Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/4dbn_NmMriDcRbeicqwr2OABNmI.roa
File: 4dbn_NmMriDcRbeicqwr2OABNmI.roa (raw, json)
Hash identifier: rhoRDBo7390jdKJO7qIEuIMdutmzoZKXCtygXFNZDUI=
Subject key identifier: E1:D6:E7:FC:D9:8C:AE:20:DC:45:B7:A2:72:AC:2B:D8:E0:01:36:62
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 018CC94D03BE5D7B0950B0A56DC689E702D1
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/4dbn_NmMriDcRbeicqwr2OABNmI.roa
Signing time: Tue 02 Jan 2024 08:31:56 +0000
ROA not before: Tue 02 Jan 2024 08:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199656
IP address blocks: 2a0a:280:2700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jul 2024 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:03:be:5d:7b:09:50:b0:a5:6d:c6:89:e7:02:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 08:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1d6e7fcd98cae20dc45b7a272ac2bd8e0013662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3d:01:a2:50:b1:00:b7:68:59:12:32:1e:fa:
33:e3:95:3e:93:8e:fc:73:d0:82:9a:05:f7:21:a0:
00:14:8e:fa:cd:6a:e1:01:86:57:fb:1e:58:ac:90:
19:12:34:86:94:3f:96:07:7e:9d:63:c6:c5:3d:f5:
b9:f3:f1:82:3c:88:85:13:15:e7:20:55:d0:a2:10:
bc:4c:c2:eb:7b:ba:24:b6:44:dd:c8:8d:92:ea:85:
6d:1d:21:0f:05:6d:de:bb:ea:28:84:55:ff:ea:e2:
b9:0a:b9:56:02:c4:de:de:16:41:55:fe:6b:76:f8:
8a:85:f8:94:dd:d1:1d:1c:dd:fc:c5:6f:f0:2a:84:
cc:81:61:02:e2:7f:af:d7:f1:06:a9:19:63:98:f9:
3d:64:29:a7:36:ae:2f:fb:1d:ca:63:d1:ee:02:37:
a1:70:2a:de:f9:d7:64:14:42:e2:58:78:f5:9b:bd:
00:f3:7f:3e:74:8c:d9:0b:51:cd:6d:cf:37:95:b5:
ae:21:13:65:e7:1f:62:af:d1:02:7c:7b:33:74:5f:
1f:8e:30:79:47:fd:8e:16:f0:59:80:6c:09:7c:5c:
a7:55:ce:30:cd:82:29:de:c5:c0:1e:5c:2e:47:86:
44:cb:0d:54:66:01:ae:54:93:91:8c:ab:11:3c:fa:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D6:E7:FC:D9:8C:AE:20:DC:45:B7:A2:72:AC:2B:D8:E0:01:36:62
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/4dbn_NmMriDcRbeicqwr2OABNmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:2700::/40
Signature Algorithm: sha256WithRSAEncryption
7a:ac:2f:fa:ab:cf:00:71:22:f5:6e:21:68:ce:4a:2d:36:07:
8b:a8:d5:51:34:54:11:6b:2d:11:f5:f4:8a:bf:29:aa:39:ba:
48:fc:57:01:ae:8a:ff:91:34:98:0a:35:71:5d:0b:49:3c:34:
a9:2c:26:ef:c2:cb:cf:ff:29:2e:40:a9:0d:fb:39:26:9a:aa:
b0:ab:a7:b6:e2:91:16:e3:50:e3:c9:3f:66:7e:b7:92:8f:74:
1a:60:51:58:b6:ce:a9:b1:ae:bf:d3:23:70:5b:22:d4:ac:4e:
41:19:f0:64:15:7b:83:c6:5f:61:67:06:67:ad:bd:1e:27:3d:
a3:c4:5b:1e:77:51:da:c1:9b:e6:fb:f7:8c:d3:fc:4b:e5:56:
02:99:49:d0:58:3d:eb:08:b8:43:59:d5:5e:81:fb:24:b3:98:
68:30:c8:f8:39:87:f4:3f:4e:6c:fe:6f:57:45:04:47:8f:8c:
96:74:b3:8f:46:3e:ca:9b:ec:1f:84:c6:dc:1f:54:bc:93:b2:
5a:34:79:e3:22:8c:a1:3a:1a:a8:d2:0a:74:d2:ba:8c:95:20:
76:3a:21:5c:3e:8b:e7:e7:1d:36:73:01:c6:f7:55:85:a5:95:
46:22:9e:0c:02:18:bc:5c:5e:d4:46:db:f3:d3:fa:7a:c7:03:
65:fb:b7:4c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzJTQO+XXsJULClbcaJ5wLRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi
MzM2OWYwHhcNMjQwMTAyMDgzMTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWQ2ZTdmY2Q5OGNhZTIwZGM0NWI3YTI3MmFjMmJkOGUwMDEzNjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij0BolCxALdoWRIyHvoz45U+k478
c9CCmgX3IaAAFI76zWrhAYZX+x5YrJAZEjSGlD+WB36dY8bFPfW58/GCPIiFExXn
IFXQohC8TMLre7oktkTdyI2S6oVtHSEPBW3eu+oohFX/6uK5CrlWAsTe3hZBVf5r
dviKhfiU3dEdHN38xW/wKoTMgWEC4n+v1/EGqRljmPk9ZCmnNq4v+x3KY9HuAjeh
cCre+ddkFELiWHj1m70A838+dIzZC1HNbc83lbWuIRNl5x9ir9ECfHszdF8fjjB5
R/2OFvBZgGwJfFynVc4wzYIp3sXAHlwuR4ZEyw1UZgGuVJORjKsRPPooIQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFOHW5/zZjK4g3EW3onKsK9jgATZiMB8GA1UdIwQY
MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt
ZjUxYzVmYjNkZjlhLzEvNGRibl9ObU1yaURjUmJlaWNxd3IyT0FCTm1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh
LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgoCgCcw
DQYJKoZIhvcNAQELBQADggEBAHqsL/qrzwBxIvVuIWjOSi02B4uo1VE0VBFrLRH1
9Iq/Kao5ukj8VwGuiv+RNJgKNXFdC0k8NKksJu/Cy8//KS5AqQ37OSaaqrCrp7bi
kRbjUOPJP2Z+t5KPdBpgUVi2zqmxrr/TI3BbItSsTkEZ8GQVe4PGX2FnBmetvR4n
PaPEWx53UdrBm+b794zT/EvlVgKZSdBYPesIuENZ1V6B+ySzmGgwyPg5h/Q/Tmz+
b1dFBEePjJZ0s49GPsqb7B+ExtwfVLyTslo0eeMijKE6GqjSCnTSuoyVIHY6IVw+
i+fnHTZzAcb3VYWllUYingwCGLxcXtRG2/PT+nrHA2X7t0w=
-----END CERTIFICATE-----
Generated at Fri Jul 5 04:37:42 2024 by rpki-client on console-ams.rpki-client.org