Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/v0mBl6YQdMVuXPnOoWYLrsdVF8U.roa
File: v0mBl6YQdMVuXPnOoWYLrsdVF8U.roa (raw, json)
Hash identifier: FtjXNDtPIxdU08+61hineZ098noqQ1vhwcMoisRAyYo=
Subject key identifier: BF:49:81:97:A6:10:74:C5:6E:5C:F9:CE:A1:66:0B:AE:C7:55:17:C5
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 018CC3B73DD3A3FFD0F7F623CCF6FA9F6F5C
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/v0mBl6YQdMVuXPnOoWYLrsdVF8U.roa
Signing time: Mon 01 Jan 2024 06:30:15 +0000
ROA not before: Mon 01 Jan 2024 06:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207142
IP address blocks: 2a13:b486::/32 maxlen: 48
2a13:b483::/32 maxlen: 48
2a13:b484::/31 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3d:d3:a3:ff:d0:f7:f6:23:cc:f6:fa:9f:6f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 1 06:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf498197a61074c56e5cf9cea1660baec75517c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:d3:06:92:ac:dd:6d:a9:aa:98:96:e2:2b:
a8:0d:66:38:eb:3c:f2:b4:a6:64:01:16:8b:65:2a:
dd:80:ae:db:5a:b0:c4:73:b0:92:e6:3c:86:6d:a0:
fe:ef:a5:69:d2:71:25:1f:e3:95:1a:58:eb:de:78:
93:8e:5f:c9:ac:f3:04:b4:c6:24:2d:d9:fc:77:39:
f6:3c:b4:da:3b:78:24:cb:18:2d:83:f5:b2:f3:22:
8f:0c:b6:82:1c:71:94:6b:a6:ee:fd:ce:0a:68:7d:
4b:c3:e3:f7:f0:40:15:a4:9f:d8:7a:29:ac:a1:61:
f6:ed:0c:24:73:55:41:8b:18:6e:04:18:1d:d3:ca:
32:8b:8e:33:79:29:e9:12:dc:47:1b:61:dc:25:fe:
77:2f:49:07:72:2b:1f:a1:2f:5a:e1:65:28:80:67:
e2:05:f7:c4:17:9c:f5:1c:40:d6:73:86:61:52:b1:
a9:a6:a8:93:5f:b5:f4:50:e5:61:25:8e:cd:f3:c2:
d6:87:ea:7e:8e:91:87:2b:c1:35:6b:30:d7:4e:1e:
85:25:16:89:76:81:05:c6:61:97:26:b3:06:ec:53:
a8:8c:c4:4d:dd:74:9a:a1:15:41:ea:d2:37:76:d5:
ca:12:35:98:2f:d0:10:de:3c:83:f7:51:2f:b5:b4:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:49:81:97:A6:10:74:C5:6E:5C:F9:CE:A1:66:0B:AE:C7:55:17:C5
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/v0mBl6YQdMVuXPnOoWYLrsdVF8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b483::-2a13:b486:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
11:2c:ce:de:42:aa:a3:7e:9d:b3:a7:78:d7:e6:c4:e4:d0:0b:
79:0f:84:8b:14:d9:4b:de:42:e1:16:43:b2:d0:80:0b:5b:5c:
05:97:68:b4:64:90:66:af:94:68:32:37:02:db:68:41:f7:b3:
24:12:2c:bf:da:c2:be:b6:42:d0:28:0c:e2:d4:9a:a0:1d:c8:
cc:94:06:66:38:4f:ca:7d:2a:a3:89:cd:07:61:91:7e:bd:f0:
23:29:b6:ac:8c:a6:ec:0b:9f:0a:52:05:2b:6a:a6:f7:93:e6:
14:7c:ab:7f:82:ed:5b:df:f6:30:ba:10:5b:50:14:0d:bd:cc:
d9:77:36:7c:b8:42:16:8d:71:91:58:f4:12:ff:ce:fd:96:88:
7d:b2:74:1f:7b:5e:d1:e8:81:33:68:bf:81:84:71:e3:23:28:
09:86:f9:e8:e1:62:46:27:81:04:d9:d0:28:82:0d:b8:51:ae:
72:72:bb:81:7b:01:ba:d2:4f:c8:04:3e:97:6b:10:cb:0c:5b:
2b:3d:36:dd:88:ef:d4:d1:ec:0a:9d:c7:ee:b1:73:d1:13:d4:
93:b4:f7:5a:29:d2:00:ab:da:d6:81:e3:08:33:9d:42:62:d8:
2c:b3:95:b8:a3:2b:0a:77:e5:a4:e3:37:ac:ce:a9:30:46:b6:
61:52:13:3c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAYzDtz3To//Q9/YjzPb6n29cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh
NWQzODQwHhcNMjQwMTAxMDYzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjQ5ODE5N2E2MTA3NGM1NmU1Y2Y5Y2VhMTY2MGJhZWM3NTUxN2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+TTBpKs3W2pqpiW4iuoDWY46zzy
tKZkARaLZSrdgK7bWrDEc7CS5jyGbaD+76Vp0nElH+OVGljr3niTjl/JrPMEtMYk
Ldn8dzn2PLTaO3gkyxgtg/Wy8yKPDLaCHHGUa6bu/c4KaH1Lw+P38EAVpJ/Yeims
oWH27Qwkc1VBixhuBBgd08oyi44zeSnpEtxHG2HcJf53L0kHcisfoS9a4WUogGfi
BffEF5z1HEDWc4ZhUrGppqiTX7X0UOVhJY7N88LWh+p+jpGHK8E1azDXTh6FJRaJ
doEFxmGXJrMG7FOojMRN3XSaoRVB6tI3dtXKEjWYL9AQ3jyD91EvtbQ3XQIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFL9JgZemEHTFblz5zqFmC67HVRfFMB8GA1UdIwQY
MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt
ZDZhNTk1MGNhZGYyLzEvdjBtQmw2WVFkTVZ1WFBuT29XWUxyc2RWRjhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy
LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQAqE7SD
AwUAKhO0hjANBgkqhkiG9w0BAQsFAAOCAQEAESzO3kKqo36ds6d41+bE5NALeQ+E
ixTZS95C4RZDstCAC1tcBZdotGSQZq+UaDI3AttoQfezJBIsv9rCvrZC0CgM4tSa
oB3IzJQGZjhPyn0qo4nNB2GRfr3wIym2rIym7AufClIFK2qm95PmFHyrf4LtW9/2
MLoQW1AUDb3M2Xc2fLhCFo1xkVj0Ev/O/ZaIfbJ0H3te0eiBM2i/gYRx4yMoCYb5
6OFiRieBBNnQKIINuFGucnK7gXsButJPyAQ+l2sQywxbKz023Yjv1NHsCp3H7rFz
0RPUk7T3WinSAKva1oHjCDOdQmLYLLOVuKMrCnflpOM3rM6pMEa2YVITPA==
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:32:33 2024 by rpki-client on console-ams.rpki-client.org