Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/4tJv7qwzKkLrGqSxf2vcE95yXP4.roa
File: 4tJv7qwzKkLrGqSxf2vcE95yXP4.roa (raw, json)
Hash identifier: JOPklIUYdmYvAd5cg+iD8+CWmol9wnQSSXc6OU63lvQ=
Subject key identifier: E2:D2:6F:EE:AC:33:2A:42:EB:1A:A4:B1:7F:6B:DC:13:DE:72:5C:FE
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 018CC2DB5DC66F0A9FDA66A0CB38AB068154
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/4tJv7qwzKkLrGqSxf2vcE95yXP4.roa
Signing time: Mon 01 Jan 2024 02:30:05 +0000
ROA not before: Mon 01 Jan 2024 02:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208454
IP address blocks: 2a07:22c1:ffec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 13:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:5d:c6:6f:0a:9f:da:66:a0:cb:38:ab:06:81:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 02:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2d26feeac332a42eb1aa4b17f6bdc13de725cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:a8:a8:08:73:0d:d6:76:5e:e8:45:ad:ac:
60:b6:15:c1:02:63:e4:a9:1e:70:94:82:62:52:a6:
bf:05:d7:c5:b8:e6:0e:a6:c6:29:15:1d:97:79:a8:
f1:36:4d:0b:50:d2:8d:a6:7c:e4:a6:97:ed:4e:b7:
43:6c:e8:39:1c:d3:7b:e9:2d:4c:03:eb:ee:1d:94:
a0:41:a3:da:d8:eb:e4:38:59:0e:9e:de:39:45:f4:
21:b3:de:c3:d1:f3:43:3a:ba:c5:61:17:77:1e:e3:
c6:fd:f0:1d:a7:2b:9d:10:e6:62:70:ab:e0:2d:5b:
c1:25:6d:14:cc:47:83:2f:9d:88:73:69:6d:3c:5d:
24:94:e7:2d:1e:a1:71:e9:ad:0d:0d:4a:c4:c3:11:
d4:9e:50:b5:d7:b7:5d:75:20:57:09:33:f7:24:d6:
47:44:ab:ec:31:37:1a:3c:cb:c8:5e:91:44:81:b7:
31:18:e0:44:91:49:95:f1:e3:b0:53:5e:c1:bf:c5:
63:a7:2d:13:da:d6:5a:89:1f:32:e7:e8:fa:fe:00:
5a:ab:8a:45:10:08:15:47:13:b8:6b:da:a5:1d:54:
0e:94:1a:4a:02:54:12:4a:c0:06:03:63:92:a4:ea:
b0:f8:d5:a9:49:6b:bd:fe:ad:46:fd:a4:d7:ff:0d:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D2:6F:EE:AC:33:2A:42:EB:1A:A4:B1:7F:6B:DC:13:DE:72:5C:FE
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/4tJv7qwzKkLrGqSxf2vcE95yXP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c1:ffec::/48
Signature Algorithm: sha256WithRSAEncryption
ad:55:3b:e2:99:85:c6:e5:0e:0f:ee:fb:e8:16:d4:aa:6b:8c:
ea:e3:83:d2:f3:7a:41:57:af:43:46:1d:2b:ed:ec:84:d8:d1:
cc:72:26:09:8e:9d:4c:eb:a4:98:2d:30:b1:ba:81:e8:91:91:
a3:72:e0:14:21:2d:e5:82:78:47:92:23:ec:c2:d1:35:cd:29:
60:cb:f9:0a:b0:73:10:ed:37:96:b3:5b:84:95:d8:fd:17:a4:
ae:cc:42:d7:22:b9:08:7e:24:35:2c:17:17:76:d2:a2:eb:a6:
56:17:06:ba:7e:e1:3e:c4:15:59:be:97:ad:83:d9:13:6d:be:
3c:5c:c0:e9:70:87:de:f6:0a:ce:13:98:d6:3f:4e:b5:33:f9:
44:91:71:53:fb:b9:d7:36:e8:28:7e:56:e2:35:c4:9d:d9:5c:
39:33:00:c3:18:95:0b:cb:1f:a2:9f:ab:d7:59:8d:c0:d3:60:
49:32:8c:e4:28:7d:31:27:9e:13:59:33:cb:22:f8:54:48:37:
7b:6c:77:4a:e8:48:20:b5:29:c1:38:41:74:6a:bd:31:ad:16:
dc:86:ed:6f:03:c5:35:48:28:c6:47:ec:81:62:19:89:fa:54:
ef:17:55:9f:32:b0:2f:44:c8:1f:36:d9:c6:d8:97:98:a1:9d:
bb:c4:e6:42
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzC213Gbwqf2magyzirBoFUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYWI2YzExZDQxMTYyZGIwMzA2ODU4ZjgzZTVlNjUxMjEx
MzJhNmIwHhcNMjQwMTAxMDIzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmQyNmZlZWFjMzMyYTQyZWIxYWE0YjE3ZjZiZGMxM2RlNzI1Y2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYSoqAhzDdZ2XuhFraxgthXBAmPk
qR5wlIJiUqa/BdfFuOYOpsYpFR2XeajxNk0LUNKNpnzkppftTrdDbOg5HNN76S1M
A+vuHZSgQaPa2OvkOFkOnt45RfQhs97D0fNDOrrFYRd3HuPG/fAdpyudEOZicKvg
LVvBJW0UzEeDL52Ic2ltPF0klOctHqFx6a0NDUrEwxHUnlC117dddSBXCTP3JNZH
RKvsMTcaPMvIXpFEgbcxGOBEkUmV8eOwU17Bv8Vjpy0T2tZaiR8y5+j6/gBaq4pF
EAgVRxO4a9qlHVQOlBpKAlQSSsAGA2OSpOqw+NWpSWu9/q1G/aTX/w1tqQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOLSb+6sMypC6xqksX9r3BPeclz+MB8GA1UdIwQY
MBaAFHurbBHUEWLbAwaFj4Pl5lEhEyprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAt
OWY1YmY3MzY3MjBlLzEvNHRKdjdxd3pLa0xyR3FTeGYydmNFOTV5WFA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAtOWY1YmY3MzY3MjBl
LzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgciwf/s
MA0GCSqGSIb3DQEBCwUAA4IBAQCtVTvimYXG5Q4P7vvoFtSqa4zq44PS83pBV69D
Rh0r7eyE2NHMciYJjp1M66SYLTCxuoHokZGjcuAUIS3lgnhHkiPswtE1zSlgy/kK
sHMQ7TeWs1uEldj9F6SuzELXIrkIfiQ1LBcXdtKi66ZWFwa6fuE+xBVZvpetg9kT
bb48XMDpcIfe9grOE5jWP061M/lEkXFT+7nXNugoflbiNcSd2Vw5MwDDGJULyx+i
n6vXWY3A02BJMozkKH0xJ54TWTPLIvhUSDd7bHdK6EggtSnBOEF0ar0xrRbchu1v
A8U1SCjGR+yBYhmJ+lTvF1WfMrAvRMgfNtnG2JeYoZ27xOZC
-----END CERTIFICATE-----
Generated at Fri May 31 17:59:23 2024 by rpki-client on console-fra.rpki-client.org