Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/RsACaxM2kdurU8XggsfOBUWfSRM.roa
File: RsACaxM2kdurU8XggsfOBUWfSRM.roa (raw, json)
Hash identifier: UZi7it1KE2pJmLomWtHlM+hhrXYZ7Z48FKus3qzoSkc=
Subject key identifier: 46:C0:02:6B:13:36:91:DB:AB:53:C5:E0:82:C7:CE:05:45:9F:49:13
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 0193539F5117AF92AC13EFC803C700D7059C
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/RsACaxM2kdurU8XggsfOBUWfSRM.roa
Signing time: Fri 22 Nov 2024 11:26:10 +0000
ROA not before: Fri 22 Nov 2024 11:26:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206150
IP address blocks: 2a0e:d781::/32 maxlen: 48
2a0e:d782::/32 maxlen: 48
2a0e:d783::/32 maxlen: 48
2a11:f883::/32 maxlen: 48
2a11:f884::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:9f:51:17:af:92:ac:13:ef:c8:03:c7:00:d7:05:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Nov 22 11:26:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46c0026b133691dbab53c5e082c7ce05459f4913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a4:b2:64:9a:84:34:59:b0:bd:d6:37:bf:5e:
59:8c:94:8e:23:26:0a:25:a8:9e:96:69:d0:00:8a:
58:41:7e:a8:91:3d:1b:04:c8:26:3d:b3:5e:f0:42:
20:cf:a3:35:3b:04:36:a0:a1:1c:65:b3:d2:18:d3:
31:68:e9:cb:71:c5:31:93:9a:aa:fb:96:37:39:c5:
27:61:c7:82:35:6e:ff:c9:0a:8c:6b:e0:18:fd:d8:
60:56:ad:a6:e6:3d:25:50:22:bf:c1:54:85:5c:8b:
11:26:c4:40:9c:a6:81:f7:7d:e3:ff:5e:da:5e:2c:
8c:74:ed:05:f1:1b:1f:62:e0:c5:da:a9:c5:2a:70:
fc:1f:e5:87:d2:ba:d9:b6:ee:1c:5d:46:00:f1:b4:
bc:0c:27:69:1b:db:a5:4d:1a:7f:95:fd:9e:6f:54:
50:56:4a:5d:ad:d3:68:82:a9:96:e7:58:42:e5:69:
95:c3:9c:4a:9d:16:56:56:c5:1d:1c:49:b1:ad:22:
e2:95:e6:8c:85:a1:24:2a:41:86:aa:fb:c5:27:45:
4d:51:48:2c:99:d1:7b:9d:00:6b:d0:ff:b6:d1:9d:
1c:46:86:13:cc:a2:bf:85:2c:4b:77:4b:a3:24:87:
68:ab:a3:f7:3e:76:c0:10:c1:12:76:5d:32:66:16:
ef:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C0:02:6B:13:36:91:DB:AB:53:C5:E0:82:C7:CE:05:45:9F:49:13
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/RsACaxM2kdurU8XggsfOBUWfSRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d781::-2a0e:d783:ffff:ffff:ffff:ffff:ffff:ffff
2a11:f883::-2a11:f884:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
42:ff:bd:30:c7:c7:c5:b8:bf:60:36:48:9e:d1:2e:03:25:c6:
4b:e9:c1:ce:37:5e:fa:7e:4c:f6:6e:22:bb:1e:e6:84:6c:2c:
ae:d4:dd:0d:6a:a4:9c:d2:f1:42:ae:2e:f0:b7:55:b8:fa:8c:
bf:36:1e:0e:37:6d:b5:09:62:89:57:55:26:66:9a:29:ef:51:
d1:50:5d:40:59:de:bd:e5:fa:ca:7b:5d:0a:27:eb:13:ec:71:
cc:5a:c0:15:1b:82:45:0b:bb:4b:77:87:d2:7b:96:8e:81:a2:
22:a3:9b:73:93:97:0d:e7:d5:14:fe:a5:d8:2d:e0:e8:08:fc:
3d:da:72:60:02:c6:8e:a3:b4:bf:40:0a:c2:a0:91:c7:49:c7:
90:03:c9:22:7e:d1:3d:54:0f:32:db:b4:64:61:1c:e3:48:8f:
97:09:c0:63:f8:60:e3:c1:63:bc:b3:33:81:ff:df:24:c8:10:
bf:6a:37:34:e3:1a:92:06:68:68:17:97:e4:e5:96:2d:a5:cb:
ad:00:3f:11:0b:d5:23:14:36:40:e8:4a:84:34:37:98:a0:81:
b9:a5:a3:2a:21:40:01:30:96:ac:fb:40:8b:4c:44:94:3d:41:
aa:ec:97:b0:b7:1f:c9:23:8d:f0:70:3c:d5:a2:08:2c:9c:de:
37:ed:d9:bf
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZNTn1EXr5KsE+/IA8cA1wWcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjQxMTIyMTEyNjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmMwMDI2YjEzMzY5MWRiYWI1M2M1ZTA4MmM3Y2UwNTQ1OWY0OTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qSyZJqENFmwvdY3v15ZjJSOIyYK
JaielmnQAIpYQX6okT0bBMgmPbNe8EIgz6M1OwQ2oKEcZbPSGNMxaOnLccUxk5qq
+5Y3OcUnYceCNW7/yQqMa+AY/dhgVq2m5j0lUCK/wVSFXIsRJsRAnKaB933j/17a
XiyMdO0F8RsfYuDF2qnFKnD8H+WH0rrZtu4cXUYA8bS8DCdpG9ulTRp/lf2eb1RQ
VkpdrdNogqmW51hC5WmVw5xKnRZWVsUdHEmxrSLileaMhaEkKkGGqvvFJ0VNUUgs
mdF7nQBr0P+20Z0cRoYTzKK/hSxLd0ujJIdoq6P3PnbAEMESdl0yZhbvFQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFEbAAmsTNpHbq1PF4ILHzgVFn0kTMB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvUnNBQ2F4TTJrZHVyVThYZ2dzZk9CVVdmU1JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAAjAgMA4DBQAqDteB
AwUCKg7XgDAOAwUAKhH4gwMFACoR+IQwDQYJKoZIhvcNAQELBQADggEBAEL/vTDH
x8W4v2A2SJ7RLgMlxkvpwc43Xvp+TPZuIrse5oRsLK7U3Q1qpJzS8UKuLvC3Vbj6
jL82Hg43bbUJYolXVSZmminvUdFQXUBZ3r3l+sp7XQon6xPsccxawBUbgkULu0t3
h9J7lo6BoiKjm3OTlw3n1RT+pdgt4OgI/D3acmACxo6jtL9ACsKgkcdJx5ADySJ+
0T1UDzLbtGRhHONIj5cJwGP4YOPBY7yzM4H/3yTIEL9qNzTjGpIGaGgXl+Tlli2l
y60APxEL1SMUNkDoSoQ0N5iggbmloyohQAEwlqz7QItMRJQ9Qarsl7C3H8kjjfBw
PNWiCCyc3jft2b8=
-----END CERTIFICATE-----
Generated at Tue Nov 26 03:08:00 2024 by rpki-client on console-ams.rpki-client.org