Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/EDkk8ZYHGkiB0u9AZ2JtOHJ5m3I.roa
File: EDkk8ZYHGkiB0u9AZ2JtOHJ5m3I.roa (raw, json)
Hash identifier: hltp2NYzUqmZOaQSq2y+J5RzyUyCWtF6b+xyrLQyva4=
Subject key identifier: 10:39:24:F1:96:07:1A:48:81:D2:EF:40:67:62:6D:38:72:79:9B:72
Certificate issuer: /CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Certificate serial: 018CC5DBF45F5972B6CBEE44044BCAC64EBE
Authority key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/EDkk8ZYHGkiB0u9AZ2JtOHJ5m3I.roa
Signing time: Mon 01 Jan 2024 16:29:35 +0000
ROA not before: Mon 01 Jan 2024 16:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51011
IP address blocks: 2a03:5a00:2e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f4:5f:59:72:b6:cb:ee:44:04:4b:ca:c6:4e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Validity
Not Before: Jan 1 16:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=103924f196071a4881d2ef4067626d3872799b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:32:d3:59:3e:bd:32:4d:f0:2f:cd:16:07:fb:
aa:36:3f:35:a9:34:fc:41:0d:a2:5f:c6:98:55:d8:
6b:a7:39:8e:db:1a:85:7a:e8:9e:1b:7a:48:ae:c3:
ec:9b:c7:8a:35:c6:72:ef:56:fc:01:39:d1:c1:84:
31:c9:9f:04:f5:a5:f6:31:fc:7d:27:a8:e0:99:c6:
36:d3:48:c2:fb:60:96:b8:33:71:a0:d2:18:75:52:
c3:a3:8a:c5:39:39:cf:c6:8c:8c:b4:ad:e7:8b:99:
67:ed:78:09:6e:79:a4:5c:67:de:81:58:5d:6a:c3:
93:68:d5:22:4f:0d:4e:4d:93:20:5f:92:7e:4e:ee:
ec:62:bc:18:12:34:9a:df:60:48:6d:62:3c:4b:9f:
1f:d4:fb:67:6e:55:df:5b:c2:97:ba:e4:88:d8:0f:
5e:4f:5a:5d:44:e1:b8:ed:3b:1b:be:d8:46:ac:dc:
33:f9:92:db:ea:a2:d5:20:8b:01:3a:43:c9:ec:37:
6a:a3:34:25:f4:15:c3:4d:34:e5:83:48:d2:78:ed:
ec:73:5e:a7:99:41:f0:25:87:33:86:9f:76:2f:2a:
7c:99:71:64:a9:de:79:0e:3e:4d:01:f9:15:cc:ac:
70:13:37:91:28:3f:6d:00:55:a2:6d:08:84:e8:9b:
f6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:39:24:F1:96:07:1A:48:81:D2:EF:40:67:62:6D:38:72:79:9B:72
X509v3 Authority Key Identifier:
keyid:7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/EDkk8ZYHGkiB0u9AZ2JtOHJ5m3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5a00:2e::/48
Signature Algorithm: sha256WithRSAEncryption
96:ef:ed:20:ca:75:99:13:95:45:e7:e9:fd:a6:72:7b:78:07:
08:e6:1a:1d:06:dd:2f:34:8b:01:66:ee:1c:27:48:56:5b:74:
28:40:67:80:3b:3a:1c:e0:5b:ad:e6:df:28:1f:f3:3f:d0:6b:
a5:68:07:69:5b:c6:11:c5:a3:d1:6c:8b:11:9a:d9:89:8f:1f:
96:8b:2a:5a:35:ca:ab:23:4b:45:50:c7:dc:28:55:8c:dc:83:
da:ff:5f:21:b7:66:6a:dc:83:f6:0b:1f:c8:12:e9:fc:16:f7:
f3:c0:99:1f:e7:1c:51:ec:9c:e1:89:18:9f:db:79:c2:a7:55:
ab:23:84:09:83:eb:fe:14:80:11:b7:e3:f5:0f:f6:68:3f:3c:
71:38:69:50:40:33:53:db:f6:87:c9:12:6a:fe:85:c3:9a:53:
06:fa:04:03:00:e0:2a:9f:d3:ca:29:28:59:14:c6:a8:df:e3:
28:a3:f2:52:6d:10:39:fa:89:da:71:8b:88:23:7c:b3:dd:49:
00:03:4a:23:a3:90:1b:3c:c9:d5:25:9a:8a:2a:65:59:04:44:
29:94:ac:ff:81:5f:b1:d7:e5:5f:4c:e3:66:cf:d1:82:18:9b:
3d:90:ed:4b:f5:ec:77:b9:43:9f:0f:31:d0:4c:e3:cb:0e:bb:
fe:c4:62:d1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzF2/RfWXK2y+5EBEvKxk6+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMzk4MjViMjY3NzVlMTU1MTA3MmY0NTdkMWVkZmQ5ZDBl
YmUyZGYwHhcNMjQwMTAxMTYyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDM5MjRmMTk2MDcxYTQ4ODFkMmVmNDA2NzYyNmQzODcyNzk5YjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DLTWT69Mk3wL80WB/uqNj81qTT8
QQ2iX8aYVdhrpzmO2xqFeuieG3pIrsPsm8eKNcZy71b8ATnRwYQxyZ8E9aX2Mfx9
J6jgmcY200jC+2CWuDNxoNIYdVLDo4rFOTnPxoyMtK3ni5ln7XgJbnmkXGfegVhd
asOTaNUiTw1OTZMgX5J+Tu7sYrwYEjSa32BIbWI8S58f1PtnblXfW8KXuuSI2A9e
T1pdROG47TsbvthGrNwz+ZLb6qLVIIsBOkPJ7DdqozQl9BXDTTTlg0jSeO3sc16n
mUHwJYczhp92Lyp8mXFkqd55Dj5NAfkVzKxwEzeRKD9tAFWibQiE6Jv2OQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBA5JPGWBxpIgdLvQGdibThyeZtyMB8GA1UdIwQY
MBaAFH45glsmd14VUQcvRX0e39nQ6+LfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmptQ1d5WjNYaFZSQnk5RmZSN2YyZERyNHQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yMTY2YTgtMzU3Yy00Y2Y2LWI2ZjIt
ZjhkNmQxYTc0YjFkLzEvRURrazhaWUhHa2lCMHU5QVoySnRPSEo1bTNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8yMTY2YTgtMzU3Yy00Y2Y2LWI2ZjItZjhkNmQxYTc0YjFk
LzEvZmptQ1d5WjNYaFZSQnk5RmZSN2YyZERyNHQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNaAAAu
MA0GCSqGSIb3DQEBCwUAA4IBAQCW7+0gynWZE5VF5+n9pnJ7eAcI5hodBt0vNIsB
Zu4cJ0hWW3QoQGeAOzoc4Fut5t8oH/M/0GulaAdpW8YRxaPRbIsRmtmJjx+Wiypa
NcqrI0tFUMfcKFWM3IPa/18ht2Zq3IP2Cx/IEun8FvfzwJkf5xxR7JzhiRif23nC
p1WrI4QJg+v+FIARt+P1D/ZoPzxxOGlQQDNT2/aHyRJq/oXDmlMG+gQDAOAqn9PK
KShZFMao3+Moo/JSbRA5+onacYuII3yz3UkAA0ojo5AbPMnVJZqKKmVZBEQplKz/
gV+x1+VfTONmz9GCGJs9kO1L9ex3uUOfDzHQTOPLDrv+xGLR
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:10:43 2024 by rpki-client on console-ams.rpki-client.org