Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/j7YaJVYQMcFIdrf-IYpabZFzMrc.roa
File: j7YaJVYQMcFIdrf-IYpabZFzMrc.roa (raw, json)
Hash identifier: 2kY1M3KbbZBgaOcsQH5UTnOu/fZryujInXx5LbRMUkE=
Subject key identifier: 8F:B6:1A:25:56:10:31:C1:48:76:B7:FE:21:8A:5A:6D:91:73:32:B7
Certificate issuer: /CN=ea93edfc2aa748e4981050ec06e3a66920265e17
Certificate serial: 018CC56DFC9D5DA6941D4ABA0A61CE589F5E
Authority key identifier: EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/j7YaJVYQMcFIdrf-IYpabZFzMrc.roa
Signing time: Mon 01 Jan 2024 14:29:28 +0000
ROA not before: Mon 01 Jan 2024 14:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35280
IP address blocks: 132.72.0.0/16 maxlen: 16
132.73.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:fc:9d:5d:a6:94:1d:4a:ba:0a:61:ce:58:9f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea93edfc2aa748e4981050ec06e3a66920265e17
Validity
Not Before: Jan 1 14:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fb61a25561031c14876b7fe218a5a6d917332b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:99:7f:91:65:da:e6:ae:f5:83:28:74:65:
66:39:20:be:4e:72:c8:27:c9:4d:a6:8a:5b:1d:9f:
43:f4:75:23:96:fd:ac:b9:0d:ba:be:f0:8c:2a:37:
1b:64:9e:09:fb:84:b9:78:d5:5a:cf:77:b9:05:81:
c7:ca:83:9b:7c:92:2e:f1:f1:9c:27:24:6f:24:b7:
cc:df:5e:6f:37:90:19:65:9b:b2:ce:8d:f5:1c:9d:
fe:b9:4a:f6:19:06:d2:81:a0:76:93:63:e5:e7:1e:
5b:f3:3a:72:bf:67:84:59:48:52:04:85:e7:e6:b5:
bc:a4:4b:21:45:f0:f4:65:21:41:7f:ef:58:61:23:
f6:ac:a9:3e:e2:57:40:13:0e:a8:9b:5d:4f:01:d4:
76:90:43:78:90:c8:ab:90:e0:b7:4b:d7:6c:7b:ab:
7e:0f:51:4d:6b:30:b4:8e:81:cc:43:cb:3b:67:60:
b4:ab:6e:33:39:b9:f8:59:59:ea:6f:84:52:b8:a6:
a2:48:0d:3d:4e:8b:f7:ca:98:e3:67:05:b1:37:13:
b7:98:07:5a:27:6c:74:e4:49:c0:50:02:78:4f:a6:
54:db:73:85:a8:82:71:6e:81:0c:a0:dd:97:c4:e2:
32:9d:d9:e7:1e:1a:48:ec:f5:86:fa:5d:b5:c1:75:
ba:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B6:1A:25:56:10:31:C1:48:76:B7:FE:21:8A:5A:6D:91:73:32:B7
X509v3 Authority Key Identifier:
keyid:EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/j7YaJVYQMcFIdrf-IYpabZFzMrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.72.0.0/15
Signature Algorithm: sha256WithRSAEncryption
d9:60:1b:ff:bb:9f:6f:33:a2:bf:58:0d:04:99:96:96:27:80:
b5:04:9e:26:d3:45:78:ce:28:25:6e:1c:d1:91:b2:06:f9:39:
91:3a:7d:42:e3:81:8a:d6:41:26:a9:73:b5:79:90:6f:bc:71:
31:8b:d4:13:e9:f9:bc:2c:5c:11:a2:bf:b2:a9:ac:0f:ef:b7:
cc:62:b3:11:b3:7d:3c:3e:46:4d:fa:de:9c:19:b0:a2:01:e4:
1b:d2:80:e3:91:1e:8a:fe:26:5a:dd:0e:e3:0c:ce:0a:8b:3b:
24:2a:1e:fc:4f:ea:d8:90:ff:23:5a:6e:72:36:1f:d9:64:20:
4b:3b:08:1c:a0:c8:0a:9d:93:a8:fe:f2:53:8e:9b:d2:a6:18:
36:3e:62:79:3c:53:02:5a:65:be:19:9e:51:81:40:c8:8a:53:
7c:a4:86:91:91:77:0b:c1:ec:c0:3a:f7:55:88:e6:6e:0e:ea:
d6:c5:4d:6e:d1:93:8b:f9:64:83:26:dd:60:ec:63:5a:c5:02:
31:2f:78:7a:02:fa:45:41:75:c2:2f:b8:49:2d:89:88:e9:33:
c8:a5:61:6b:2c:70:9a:11:1b:8c:e5:66:82:ec:0c:ce:a1:da:
38:64:91:0b:f5:2f:b2:bb:fc:20:42:f8:9b:5c:6c:b9:37:ea:
e2:99:7a:fd
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYzFbfydXaaUHUq6CmHOWJ9eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhOTNlZGZjMmFhNzQ4ZTQ5ODEwNTBlYzA2ZTNhNjY5MjAy
NjVlMTcwHhcNMjQwMTAxMTQyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmI2MWEyNTU2MTAzMWMxNDg3NmI3ZmUyMThhNWE2ZDkxNzMzMmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/WZf5Fl2uau9YModGVmOSC+TnLI
J8lNpopbHZ9D9HUjlv2suQ26vvCMKjcbZJ4J+4S5eNVaz3e5BYHHyoObfJIu8fGc
JyRvJLfM315vN5AZZZuyzo31HJ3+uUr2GQbSgaB2k2Pl5x5b8zpyv2eEWUhSBIXn
5rW8pEshRfD0ZSFBf+9YYSP2rKk+4ldAEw6om11PAdR2kEN4kMirkOC3S9dse6t+
D1FNazC0joHMQ8s7Z2C0q24zObn4WVnqb4RSuKaiSA09Tov3ypjjZwWxNxO3mAda
J2x05EnAUAJ4T6ZU23OFqIJxboEMoN2XxOIyndnnHhpI7PWG+l21wXW6uwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFI+2GiVWEDHBSHa3/iGKWm2RczK3MB8GA1UdIwQY
MBaAFOqT7fwqp0jkmBBQ7AbjpmkgJl4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnBQdF9DcW5TT1NZRUZEc0J1T21hU0FtWGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8wZmQ1ZjQtNTZjMC00OGJhLWIwMmIt
ZDEzOGE5YzRlNDNmLzEvajdZYUpWWVFNY0ZJZHJmLUlZcGFiWkZ6TXJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8wZmQ1ZjQtNTZjMC00OGJhLWIwMmItZDEzOGE5YzRlNDNm
LzEvNnBQdF9DcW5TT1NZRUZEc0J1T21hU0FtWGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBhEgwDQYJ
KoZIhvcNAQELBQADggEBANlgG/+7n28zor9YDQSZlpYngLUEnibTRXjOKCVuHNGR
sgb5OZE6fULjgYrWQSapc7V5kG+8cTGL1BPp+bwsXBGiv7KprA/vt8xisxGzfTw+
Rk363pwZsKIB5BvSgOORHor+JlrdDuMMzgqLOyQqHvxP6tiQ/yNabnI2H9lkIEs7
CBygyAqdk6j+8lOOm9KmGDY+Ynk8UwJaZb4ZnlGBQMiKU3ykhpGRdwvB7MA691WI
5m4O6tbFTW7Rk4v5ZIMm3WDsY1rFAjEveHoC+kVBdcIvuEktiYjpM8ilYWsscJoR
G4zlZoLsDM6h2jhkkQv1L7K7/CBC+JtcbLk36uKZev0=
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:28:07 2024 by rpki-client on console-ams.rpki-client.org