2rl1CeghnVyTEnxmeKpj20fTsOVGqwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFH2vW4FcxvzaludOTK/XynMkKMdGMB8GA1UdIwQY
MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt
ZDZhNTk1MGNhZGYyLzEvZmE5YmdWekdfTnFXNTA1TXI5ZktjeVFveDBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy
LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhO0h0Iw
DQYJKoZIhvcNAQELBQADggEBAIzJHFQiHaNGCgjupg6MADB5AP+Pi/v0izEFgeus
ABD6Zp4E3iOCwbBQrRo4eseN4rgkpMV1huZJurjbuldQDR7PCxA/zCoHIg9JAXj8
geVTfsEjae2vT6pALIKc6TjwzBIIDOQkXwOMX3daEoe2GyXvydGzxZA8RjcZqrDX
hmH8Vk9J2QiUc7+F+gcdiIun0kMtlUGaWhDuRJ/0oJKu9ZR0hAdyv/Ag8mLM8/vh
yr9sgAf9l/FL801Zhmnlb6ReEC7koUKKdr14pWNePPObHPdUjs6s1YB1dAW6D8OK
3+B6lummL5woWTy6Ft2vQLRPy4SQlLXBbYdFtRNFM3kbvc4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:33:41 2024 by rpki-client on console-ams.rpki-client.org