Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/vcEZ6S0p_RPNsRbn_vGm_hLAEfk.roa
File: vcEZ6S0p_RPNsRbn_vGm_hLAEfk.roa (raw, json)
Hash identifier: 9gz7om9/32EgMkjPLNA6LWR7kGBjY3Wt7n1JMaYfvKo=
Subject key identifier: BD:C1:19:E9:2D:29:FD:13:CD:B1:16:E7:FE:F1:A6:FE:12:C0:11:F9
Certificate issuer: /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Certificate serial: 018CC492367A18D057D9611A4CD4CBE30FB3
Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/vcEZ6S0p_RPNsRbn_vGm_hLAEfk.roa
Signing time: Mon 01 Jan 2024 10:29:25 +0000
ROA not before: Mon 01 Jan 2024 10:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16019
IP address blocks: 2001:678:95c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:36:7a:18:d0:57:d9:61:1a:4c:d4:cb:e3:0f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Validity
Not Before: Jan 1 10:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdc119e92d29fd13cdb116e7fef1a6fe12c011f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f9:3f:8f:60:f8:d2:e7:f1:e8:ce:b5:0a:5f:
f6:08:30:36:dc:72:6f:9a:78:4f:6e:c4:30:34:fe:
1f:07:ca:8d:f4:33:d6:e9:92:56:a2:ee:ec:99:ef:
78:49:12:be:b5:c3:b9:80:00:a8:cb:33:ce:3a:d5:
d2:af:9c:3e:38:1e:04:f3:40:06:87:f2:ee:80:d1:
1f:14:b8:34:7b:18:ce:ad:0d:e4:f3:29:e0:30:ec:
77:75:23:51:5c:ef:74:f8:e7:55:54:86:11:03:e1:
4b:31:ae:5c:fd:7c:77:d2:aa:cc:82:cf:26:3f:40:
40:bc:1a:57:27:43:1d:5f:0e:2a:89:85:02:8e:0a:
a2:eb:d0:01:29:24:db:98:86:f8:a5:09:46:05:38:
50:b0:8a:57:1b:b6:cd:b5:66:6a:18:78:ac:c9:11:
4b:2f:27:ed:aa:a9:84:d6:48:63:20:0d:45:62:15:
e2:07:42:ba:43:43:fc:73:d1:dc:ce:1d:4d:2e:01:
ee:06:dd:a0:91:c3:f2:89:0f:59:f6:6f:a4:ac:3b:
a1:7d:a2:2c:59:97:8e:ba:ca:cc:1e:51:09:20:1f:
dc:bc:98:01:40:db:6c:f0:35:6e:ba:8a:a7:d9:2b:
fe:de:2b:08:8d:78:2b:c5:63:43:3d:49:59:b3:4d:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C1:19:E9:2D:29:FD:13:CD:B1:16:E7:FE:F1:A6:FE:12:C0:11:F9
X509v3 Authority Key Identifier:
keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/vcEZ6S0p_RPNsRbn_vGm_hLAEfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:95c::/48
Signature Algorithm: sha256WithRSAEncryption
71:95:13:f5:ad:e2:9c:a3:6f:b9:fd:0a:23:8a:32:33:b1:14:
e1:ed:c2:9b:a8:e3:fa:0e:48:69:70:6c:1e:43:c7:26:3a:29:
ed:7b:b0:cf:01:b1:52:1e:2a:49:de:95:4e:a4:3f:eb:98:01:
78:81:83:a6:2e:0c:15:97:49:38:41:a4:83:e3:6e:c7:90:be:
60:f0:48:55:2a:5f:23:9e:74:92:74:c4:06:33:76:4e:dc:76:
dd:4e:51:c3:69:3c:b9:64:76:ea:a2:6c:3f:b3:74:3f:f9:03:
f8:a4:30:81:71:6a:ea:f8:65:09:58:86:95:0e:02:c7:37:a2:
ff:21:f3:07:88:e9:85:8c:c4:b3:9a:ba:18:63:d2:65:7c:c1:
50:f3:b5:63:dd:fa:dc:f3:30:a6:9f:72:41:fd:66:26:f7:47:
41:9e:62:b3:34:5c:91:62:c7:8c:9a:56:0f:13:85:ff:49:c6:
10:80:56:c8:6a:8f:16:40:15:71:01:e6:b1:0c:a1:9d:fb:11:
3d:11:9e:8b:04:57:a1:f6:35:b3:92:f1:53:00:a4:68:ac:b4:
ed:38:ac:b5:7e:44:00:48:2c:85:fb:74:e2:76:ba:4b:cb:35:
8f:db:da:a5:84:79:50:40:5c:b2:b0:3e:32:ed:5d:96:79:0a:
b3:f8:0c:9d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzEkjZ6GNBX2WEaTNTL4w+zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0M2M5MDNiNGQwZTgzYmM4YjJkNDU0MzEzNmU5Y2Q1ZjM5
ODY0ZjUwHhcNMjQwMTAxMTAyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGMxMTllOTJkMjlmZDEzY2RiMTE2ZTdmZWYxYTZmZTEyYzAxMWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fk/j2D40ufx6M61Cl/2CDA23HJv
mnhPbsQwNP4fB8qN9DPW6ZJWou7sme94SRK+tcO5gACoyzPOOtXSr5w+OB4E80AG
h/LugNEfFLg0exjOrQ3k8yngMOx3dSNRXO90+OdVVIYRA+FLMa5c/Xx30qrMgs8m
P0BAvBpXJ0MdXw4qiYUCjgqi69ABKSTbmIb4pQlGBThQsIpXG7bNtWZqGHisyRFL
LyftqqmE1khjIA1FYhXiB0K6Q0P8c9Hczh1NLgHuBt2gkcPyiQ9Z9m+krDuhfaIs
WZeOusrMHlEJIB/cvJgBQNts8DVuuoqn2Sv+3isIjXgrxWNDPUlZs02dwQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL3BGektKf0TzbEW5/7xpv4SwBH5MB8GA1UdIwQY
MBaAFJQ8kDtNDoO8iy1FQxNunNXzmGT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbER5UU8wME9nN3lMTFVWREUyNmMxZk9ZWlBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81MDhhMjYtZTE5OS00MWI5LTllMTkt
Zjk4Yzc1ZGVhMjkyLzEvdmNFWjZTMHBfUlBOc1Jibl92R21faExBRWZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81MDhhMjYtZTE5OS00MWI5LTllMTktZjk4Yzc1ZGVhMjky
LzEvbER5UU8wME9nN3lMTFVWREUyNmMxZk9ZWlBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAlc
MA0GCSqGSIb3DQEBCwUAA4IBAQBxlRP1reKco2+5/QojijIzsRTh7cKbqOP6Dkhp
cGweQ8cmOinte7DPAbFSHipJ3pVOpD/rmAF4gYOmLgwVl0k4QaSD427HkL5g8EhV
Kl8jnnSSdMQGM3ZO3HbdTlHDaTy5ZHbqomw/s3Q/+QP4pDCBcWrq+GUJWIaVDgLH
N6L/IfMHiOmFjMSzmroYY9JlfMFQ87Vj3frc8zCmn3JB/WYm90dBnmKzNFyRYseM
mlYPE4X/ScYQgFbIao8WQBVxAeaxDKGd+xE9EZ6LBFeh9jWzkvFTAKRorLTtOKy1
fkQASCyF+3TidrpLyzWP29qlhHlQQFyysD4y7V2WeQqz+Ayd
-----END CERTIFICATE-----
Generated at Tue Nov 26 15:32:50 2024 by rpki-client on console-fra.rpki-client.org