Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/2EJoKkZ69K5RmhY5gB86we8Shjg.roa
File: 2EJoKkZ69K5RmhY5gB86we8Shjg.roa (raw, json)
Hash identifier: VsVIqDufZXnqc37AC67OrYcli+xhq+A24tzS1rqkULI=
Subject key identifier: D8:42:68:2A:46:7A:F4:AE:51:9A:16:39:80:1F:3A:C1:EF:12:86:38
Certificate issuer: /CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Certificate serial: 018CCA285546E5ACB2DC42806D1A9CB9C0C0
Authority key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/2EJoKkZ69K5RmhY5gB86we8Shjg.roa
Signing time: Tue 02 Jan 2024 12:31:30 +0000
ROA not before: Tue 02 Jan 2024 12:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212351
IP address blocks: 2001:678:eb0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:55:46:e5:ac:b2:dc:42:80:6d:1a:9c:b9:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Validity
Not Before: Jan 2 12:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d842682a467af4ae519a1639801f3ac1ef128638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:76:1c:1a:83:bc:df:bc:3c:9b:91:2a:0c:
ca:18:59:7b:96:8c:60:da:aa:91:8a:db:32:0b:0b:
04:25:2d:57:30:86:91:d4:99:64:a4:e9:ca:8e:e5:
04:0f:c2:52:9e:d0:6b:c0:1c:6a:19:64:af:43:0a:
e3:ff:2f:f2:ea:12:5c:35:88:86:3c:c4:c9:b3:bf:
bd:24:9c:e9:92:e3:34:71:90:88:e5:e8:56:0e:5d:
70:1b:61:d8:47:09:fb:e2:fa:6d:2c:b1:37:6a:d0:
9e:2a:61:4c:9f:ac:13:83:e3:f1:81:b5:d9:30:de:
fb:36:2c:f7:4c:54:c0:30:73:07:35:be:b7:78:66:
4a:fa:ac:b5:52:e9:ed:56:0e:19:9f:26:a5:91:30:
0e:43:22:a7:64:68:31:00:ef:99:a8:8e:b1:fb:58:
4e:15:8d:e9:02:4e:cb:87:97:3c:ca:3e:c4:9e:0d:
5f:93:c5:e3:81:d0:bc:c8:2f:70:39:51:f0:95:8b:
7f:12:c9:56:b3:93:08:34:fc:9a:34:00:f3:18:48:
ef:5e:23:13:e1:97:65:55:41:88:24:20:d3:6e:3d:
91:3a:97:76:36:56:6e:e2:3d:4e:3a:13:9a:43:91:
6f:28:ca:a8:02:7b:72:f2:9b:39:3b:e1:3c:ac:7b:
58:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:42:68:2A:46:7A:F4:AE:51:9A:16:39:80:1F:3A:C1:EF:12:86:38
X509v3 Authority Key Identifier:
keyid:1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/2EJoKkZ69K5RmhY5gB86we8Shjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:eb0::/48
Signature Algorithm: sha256WithRSAEncryption
6a:80:6c:f2:3d:f8:51:11:9c:81:d1:8f:c7:1c:48:da:35:7b:
4f:a0:96:e2:4d:cb:90:a7:13:1d:7e:b6:c6:04:a0:99:f4:1d:
a8:d2:a6:f1:c5:e2:ec:8f:6e:99:91:f9:80:a5:64:fd:c5:3c:
b6:d2:80:f5:1d:be:b6:c3:3b:17:51:82:8a:90:a1:4c:40:f9:
ea:3e:3c:45:08:d5:e0:ca:56:63:99:07:8c:1e:7f:f1:d4:a2:
0b:89:dc:e6:00:9d:8b:38:7b:3d:e5:73:07:5e:3d:c9:39:31:
51:e3:f9:ed:7c:19:b6:21:32:5c:2b:cd:b5:45:08:c8:ce:2b:
c2:69:41:4f:22:26:1e:fa:cc:9d:34:f2:10:07:29:73:fe:7b:
23:47:08:5e:98:90:8a:cd:41:7e:0c:91:f1:ea:5f:dd:2e:48:
fe:79:54:ed:51:02:c3:23:3b:36:8b:9b:41:43:89:b5:b5:c3:
e7:14:4d:bd:55:51:98:da:c2:d5:31:08:65:ed:1d:1c:b5:d5:
9b:9f:e3:f0:8c:c8:f9:e8:b3:8e:f3:2a:7a:ae:ef:67:3c:e3:
b6:6d:84:af:3e:37:87:20:fc:96:5c:0b:dd:1e:1d:a6:a3:45:
e6:4d:53:70:d7:eb:36:4b:93:81:5c:9f:e5:d8:d4:60:88:a6:
14:d3:8b:bd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzKKFVG5ayy3EKAbRqcucDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNjljNzYzMzhhZmM5MDg1YjhmYmQ2NjliOGI3NGJkN2E5
MmQ0MzEwHhcNMjQwMTAyMTIzMTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODQyNjgyYTQ2N2FmNGFlNTE5YTE2Mzk4MDFmM2FjMWVmMTI4NjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKB2HBqDvN+8PJuRKgzKGFl7loxg
2qqRitsyCwsEJS1XMIaR1JlkpOnKjuUED8JSntBrwBxqGWSvQwrj/y/y6hJcNYiG
PMTJs7+9JJzpkuM0cZCI5ehWDl1wG2HYRwn74vptLLE3atCeKmFMn6wTg+PxgbXZ
MN77Niz3TFTAMHMHNb63eGZK+qy1UuntVg4ZnyalkTAOQyKnZGgxAO+ZqI6x+1hO
FY3pAk7Lh5c8yj7Eng1fk8XjgdC8yC9wOVHwlYt/EslWs5MINPyaNADzGEjvXiMT
4ZdlVUGIJCDTbj2ROpd2NlZu4j1OOhOaQ5FvKMqoAnty8ps5O+E8rHtYewIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNhCaCpGevSuUZoWOYAfOsHvEoY4MB8GA1UdIwQY
MBaAFBxpx2M4r8kIW4+9ZpuLdL16ktQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEduSFl6aXZ5UWhiajcxbW00dDB2WHFTMURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9hMjA4OGItYTEyNi00YmE2LTg3MWMt
NTc1OWI0MjdmNGQxLzEvMkVKb0trWjY5SzVSbWhZNWdCODZ3ZThTaGpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9hMjA4OGItYTEyNi00YmE2LTg3MWMtNTc1OWI0MjdmNGQx
LzEvSEduSFl6aXZ5UWhiajcxbW00dDB2WHFTMURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA6w
MA0GCSqGSIb3DQEBCwUAA4IBAQBqgGzyPfhREZyB0Y/HHEjaNXtPoJbiTcuQpxMd
frbGBKCZ9B2o0qbxxeLsj26ZkfmApWT9xTy20oD1Hb62wzsXUYKKkKFMQPnqPjxF
CNXgylZjmQeMHn/x1KILidzmAJ2LOHs95XMHXj3JOTFR4/ntfBm2ITJcK821RQjI
zivCaUFPIiYe+sydNPIQBylz/nsjRwhemJCKzUF+DJHx6l/dLkj+eVTtUQLDIzs2
i5tBQ4m1tcPnFE29VVGY2sLVMQhl7R0ctdWbn+PwjMj56LOO8yp6ru9nPOO2bYSv
PjeHIPyWXAvdHh2mo0XmTVNw1+s2S5OBXJ/l2NRgiKYU04u9
-----END CERTIFICATE-----
Generated at Tue May 7 10:05:08 2024 by rpki-client on console-fra.rpki-client.org