Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/kI-aPy5iDWNKY25kPHk0n3nvCTE.roa
File: kI-aPy5iDWNKY25kPHk0n3nvCTE.roa (raw, json)
Hash identifier: sjoDoXh0LbjtqgrH63wV+ijvSM1aybxmxgR2VX3rXf8=
Subject key identifier: 90:8F:9A:3F:2E:62:0D:63:4A:63:6E:64:3C:79:34:9F:79:EF:09:31
Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial: 018CC9BC01F0AC3FA21C2DE3B8098445E205
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/kI-aPy5iDWNKY25kPHk0n3nvCTE.roa
Signing time: Tue 02 Jan 2024 10:33:10 +0000
ROA not before: Tue 02 Jan 2024 10:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12581
IP address blocks: 2a01:b1c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:01:f0:ac:3f:a2:1c:2d:e3:b8:09:84:45:e2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
Validity
Not Before: Jan 2 10:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=908f9a3f2e620d634a636e643c79349f79ef0931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:37:55:5b:9a:9b:bc:c7:06:28:1f:8c:67:
ae:1e:2e:ab:eb:7e:a6:61:16:fe:2d:94:22:e3:d1:
71:3b:ef:8e:46:bc:ff:6e:5e:9b:5a:d1:99:1a:c1:
63:34:cc:29:32:10:2d:2d:67:60:f2:e3:2d:fa:96:
1d:98:96:9e:37:e1:74:a3:96:1c:6e:8d:d8:c1:3c:
b9:d9:25:88:aa:f5:77:28:e5:3e:8b:dc:4c:53:09:
44:a7:c5:7a:f7:cf:8e:1e:bc:e5:d4:f7:fe:0d:ff:
14:46:c7:6d:c7:45:34:03:e6:ea:cf:82:d3:82:f1:
c8:2c:97:e5:b5:48:06:cb:e9:25:58:86:63:94:ea:
f6:4d:26:10:c6:2f:bd:41:cf:15:d5:56:8e:9d:a6:
b1:05:a4:07:db:1e:7a:40:bc:5f:1a:27:3f:11:74:
ab:0d:4b:bf:fd:c6:99:5a:2d:a5:45:6c:fe:fd:d9:
c8:5a:25:4f:69:d1:89:d9:91:18:fd:24:f0:47:30:
20:8d:32:5a:4b:4e:ad:6e:d4:b4:55:9c:58:31:f9:
8a:91:1a:ea:e2:dc:ac:d0:7d:2e:af:0a:42:cb:0c:
7f:db:48:41:62:0f:b7:27:d4:0c:cd:a9:61:c1:15:
1f:77:70:39:f0:83:ec:35:9b:2a:12:86:89:a1:13:
17:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8F:9A:3F:2E:62:0D:63:4A:63:6E:64:3C:79:34:9F:79:EF:09:31
X509v3 Authority Key Identifier:
keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/kI-aPy5iDWNKY25kPHk0n3nvCTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:b1c7::/32
Signature Algorithm: sha256WithRSAEncryption
08:19:03:70:b1:a1:ce:16:9e:c5:44:12:bb:0c:9d:eb:01:21:
d7:6c:0a:2b:b0:44:2f:ba:4d:1d:96:29:50:2b:53:c3:3b:aa:
bd:be:1b:85:05:c4:c5:2e:3f:9b:50:1d:1d:3c:21:68:47:72:
7f:59:f6:ca:f4:5b:8a:dd:1d:b2:95:8e:bf:5d:9d:bf:40:35:
ef:1f:d5:57:20:b7:94:4c:f0:98:17:11:15:4e:9d:5d:0c:0c:
35:d3:74:64:d1:54:3e:10:c6:7c:cc:a5:f4:6e:8e:f3:b0:5e:
cc:d3:48:23:3f:60:41:92:af:ee:f5:b6:d6:44:7c:ea:3a:0d:
b7:39:14:15:4c:2e:4a:e5:88:ea:26:d0:50:31:f0:89:d4:9d:
2a:ab:e5:ea:1b:97:0f:11:d8:46:e7:bd:ea:79:0f:08:a7:ed:
50:21:f2:18:7c:76:01:de:05:da:48:ce:3a:76:df:61:fe:49:
23:9f:4f:e0:f9:4f:47:21:9d:9e:ff:6b:55:42:33:24:35:c7:
d7:de:41:60:dd:0a:e8:2d:70:6a:4a:31:99:79:f8:a8:9a:d3:
70:b6:e1:73:35:05:85:fb:38:da:82:f8:ab:81:71:d1:e0:4f:
40:72:f7:81:82:54:ab:7b:f7:f5:69:34:f4:e7:01:4d:bf:0c:
33:63:53:07
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzJvAHwrD+iHC3juAmEReIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDc0MzM5YmIyMTZiODViZGM4M2Q2MTc3ODgyMWFkZjkx
NDlkNTYwHhcNMjQwMTAyMTAzMzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDhmOWEzZjJlNjIwZDYzNGE2MzZlNjQzYzc5MzQ5Zjc5ZWYwOTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq003VVuam7zHBigfjGeuHi6r636m
YRb+LZQi49FxO++ORrz/bl6bWtGZGsFjNMwpMhAtLWdg8uMt+pYdmJaeN+F0o5Yc
bo3YwTy52SWIqvV3KOU+i9xMUwlEp8V698+OHrzl1Pf+Df8URsdtx0U0A+bqz4LT
gvHILJfltUgGy+klWIZjlOr2TSYQxi+9Qc8V1VaOnaaxBaQH2x56QLxfGic/EXSr
DUu//caZWi2lRWz+/dnIWiVPadGJ2ZEY/STwRzAgjTJaS06tbtS0VZxYMfmKkRrq
4tys0H0urwpCywx/20hBYg+3J9QMzalhwRUfd3A58IPsNZsqEoaJoRMXZwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJCPmj8uYg1jSmNuZDx5NJ957wkxMB8GA1UdIwQY
MBaAFKIHQzm7IWuFvcg9YXeIIa35FJ1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGIt
MGZlYjY2ZTdmMjhhLzEva0ktYVB5NWlEV05LWTI1a1BIazBuM252Q1RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGItMGZlYjY2ZTdmMjhh
LzEvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgGxxzAN
BgkqhkiG9w0BAQsFAAOCAQEACBkDcLGhzhaexUQSuwyd6wEh12wKK7BEL7pNHZYp
UCtTwzuqvb4bhQXExS4/m1AdHTwhaEdyf1n2yvRbit0dspWOv12dv0A17x/VVyC3
lEzwmBcRFU6dXQwMNdN0ZNFUPhDGfMyl9G6O87BezNNIIz9gQZKv7vW21kR86joN
tzkUFUwuSuWI6ibQUDHwidSdKqvl6huXDxHYRue96nkPCKftUCHyGHx2Ad4F2kjO
OnbfYf5JI59P4PlPRyGdnv9rVUIzJDXH195BYN0K6C1wakoxmXn4qJrTcLbhczUF
hfs42oL4q4Fx0eBPQHL3gYJUq3v39Wk09OcBTb8MM2NTBw==
-----END CERTIFICATE-----
Generated at Sat Jun 8 08:52:59 2024 by rpki-client on console-ams.rpki-client.org