Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/e2a4kIADMOonvqaCaKUevW1s5v4.roa
File: e2a4kIADMOonvqaCaKUevW1s5v4.roa (raw, json)
Hash identifier: WYy/v3Ej7PVcsqIPB5KrIZAwDHtGLF6FcUnN4KolLP0=
Subject key identifier: 7B:66:B8:90:80:03:30:EA:27:BE:A6:82:68:A5:1E:BD:6D:6C:E6:FE
Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial: 018F219B252F41B6E8F5A4B1EF79500D65F8
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/e2a4kIADMOonvqaCaKUevW1s5v4.roa
Signing time: Sat 27 Apr 2024 22:09:26 +0000
ROA not before: Sat 27 Apr 2024 22:09:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215827
IP address blocks: 2a14:3f80:30::/45 maxlen: 45
2a14:3f82:2000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:21:9b:25:2f:41:b6:e8:f5:a4:b1:ef:79:50:0d:65:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Validity
Not Before: Apr 27 22:09:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b66b890800330ea27bea68268a51ebd6d6ce6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:eb:72:35:7d:14:0b:fe:6a:e2:ea:0e:d5:
e1:76:3a:5a:42:b1:3d:ee:42:59:27:4f:2a:90:8f:
10:60:93:69:ee:ac:0d:7b:65:8b:ec:96:7a:88:c9:
78:2a:50:14:71:db:5a:a8:29:c1:94:f4:8f:c1:9d:
af:57:9e:99:e4:24:94:2e:a0:ee:58:8a:7c:e8:18:
03:53:01:ad:85:e8:f5:28:98:dc:94:ee:ca:a8:be:
ca:b5:85:ef:a5:01:4a:b4:54:be:4d:b0:29:34:df:
84:99:a3:46:62:50:79:52:91:d2:5d:aa:1d:83:8d:
c3:80:35:00:74:9e:09:f5:9b:c6:31:0c:c7:f8:4e:
fd:d1:51:fa:99:cb:80:4b:8c:af:c3:ba:5b:29:51:
6b:7e:df:c8:42:70:7e:78:c6:84:70:76:b5:a6:55:
02:f1:85:f4:f3:a5:73:b8:d9:04:64:09:ae:95:d0:
95:11:f3:df:48:89:00:5a:3f:bd:76:3d:a5:b4:c7:
b6:64:d2:be:98:3d:77:5b:8f:ce:c9:14:74:9a:22:
fb:84:43:60:00:02:2e:90:e0:8c:c5:34:88:84:d7:
b8:df:92:64:a0:58:61:c1:55:a6:f0:70:ab:c4:a2:
05:a3:de:ca:37:a9:99:7f:02:47:df:46:12:5d:7c:
fe:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:66:B8:90:80:03:30:EA:27:BE:A6:82:68:A5:1E:BD:6D:6C:E6:FE
X509v3 Authority Key Identifier:
keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/e2a4kIADMOonvqaCaKUevW1s5v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:3f80:30::/45
2a14:3f82:2000::/38
Signature Algorithm: sha256WithRSAEncryption
7d:00:6a:a6:4b:55:fb:1a:7b:70:bd:7c:92:d3:f9:17:c3:d6:
22:d5:d0:12:21:cf:7c:2c:af:5c:7b:aa:f6:03:95:5e:c6:ed:
13:77:b7:5f:ac:cc:27:a4:b1:b2:c5:df:bc:0b:72:7a:1a:ea:
3e:f7:aa:77:c6:ae:04:40:66:de:3c:e5:29:d9:f7:b9:a9:23:
ec:68:dd:aa:0d:ea:41:63:4a:98:9a:1b:01:2b:33:dd:4b:80:
ab:33:ec:65:2d:6a:5e:9e:68:9e:74:e5:1d:59:6c:dc:57:ec:
5c:53:43:fa:10:b1:ce:da:c4:66:1d:5a:de:3f:da:12:93:5b:
40:c4:43:66:8d:a7:6e:0c:0b:ea:9f:a0:2e:51:68:52:87:34:
df:37:f9:2a:d9:0d:ff:a4:1e:e0:42:38:e9:3f:20:84:36:29:
36:5f:0c:2b:a9:15:f3:1e:0a:59:6e:a3:2f:7c:b4:04:87:7f:
b7:1f:40:20:c2:86:d8:14:f7:b1:2f:b9:ca:4e:8f:27:4e:91:
7e:e6:46:1e:d8:85:65:26:be:6a:02:c0:7a:08:7e:2c:58:3e:
82:90:55:84:a7:cf:0d:a9:5e:81:6e:6e:9d:aa:a8:9c:74:80:
42:e4:ad:85:83:6c:d6:bb:43:c1:64:11:33:66:47:97:e4:af:
5c:75:df:a4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAY8hmyUvQbbo9aSx73lQDWX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZWQzYmE2OGM3OGJmZjJjNDcyNDQwMGFkZTYzNDg0ODJm
YjQzNjQwHhcNMjQwNDI3MjIwOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjY2Yjg5MDgwMDMzMGVhMjdiZWE2ODI2OGE1MWViZDZkNmNlNmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVHrcjV9FAv+auLqDtXhdjpaQrE9
7kJZJ08qkI8QYJNp7qwNe2WL7JZ6iMl4KlAUcdtaqCnBlPSPwZ2vV56Z5CSULqDu
WIp86BgDUwGthej1KJjclO7KqL7KtYXvpQFKtFS+TbApNN+EmaNGYlB5UpHSXaod
g43DgDUAdJ4J9ZvGMQzH+E790VH6mcuAS4yvw7pbKVFrft/IQnB+eMaEcHa1plUC
8YX086VzuNkEZAmuldCVEfPfSIkAWj+9dj2ltMe2ZNK+mD13W4/OyRR0miL7hENg
AAIukOCMxTSIhNe435JkoFhhwVWm8HCrxKIFo97KN6mZfwJH30YSXXz+lQIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFHtmuJCAAzDqJ76mgmilHr1tbOb+MB8GA1UdIwQY
MBaAFGbtO6aMeL/yxHJEAK3mNISC+0NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMt
MGE0M2I3YTNlYjU0LzEvZTJhNGtJQURNT29udnFhQ2FLVWV2VzFzNXY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMtMGE0M2I3YTNlYjU0
LzEvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcDKhQ/gAAw
AwYCKhQ/giAwDQYJKoZIhvcNAQELBQADggEBAH0AaqZLVfsae3C9fJLT+RfD1iLV
0BIhz3wsr1x7qvYDlV7G7RN3t1+szCeksbLF37wLcnoa6j73qnfGrgRAZt485SnZ
97mpI+xo3aoN6kFjSpiaGwErM91LgKsz7GUtal6eaJ505R1ZbNxX7FxTQ/oQsc7a
xGYdWt4/2hKTW0DEQ2aNp24MC+qfoC5RaFKHNN83+SrZDf+kHuBCOOk/IIQ2KTZf
DCupFfMeClluoy98tASHf7cfQCDChtgU97EvucpOjydOkX7mRh7YhWUmvmoCwHoI
fixYPoKQVYSnzw2pXoFubp2qqJx0gELkrYWDbNa7Q8FkETNmR5fkr1x136Q=
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:41:30 2024 by rpki-client on console-ams.rpki-client.org