Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/jSO71Jr2M03V47NBUIZFT3rvv_g.roa
File: jSO71Jr2M03V47NBUIZFT3rvv_g.roa (raw, json)
Hash identifier: 7W1qaN/rx1j2OFHijdQp5cqQE/k2kjTtR6tnkBJG+Ms=
Subject key identifier: 8D:23:BB:D4:9A:F6:33:4D:D5:E3:B3:41:50:86:45:4F:7A:EF:BF:F8
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 018CC49367F8301183CD45A4D327BB89A395
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/jSO71Jr2M03V47NBUIZFT3rvv_g.roa
Signing time: Mon 01 Jan 2024 10:30:43 +0000
ROA not before: Mon 01 Jan 2024 10:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60668
IP address blocks: 2a10:4646:2c0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:67:f8:30:11:83:cd:45:a4:d3:27:bb:89:a3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 1 10:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d23bbd49af6334dd5e3b3415086454f7aefbff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8b:e5:54:89:72:dd:73:ca:7e:7a:59:3c:35:
d6:ff:01:0e:ce:3a:f2:4d:26:22:15:68:9b:cd:75:
9c:7d:d3:11:b9:2d:3a:9e:13:2f:a9:d3:bc:34:85:
7e:31:a4:24:a8:e5:a7:65:57:4e:aa:c4:87:e8:cb:
74:97:36:01:7a:d0:07:44:81:aa:46:54:39:85:e0:
bd:9d:42:4c:ba:84:54:15:13:d7:f4:e2:7b:a4:49:
04:13:01:f2:ec:68:d7:af:11:c3:84:29:64:72:17:
2c:47:8a:78:20:f0:4f:b2:1e:18:d4:da:5d:a9:6f:
03:51:21:bf:56:17:1b:1b:93:46:87:25:30:4f:b7:
8d:e7:ad:c3:93:c4:fa:5d:41:53:a7:84:0b:52:b7:
9a:49:f2:55:8b:18:46:d5:6c:a9:b3:cc:de:df:a0:
e8:79:06:bc:12:08:d4:9d:3e:6c:ec:6a:66:37:01:
78:5e:98:33:4b:60:61:0d:65:ee:3e:f4:49:e1:d4:
62:93:f5:ed:48:02:96:03:4f:49:84:a6:4c:3c:bc:
77:ef:61:21:74:57:60:6d:e7:e4:03:01:1b:19:5d:
f4:21:de:62:6e:b9:7f:ab:07:bc:e0:35:95:b8:3b:
0f:71:9e:34:0f:17:17:75:27:77:a8:1d:3b:64:cb:
7b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:23:BB:D4:9A:F6:33:4D:D5:E3:B3:41:50:86:45:4F:7A:EF:BF:F8
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/jSO71Jr2M03V47NBUIZFT3rvv_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:2c0::/44
Signature Algorithm: sha256WithRSAEncryption
38:0b:98:b2:7d:13:ed:b3:40:b6:59:ae:0b:9e:3d:67:30:01:
4a:d2:b0:03:87:27:3e:9a:71:e7:5c:ee:f4:c5:1f:f7:a5:96:
a5:23:8b:ce:27:f1:17:18:c2:04:9e:8c:5f:2e:91:63:56:76:
cc:94:1d:65:bb:07:4c:e9:61:8a:1d:a0:e2:ff:37:f6:ff:a8:
31:31:0e:a8:a4:b2:0a:d4:e0:6e:3b:09:62:56:54:75:f8:e2:
c0:e1:1f:41:40:03:0d:c2:af:2b:b1:a1:0d:05:d9:65:01:93:
a9:e2:c1:56:e6:5b:9c:17:33:3a:69:77:e0:9b:0b:03:f0:22:
28:b2:d1:b9:66:30:b4:95:13:34:b0:88:a5:bb:b0:a0:f2:45:
0e:f6:67:9c:ad:bf:8d:57:5d:02:e1:8e:79:fc:77:0a:25:34:
cb:a9:aa:cf:c6:8e:40:44:72:62:b1:30:25:8b:a8:8d:89:06:
36:da:d3:df:6d:1f:73:61:b2:14:9b:9d:3d:34:3b:6a:2f:d3:
86:ef:d0:07:eb:ed:d5:9c:54:ea:6f:64:e0:fc:2a:e1:86:0f:
ae:0d:d8:1f:66:54:25:11:b0:0e:96:fc:63:7d:50:3b:4b:8f:
55:0a:64:a3:ad:d4:7c:f4:6d:a2:4a:ee:f1:f9:ab:12:11:b7:
4b:88:8b:3b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzEk2f4MBGDzUWk0ye7iaOVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2
N2RmMDIwHhcNMjQwMTAxMTAzMDQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDIzYmJkNDlhZjYzMzRkZDVlM2IzNDE1MDg2NDU0ZjdhZWZiZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgovlVIly3XPKfnpZPDXW/wEOzjry
TSYiFWibzXWcfdMRuS06nhMvqdO8NIV+MaQkqOWnZVdOqsSH6Mt0lzYBetAHRIGq
RlQ5heC9nUJMuoRUFRPX9OJ7pEkEEwHy7GjXrxHDhClkchcsR4p4IPBPsh4Y1Npd
qW8DUSG/VhcbG5NGhyUwT7eN563Dk8T6XUFTp4QLUreaSfJVixhG1Wyps8ze36Do
eQa8EgjUnT5s7GpmNwF4XpgzS2BhDWXuPvRJ4dRik/XtSAKWA09JhKZMPLx372Eh
dFdgbefkAwEbGV30Id5ibrl/qwe84DWVuDsPcZ40DxcXdSd3qB07ZMt7bQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI0ju9Sa9jNN1eOzQVCGRU9677/4MB8GA1UdIwQY
MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvalNPNzFKcjJNMDNWNDdOQlVJWkZUM3J2dl9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgLA
MA0GCSqGSIb3DQEBCwUAA4IBAQA4C5iyfRPts0C2Wa4Lnj1nMAFK0rADhyc+mnHn
XO70xR/3pZalI4vOJ/EXGMIEnoxfLpFjVnbMlB1luwdM6WGKHaDi/zf2/6gxMQ6o
pLIK1OBuOwliVlR1+OLA4R9BQAMNwq8rsaENBdllAZOp4sFW5lucFzM6aXfgmwsD
8CIostG5ZjC0lRM0sIilu7Cg8kUO9mecrb+NV10C4Y55/HcKJTTLqarPxo5ARHJi
sTAli6iNiQY22tPfbR9zYbIUm509NDtqL9OG79AH6+3VnFTqb2Tg/Crhhg+uDdgf
ZlQlEbAOlvxjfVA7S49VCmSjrdR89G2iSu7x+asSEbdLiIs7
-----END CERTIFICATE-----
Generated at Sat Jun 8 07:06:26 2024 by rpki-client on console-fra.rpki-client.org