Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/2COVhH4yhPdvhmDuhMznWdAdtkA.roa
File: 2COVhH4yhPdvhmDuhMznWdAdtkA.roa (raw, json)
Hash identifier: di9r1yyeiyk2cqdXnVic7Bh/hy/j1yjb/OMFPBEPQ3U=
Subject key identifier: D8:23:95:84:7E:32:84:F7:6F:86:60:EE:84:CC:E7:59:D0:1D:B6:40
Certificate issuer: /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial: 018F52D7AB351B9458A204C4651F023566A8
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/2COVhH4yhPdvhmDuhMznWdAdtkA.roa
Signing time: Tue 07 May 2024 11:36:56 +0000
ROA not before: Tue 07 May 2024 11:36:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215088
IP address blocks: 2001:67c:e6c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:52:d7:ab:35:1b:94:58:a2:04:c4:65:1f:02:35:66:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Validity
Not Before: May 7 11:36:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d82395847e3284f76f8660ee84cce759d01db640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c1:e0:b8:ee:6c:df:44:54:2d:dd:4c:2c:25:
44:b6:ec:9b:1a:55:25:2b:94:7a:34:2b:b9:80:0f:
2b:00:96:6d:01:e4:e2:6f:6d:3e:97:9b:76:b9:24:
e5:69:ba:76:0e:71:dd:4c:04:e6:f5:ac:0a:c1:34:
98:f8:06:29:4f:87:4b:b6:ba:6c:67:5e:3c:40:e0:
23:59:bb:55:3a:0c:03:39:be:b4:32:1e:d6:f4:a4:
01:ce:0a:e0:a5:ed:e4:49:a2:69:00:f4:ca:d6:1c:
e2:33:cc:8d:5a:63:a8:ba:60:65:b5:14:0b:98:e8:
a5:a1:2d:de:c4:20:ef:a5:30:04:78:c3:96:a1:38:
94:e6:f2:2c:21:5b:95:0a:9b:b4:94:19:35:7c:0a:
d9:ce:55:db:b3:47:d4:ca:0f:18:78:a9:ba:5e:c3:
70:ef:e0:3f:af:06:33:cb:25:d9:0d:1b:a8:30:8c:
ea:a6:ca:5c:d0:fe:b8:d6:e3:5c:11:94:cd:30:42:
63:35:0f:a3:74:bf:99:9b:64:24:0a:24:91:ef:2a:
02:44:b1:d5:22:56:11:32:2f:c9:99:cc:54:f4:24:
27:1b:9d:f4:05:cb:09:99:8f:a4:40:d2:b9:6b:98:
af:8a:d9:8a:8b:81:cd:0c:94:7f:35:6e:20:70:f0:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:23:95:84:7E:32:84:F7:6F:86:60:EE:84:CC:E7:59:D0:1D:B6:40
X509v3 Authority Key Identifier:
keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/2COVhH4yhPdvhmDuhMznWdAdtkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e6c::/48
Signature Algorithm: sha256WithRSAEncryption
81:9f:d4:c9:96:07:b1:cd:b9:e0:88:a6:8d:b5:de:05:87:17:
67:76:31:5f:5c:3a:66:97:cb:2e:75:18:9c:73:22:3a:4a:73:
7c:51:27:75:cf:33:ce:31:79:2d:00:53:49:0a:1e:4e:c5:c2:
71:91:8a:8d:a9:a5:73:4f:dc:63:41:42:a7:ab:26:e8:be:da:
67:a1:0a:da:41:ef:35:c6:e4:4e:df:23:77:91:5d:0a:ea:d4:
18:b1:b3:a5:1b:37:7b:24:40:77:e2:de:25:c7:76:dd:9a:e4:
88:8b:47:05:bc:fc:93:0f:3e:d3:f0:d1:15:20:da:40:ce:e9:
ff:87:3b:80:61:55:4e:df:0c:85:19:6b:7f:a4:7e:f3:b2:7e:
45:60:d9:dd:cb:4c:91:92:3f:12:a5:a5:31:36:f6:42:a8:da:
45:f6:c2:8e:77:c1:d5:9d:4b:30:41:a2:6f:ce:79:60:b9:1d:
6d:cc:0d:fa:2a:87:ec:48:72:df:1e:23:fd:f2:08:cc:72:40:
bc:07:6d:db:f3:31:c5:d6:d8:ef:43:12:46:fe:4d:1b:a2:13:
39:b9:28:ab:84:4e:3e:b7:b5:cc:cd:c2:94:cb:14:a0:e3:4f:
90:ac:da:22:7c:e8:a3:37:f3:f1:54:a9:46:fd:0f:02:4d:94:
83:1d:b4:89
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY9S16s1G5RYogTEZR8CNWaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYzJiMGVlMTg3OTI4NDA5MDY1ZDE5ZWU5YzA4NThlOGMx
N2VhMTMwHhcNMjQwNTA3MTEzNjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODIzOTU4NDdlMzI4NGY3NmY4NjYwZWU4NGNjZTc1OWQwMWRiNjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksHguO5s30RULd1MLCVEtuybGlUl
K5R6NCu5gA8rAJZtAeTib20+l5t2uSTlabp2DnHdTATm9awKwTSY+AYpT4dLtrps
Z148QOAjWbtVOgwDOb60Mh7W9KQBzgrgpe3kSaJpAPTK1hziM8yNWmOoumBltRQL
mOiloS3exCDvpTAEeMOWoTiU5vIsIVuVCpu0lBk1fArZzlXbs0fUyg8YeKm6XsNw
7+A/rwYzyyXZDRuoMIzqpspc0P641uNcEZTNMEJjNQ+jdL+Zm2QkCiSR7yoCRLHV
IlYRMi/JmcxU9CQnG530BcsJmY+kQNK5a5ivitmKi4HNDJR/NW4gcPD2JwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNgjlYR+MoT3b4Zg7oTM51nQHbZAMB8GA1UdIwQY
MBaAFNLCsO4YeShAkGXRnunAhY6MF+oTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hYmFjMTQtNmVhYi00OTg1LTg2N2Et
YzhlODYzYzFhOGQxLzEvMkNPVmhINHloUGR2aG1EdWhNem5XZEFkdGtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hYmFjMTQtNmVhYi00OTg1LTg2N2EtYzhlODYzYzFhOGQx
LzEvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA5s
MA0GCSqGSIb3DQEBCwUAA4IBAQCBn9TJlgexzbngiKaNtd4FhxdndjFfXDpml8su
dRiccyI6SnN8USd1zzPOMXktAFNJCh5OxcJxkYqNqaVzT9xjQUKnqybovtpnoQra
Qe81xuRO3yN3kV0K6tQYsbOlGzd7JEB34t4lx3bdmuSIi0cFvPyTDz7T8NEVINpA
zun/hzuAYVVO3wyFGWt/pH7zsn5FYNndy0yRkj8SpaUxNvZCqNpF9sKOd8HVnUsw
QaJvznlguR1tzA36KofsSHLfHiP98gjMckC8B23b8zHF1tjvQxJG/k0bohM5uSir
hE4+t7XMzcKUyxSg40+QrNoifOijN/PxVKlG/Q8CTZSDHbSJ
-----END CERTIFICATE-----
Generated at Tue Jun 18 07:33:14 2024 by rpki-client on console-fra.rpki-client.org