Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/vnH4doubjCZbdDd7lOa90Dd9t8Y.roa
File: vnH4doubjCZbdDd7lOa90Dd9t8Y.roa (raw, json)
Hash identifier: tPww+5JHhT26Cqa58OyQ0AYLHA7QF/DoCqQD6SRJbqc=
Subject key identifier: BE:71:F8:76:8B:9B:8C:26:5B:74:37:7B:94:E6:BD:D0:37:7D:B7:C6
Certificate issuer: /CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b
Certificate serial: 018CC349583721DDED11E1E5E4FB742BED55
Authority key identifier: 8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/vnH4doubjCZbdDd7lOa90Dd9t8Y.roa
Signing time: Mon 01 Jan 2024 04:30:12 +0000
ROA not before: Mon 01 Jan 2024 04:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57166
IP address blocks: 2001:678:918::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:58:37:21:dd:ed:11:e1:e5:e4:fb:74:2b:ed:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b
Validity
Not Before: Jan 1 04:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be71f8768b9b8c265b74377b94e6bdd0377db7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f6:5e:8f:c9:90:84:04:e0:2b:c9:f9:7a:f0:
52:a1:39:54:6f:92:1f:7c:19:1a:1d:ac:82:c9:83:
53:81:dc:d8:49:08:0d:05:0f:01:2b:db:9c:25:d1:
aa:68:97:56:f1:bb:ef:6e:a8:87:92:12:a8:55:90:
c5:af:89:c0:80:2f:00:6f:2a:2e:db:13:c8:f7:22:
b4:2f:b5:ef:38:7c:f5:87:17:93:44:94:28:6f:34:
f4:5a:97:31:cf:ad:ac:af:60:6b:7b:99:57:bc:70:
31:0b:2c:c6:db:40:08:8e:24:f3:e1:d3:75:45:4c:
d3:85:19:93:2e:22:48:45:10:ee:94:9a:65:91:20:
ce:85:19:02:96:97:a5:fa:04:96:22:7d:bb:5a:7c:
56:f0:26:49:cb:6c:81:b7:d9:ab:3c:e6:89:45:c9:
b9:00:fa:87:64:fd:1f:cc:78:c2:c8:ac:09:78:e0:
c3:32:c6:94:75:9f:ae:94:59:93:81:6b:59:66:ff:
1a:6e:e0:df:47:ee:88:bd:76:8f:5a:63:87:4d:0c:
e1:fe:51:3e:8f:a1:1f:19:29:f8:a7:e1:ef:61:89:
85:49:c2:55:db:64:42:bb:d8:81:23:c5:d9:e8:d4:
3e:92:d0:02:17:73:2d:b4:ef:6e:67:7a:1e:5f:17:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:71:F8:76:8B:9B:8C:26:5B:74:37:7B:94:E6:BD:D0:37:7D:B7:C6
X509v3 Authority Key Identifier:
keyid:8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/vnH4doubjCZbdDd7lOa90Dd9t8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:918::/48
Signature Algorithm: sha256WithRSAEncryption
73:59:f1:45:56:f4:6b:e6:36:85:bf:f4:ec:f3:c2:a8:8f:e9:
1d:46:16:98:a6:b9:62:f5:4d:2d:81:05:7e:71:0f:1f:29:26:
0c:6a:60:e3:4e:e9:d4:13:5b:9f:53:98:09:bb:9f:1b:3d:e9:
3c:d9:fa:55:20:54:c6:dd:bb:00:aa:99:a2:f8:69:5b:52:8e:
63:64:10:86:52:61:65:bc:ca:fb:90:ec:85:03:01:92:79:fd:
1e:08:9e:e5:cf:51:fd:bc:3a:22:57:37:3c:9a:38:74:6a:f1:
b2:f6:6a:a1:e2:87:75:d5:10:f3:02:ce:d5:36:cc:ec:5c:b0:
c6:32:14:ee:de:9c:66:66:31:42:65:57:4b:8a:60:69:a1:c1:
2a:17:87:bd:5e:db:9c:e3:aa:81:36:88:54:57:c3:80:23:18:
a9:a3:07:8d:f0:40:b5:9a:eb:e2:a6:78:ea:ae:2e:56:0f:ff:
ab:0c:99:ab:8c:0f:eb:40:e7:8d:ce:1c:7b:94:28:0a:23:4c:
16:9b:82:28:b9:f8:4b:fe:f3:fc:0d:f8:2f:d4:5e:68:49:f6:
fa:9a:67:14:b0:41:e8:87:e3:cc:b9:dc:1a:97:e9:9e:44:41:
15:44:02:bc:b4:44:9d:c5:ed:3b:b5:a5:88:38:fd:8c:5e:dd:
05:bb:8c:b0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzDSVg3Id3tEeHl5Pt0K+1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlN2FlZTM1NTlmY2MzMWJmZWQ3N2VlY2U4Yjc0NzljOGU4
NTZhNWIwHhcNMjQwMTAxMDQzMDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTcxZjg3NjhiOWI4YzI2NWI3NDM3N2I5NGU2YmRkMDM3N2RiN2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPZej8mQhATgK8n5evBSoTlUb5If
fBkaHayCyYNTgdzYSQgNBQ8BK9ucJdGqaJdW8bvvbqiHkhKoVZDFr4nAgC8Abyou
2xPI9yK0L7XvOHz1hxeTRJQobzT0Wpcxz62sr2Bre5lXvHAxCyzG20AIjiTz4dN1
RUzThRmTLiJIRRDulJplkSDOhRkClpel+gSWIn27WnxW8CZJy2yBt9mrPOaJRcm5
APqHZP0fzHjCyKwJeODDMsaUdZ+ulFmTgWtZZv8abuDfR+6IvXaPWmOHTQzh/lE+
j6EfGSn4p+HvYYmFScJV22RCu9iBI8XZ6NQ+ktACF3MttO9uZ3oeXxeL1QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL5x+HaLm4wmW3Q3e5TmvdA3fbfGMB8GA1UdIwQY
MBaAFI567jVZ/MMb/td+7Oi3R5yOhWpbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5ydU5Wbjh3eHYtMTM3czZMZEhuSTZGYWxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wMWM3YzAtZTcwMC00MThlLTkyMDct
OTExNjBiYjRjNjU5LzEvdm5INGRvdWJqQ1piZERkN2xPYTkwRGQ5dDhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wMWM3YzAtZTcwMC00MThlLTkyMDctOTExNjBiYjRjNjU5
LzEvam5ydU5Wbjh3eHYtMTM3czZMZEhuSTZGYWxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAkY
MA0GCSqGSIb3DQEBCwUAA4IBAQBzWfFFVvRr5jaFv/Ts88Koj+kdRhaYprli9U0t
gQV+cQ8fKSYMamDjTunUE1ufU5gJu58bPek82fpVIFTG3bsAqpmi+GlbUo5jZBCG
UmFlvMr7kOyFAwGSef0eCJ7lz1H9vDoiVzc8mjh0avGy9mqh4od11RDzAs7VNszs
XLDGMhTu3pxmZjFCZVdLimBpocEqF4e9Xtuc46qBNohUV8OAIxipoweN8EC1muvi
pnjqri5WD/+rDJmrjA/rQOeNzhx7lCgKI0wWm4IoufhL/vP8Dfgv1F5oSfb6mmcU
sEHoh+PMudwal+meREEVRAK8tESdxe07taWIOP2MXt0Fu4yw
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:44 2024 by rpki-client on console-ams.rpki-client.org