Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/3afbYUsVMWE3fiMVpeHIrl053Rc.roa
File: 3afbYUsVMWE3fiMVpeHIrl053Rc.roa (raw, json)
Hash identifier: 477Wlwo8QZRKNSBFnhLlbcU4fBspxIdhtm/F5Lpb8I4=
Subject key identifier: DD:A7:DB:61:4B:15:31:61:37:7E:23:15:A5:E1:C8:AE:5D:39:DD:17
Certificate issuer: /CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Certificate serial: 0191FB43C6A09CAA82E260253AE5E6B03DDB
Authority key identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/3afbYUsVMWE3fiMVpeHIrl053Rc.roa
Signing time: Mon 16 Sep 2024 14:36:48 +0000
ROA not before: Mon 16 Sep 2024 14:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60150
IP address blocks: 2001:678:6bc::/48 maxlen: 48
2001:678:ef0::/48 maxlen: 48
2001:678:ef4::/48 maxlen: 48
2001:678:ef8::/48 maxlen: 48
2001:67c:270::/48 maxlen: 48
2001:67c:28a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fb:43:c6:a0:9c:aa:82:e2:60:25:3a:e5:e6:b0:3d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Validity
Not Before: Sep 16 14:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dda7db614b153161377e2315a5e1c8ae5d39dd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1c:37:ee:cb:a6:e6:21:7b:ed:bb:32:3f:25:
ee:76:c9:6a:f8:13:82:82:bb:c8:6b:8e:4c:e8:d3:
75:68:3e:5e:e0:9f:0b:35:c4:67:ef:db:2e:88:14:
bb:30:7d:0d:d4:eb:a0:45:15:40:00:a9:1f:96:f3:
2b:0d:81:a4:28:9b:1c:e7:68:e2:8a:59:a8:14:b6:
21:60:df:8f:90:e4:a2:70:8d:0b:72:9d:69:18:78:
23:80:b7:6c:2f:6c:ae:7f:d1:0a:6b:d8:78:6b:08:
a9:f2:31:44:ba:14:5b:ab:74:03:0b:64:b3:a8:a7:
ce:35:53:bd:dc:4f:1e:01:ef:ab:4d:4a:cf:17:ca:
59:d1:18:30:d6:6f:e4:e2:8b:fd:36:02:5f:15:10:
e0:75:27:c3:ad:d1:76:d7:df:a0:20:50:f4:96:13:
dc:c8:89:f2:89:0a:f7:1f:5e:07:7c:09:c6:60:d3:
c3:19:56:51:b1:06:3d:27:d3:0d:d8:17:8c:78:4f:
f1:2a:e8:78:5b:42:86:5e:04:47:4d:bc:18:d5:7c:
41:18:0f:c2:82:7f:e8:b5:59:6f:33:d8:ef:9f:a0:
60:98:e8:a7:d2:ae:21:28:58:6e:a5:75:e7:b0:6c:
5e:12:5c:e2:62:b2:43:f6:a9:c7:73:ad:9d:97:ca:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A7:DB:61:4B:15:31:61:37:7E:23:15:A5:E1:C8:AE:5D:39:DD:17
X509v3 Authority Key Identifier:
keyid:98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/3afbYUsVMWE3fiMVpeHIrl053Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:6bc::/48
2001:678:ef0::/48
2001:678:ef4::/48
2001:678:ef8::/48
2001:67c:270::/48
2001:67c:28a0::/48
Signature Algorithm: sha256WithRSAEncryption
03:5e:47:81:e6:3f:6d:35:2f:b6:bb:83:61:53:ef:23:6e:75:
52:44:c9:15:cf:45:ca:9e:c3:31:0c:7a:21:b7:8c:4f:bf:42:
5c:64:4c:ae:82:fd:e0:fa:f5:cf:e3:45:90:d1:ea:55:7f:8e:
24:31:74:28:8c:31:1b:45:bb:79:da:32:3a:4a:35:18:ca:fd:
af:c8:74:da:6a:14:9e:73:19:1f:e9:91:65:73:3c:d9:68:ba:
f3:8d:21:6e:27:9e:93:71:6f:b3:6b:7d:43:67:fa:9a:83:f1:
63:a9:cc:49:80:91:6e:59:f3:87:35:35:02:e8:d2:6f:63:03:
ab:38:58:e9:4a:2a:c3:9f:61:f7:4e:7a:31:85:65:09:13:5f:
a9:7d:3e:b4:ac:48:8e:a2:77:b5:61:db:78:98:24:b9:b9:5c:
18:96:53:62:41:48:5e:94:f5:44:10:84:54:57:59:70:16:0f:
94:63:07:e8:8b:89:63:5e:22:b0:6d:cb:2a:d5:76:db:ef:3d:
48:9b:40:eb:89:fa:9c:f0:da:95:e0:88:f1:74:6b:61:83:77:
e0:c0:12:c5:f9:7b:f2:8f:e7:d0:4f:94:cf:50:98:f0:ef:6b:
04:ce:cf:85:d7:59:e5:98:66:d6:ba:88:3a:a0:4b:5a:e2:d9:
72:30:bb:03
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZH7Q8agnKqC4mAlOuXmsD3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YWY2NDBjODIwZWViNWZiYzkyMjgxYzYxMTQ0ZjExYTdi
ZDcwN2UwHhcNMjQwOTE2MTQzNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGE3ZGI2MTRiMTUzMTYxMzc3ZTIzMTVhNWUxYzhhZTVkMzlkZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+hw37sum5iF77bsyPyXudslq+BOC
grvIa45M6NN1aD5e4J8LNcRn79suiBS7MH0N1OugRRVAAKkflvMrDYGkKJsc52ji
ilmoFLYhYN+PkOSicI0Lcp1pGHgjgLdsL2yuf9EKa9h4awip8jFEuhRbq3QDC2Sz
qKfONVO93E8eAe+rTUrPF8pZ0Rgw1m/k4ov9NgJfFRDgdSfDrdF219+gIFD0lhPc
yInyiQr3H14HfAnGYNPDGVZRsQY9J9MN2BeMeE/xKuh4W0KGXgRHTbwY1XxBGA/C
gn/otVlvM9jvn6BgmOin0q4hKFhupXXnsGxeElziYrJD9qnHc62dl8qE8QIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFN2n22FLFTFhN34jFaXhyK5dOd0XMB8GA1UdIwQY
MBaAFJivZAyCDutfvJIoHGEUTxGnvXB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUs5a0RJSU82MS04a2lnY1lSUlBFYWU5Y0g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMjJmZjQtYzRhNy00Njk4LTg3OWYt
ZWNhYjcwZWYzMmRhLzEvM2FmYllVc1ZNV0UzZmlNVnBlSElybDA1M1JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8xMjJmZjQtYzRhNy00Njk4LTg3OWYtZWNhYjcwZWYzMmRh
LzEvbUs5a0RJSU82MS04a2lnY1lSUlBFYWU5Y0g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAIAEGeAa8
AwcAIAEGeA7wAwcAIAEGeA70AwcAIAEGeA74AwcAIAEGfAJwAwcAIAEGfCigMA0G
CSqGSIb3DQEBCwUAA4IBAQADXkeB5j9tNS+2u4NhU+8jbnVSRMkVz0XKnsMxDHoh
t4xPv0JcZEyugv3g+vXP40WQ0epVf44kMXQojDEbRbt52jI6SjUYyv2vyHTaahSe
cxkf6ZFlczzZaLrzjSFuJ56TcW+za31DZ/qag/FjqcxJgJFuWfOHNTUC6NJvYwOr
OFjpSirDn2H3TnoxhWUJE1+pfT60rEiOone1Ydt4mCS5uVwYllNiQUhelPVEEIRU
V1lwFg+UYwfoi4ljXiKwbcsq1Xbb7z1Im0Drifqc8NqV4IjxdGthg3fgwBLF+Xvy
j+fQT5TPUJjw72sEzs+F11nlmGbWuog6oEta4tlyMLsD
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:00:00 2024 by rpki-client on console-ams.rpki-client.org