Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/6OXgE8owcQm91KmGn0bna3nVdPQ.roa
File: 6OXgE8owcQm91KmGn0bna3nVdPQ.roa (raw, json)
Hash identifier: 5hUImKOQ8fDdvozLppaJXQwPXIZz1mtKpGEsbKgOXXk=
Subject key identifier: E8:E5:E0:13:CA:30:71:09:BD:D4:A9:86:9F:46:E7:6B:79:D5:74:F4
Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial: 018CC64B3B44A70F3AA2F6CA37281A84C538
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/6OXgE8owcQm91KmGn0bna3nVdPQ.roa
Signing time: Mon 01 Jan 2024 18:31:08 +0000
ROA not before: Mon 01 Jan 2024 18:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216352
IP address blocks: 2001:67c:c4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:3b:44:a7:0f:3a:a2:f6:ca:37:28:1a:84:c5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Validity
Not Before: Jan 1 18:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8e5e013ca307109bdd4a9869f46e76b79d574f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:32:8f:74:65:10:d3:a1:f7:a5:46:a9:7a:
15:75:d3:04:e1:f9:dd:71:b4:ed:3a:a3:81:eb:64:
5f:32:37:fb:d6:fd:83:8a:4e:77:58:ab:5d:8b:81:
33:84:3e:3e:4a:86:b1:df:3c:6e:ec:04:c0:ee:84:
15:ec:3d:27:81:41:da:78:e6:a4:b5:80:bc:bd:67:
ad:d0:ca:c2:4c:75:4d:f3:d1:ed:a4:45:c9:b6:1a:
ea:ce:fb:49:c9:ad:2b:d5:cd:6f:01:84:d2:ca:84:
72:72:06:c4:4c:be:18:a6:2e:d3:8e:87:89:2a:36:
18:e6:d5:2e:28:52:0e:10:f0:47:bd:1f:b5:39:c8:
30:ed:76:42:f0:c1:00:fd:c6:e5:3f:85:a9:3b:bc:
e4:b5:f5:29:2f:e2:5f:3f:a3:0f:38:b7:13:22:86:
88:e6:94:4a:95:2e:30:ae:93:41:fd:fd:10:f3:ce:
ae:e9:78:45:99:e5:3f:0d:f7:d7:d2:f1:9c:a3:f3:
4c:0a:df:ae:21:cb:9e:63:25:d5:d0:9d:3d:99:69:
43:f9:f5:17:04:60:ca:fd:14:83:63:18:d1:00:e8:
40:42:43:ef:82:83:9d:30:59:47:aa:1d:2f:60:07:
68:b9:3f:5c:07:9f:c1:9b:8b:77:53:9d:65:af:29:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E5:E0:13:CA:30:71:09:BD:D4:A9:86:9F:46:E7:6B:79:D5:74:F4
X509v3 Authority Key Identifier:
keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/6OXgE8owcQm91KmGn0bna3nVdPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c4::/48
Signature Algorithm: sha256WithRSAEncryption
77:cf:b9:8d:a8:49:80:78:8e:1c:a0:11:eb:ae:6c:56:b0:c5:
4b:63:63:0d:c4:e9:b9:16:20:7b:73:07:de:75:04:6d:6a:76:
dc:65:c9:a6:af:7c:fa:3c:f3:6d:2b:2b:e2:d2:38:65:2f:fb:
ae:69:23:e5:69:45:fc:0a:6c:60:de:89:99:6d:df:7c:48:46:
56:24:52:eb:5d:39:f2:a6:47:84:fe:9b:de:2c:9f:5c:f8:1e:
81:fe:17:43:5e:ac:a2:a1:47:ef:30:57:64:17:1b:94:8a:7a:
3a:49:a8:9c:c6:e4:b7:a9:27:b5:fa:25:b3:79:59:b8:0e:91:
97:b6:01:ba:68:d9:2d:4f:60:66:85:25:8a:06:84:4a:8b:ae:
a6:ff:93:ee:1d:fb:31:cf:09:50:e6:5b:11:28:41:90:fc:32:
b9:e8:4d:00:48:c9:c7:9d:45:c8:fd:bd:08:e3:1b:ef:6f:17:
6c:91:7d:10:74:64:76:3f:bc:e2:ca:62:fc:c6:1e:16:bb:5e:
e8:be:1a:61:d9:27:2b:da:9f:38:b8:52:25:56:86:f2:df:61:
78:f1:a5:6e:5d:64:88:5c:7e:51:f8:cc:65:44:67:1a:f9:ed:
ba:1a:b9:05:72:2f:72:b4:e7:0f:16:af:36:d3:fe:07:d2:03:
e4:29:5c:7c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzGSztEpw86ovbKNygahMU4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDRhY2U2OTQ2ZmI3MDFiYjJjNDVlMzBhY2FmZWE2NmRh
YzJmN2EwHhcNMjQwMTAxMTgzMTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGU1ZTAxM2NhMzA3MTA5YmRkNGE5ODY5ZjQ2ZTc2Yjc5ZDU3NGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiwyj3RlENOh96VGqXoVddME4fnd
cbTtOqOB62RfMjf71v2Dik53WKtdi4EzhD4+Soax3zxu7ATA7oQV7D0ngUHaeOak
tYC8vWet0MrCTHVN89HtpEXJthrqzvtJya0r1c1vAYTSyoRycgbETL4Ypi7TjoeJ
KjYY5tUuKFIOEPBHvR+1Ocgw7XZC8MEA/cblP4WpO7zktfUpL+JfP6MPOLcTIoaI
5pRKlS4wrpNB/f0Q886u6XhFmeU/DffX0vGco/NMCt+uIcueYyXV0J09mWlD+fUX
BGDK/RSDYxjRAOhAQkPvgoOdMFlHqh0vYAdouT9cB5/Bm4t3U51lrymYUQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOjl4BPKMHEJvdSphp9G52t51XT0MB8GA1UdIwQY
MBaAFAgErOaUb7cBuyxF4wrK/qZtrC96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81YmNlZTAtNTEyZS00MWY0LThkNmIt
OTVkMTYzNjRkYmI5LzEvNk9YZ0U4b3djUW05MUttR24wYm5hM25WZFBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81YmNlZTAtNTEyZS00MWY0LThkNmItOTVkMTYzNjRkYmI5
LzEvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfADE
MA0GCSqGSIb3DQEBCwUAA4IBAQB3z7mNqEmAeI4coBHrrmxWsMVLY2MNxOm5FiB7
cwfedQRtanbcZcmmr3z6PPNtKyvi0jhlL/uuaSPlaUX8Cmxg3omZbd98SEZWJFLr
XTnypkeE/pveLJ9c+B6B/hdDXqyioUfvMFdkFxuUino6SaicxuS3qSe1+iWzeVm4
DpGXtgG6aNktT2BmhSWKBoRKi66m/5PuHfsxzwlQ5lsRKEGQ/DK56E0ASMnHnUXI
/b0I4xvvbxdskX0QdGR2P7ziymL8xh4Wu17ovhph2Scr2p84uFIlVoby32F48aVu
XWSIXH5R+MxlRGca+e26GrkFci9ytOcPFq820/4H0gPkKVx8
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:48:04 2024 by rpki-client on console-fra.rpki-client.org