Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/cD1Y9rt792fQ-TazQwxzuH85B-g.roa
File: cD1Y9rt792fQ-TazQwxzuH85B-g.roa (raw, json)
Hash identifier: /991gHkkNrAJOnOk8relhLJG9blT4WFiJp6SP0Leilw=
Subject key identifier: 70:3D:58:F6:BB:7B:F7:67:D0:F9:36:B3:43:0C:73:B8:7F:39:07:E8
Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial: 018CC6B78EE9C32BB1BB653CEF84E7EAC514
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/cD1Y9rt792fQ-TazQwxzuH85B-g.roa
Signing time: Mon 01 Jan 2024 20:29:27 +0000
ROA not before: Mon 01 Jan 2024 20:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48777
IP address blocks: 2a0a:4587:2020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:8e:e9:c3:2b:b1:bb:65:3c:ef:84:e7:ea:c5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Validity
Not Before: Jan 1 20:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=703d58f6bb7bf767d0f936b3430c73b87f3907e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:73:07:78:99:33:f9:36:97:87:c3:ef:d1:3d:
b6:10:95:ba:e2:95:91:a8:cc:ce:01:77:93:e1:c9:
bd:ba:0a:38:bd:e0:32:6a:7c:51:3b:93:67:6a:a8:
34:cd:82:5b:1e:ce:40:bb:c5:83:63:60:f7:98:28:
60:9e:77:3e:a6:df:81:1e:d4:9c:c0:16:e7:06:93:
0a:d0:2c:82:13:1d:95:75:2f:e8:f2:37:6c:fd:37:
0c:74:18:c5:f7:34:ce:8f:21:3a:c6:18:9d:70:62:
f8:11:11:99:43:f7:6a:53:87:14:fd:1d:00:1b:d5:
b3:ae:80:5d:f8:6b:de:d0:f5:92:e6:ed:2d:36:91:
56:6f:50:5a:46:37:f8:55:83:14:e1:e8:d7:b1:1b:
a2:88:40:0c:a2:08:f1:18:70:ab:a9:d3:67:e7:b4:
7e:b6:a3:a3:fb:b7:71:9e:39:08:1a:00:3a:9c:2a:
3c:aa:dd:ad:de:ae:7d:0b:46:3b:2e:d7:65:a7:48:
e5:00:15:25:bc:ae:58:4c:f7:8f:44:8b:c7:48:ea:
12:78:5d:a0:7e:3a:8b:14:df:df:ce:70:c9:9a:25:
d4:ad:d9:fb:53:02:2d:6d:a5:e4:d8:b8:06:af:9e:
f4:59:f3:ca:b2:79:c9:0b:41:c4:b8:94:a0:81:64:
d6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3D:58:F6:BB:7B:F7:67:D0:F9:36:B3:43:0C:73:B8:7F:39:07:E8
X509v3 Authority Key Identifier:
keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/cD1Y9rt792fQ-TazQwxzuH85B-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4587:2020::/48
Signature Algorithm: sha256WithRSAEncryption
8f:2d:00:6f:6e:a2:c7:d8:d3:7d:65:b0:4c:85:6b:8f:4a:26:
03:4c:9a:87:5b:5c:65:b8:98:7d:21:9c:6f:70:1c:07:98:6a:
ea:28:3b:ac:07:a2:6d:bf:6f:70:4c:6b:c4:e1:ce:c7:2a:2d:
e6:1c:d7:25:49:8c:f0:09:d2:0b:05:6d:3f:40:02:22:ef:b7:
dd:24:de:08:b2:1a:d1:15:d7:f8:c8:be:ec:20:a6:a3:e3:b4:
d4:24:c8:89:bf:3e:66:71:bb:81:94:3b:41:0d:c5:e0:1d:25:
cd:45:76:13:19:3e:a1:04:60:4f:45:5e:c7:de:f0:60:98:90:
21:c8:ea:76:1d:a7:09:2d:90:4c:fe:68:db:e4:dc:d9:fc:e2:
d4:f7:76:43:84:55:a7:46:a9:49:16:5b:30:f4:5b:90:72:87:
47:91:9d:4d:a0:52:73:57:75:d9:3c:43:92:e4:16:18:1c:d8:
76:0f:9b:71:4c:14:61:c9:00:e3:48:b0:b0:e0:be:e0:68:26:
42:34:6b:60:99:59:70:d4:45:0a:a7:03:32:2e:7d:e0:da:5f:
96:53:9b:78:2d:c7:ab:15:ac:08:5c:ea:82:26:6b:ca:00:14:
c8:7d:fd:c1:f3:f7:6c:8a:f4:aa:93:e4:a7:2f:86:54:55:59:
32:19:21:bc
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgISAYzGt47pwyuxu2U874Tn6sUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl
YzEwNWUwHhcNMjQwMTAxMjAyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDNkNThmNmJiN2JmNzY3ZDBmOTM2YjM0MzBjNzNiODdmMzkwN2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHMHeJkz+TaXh8Pv0T22EJW64pWR
qMzOAXeT4cm9ugo4veAyanxRO5Nnaqg0zYJbHs5Au8WDY2D3mChgnnc+pt+BHtSc
wBbnBpMK0CyCEx2VdS/o8jds/TcMdBjF9zTOjyE6xhidcGL4ERGZQ/dqU4cU/R0A
G9WzroBd+Gve0PWS5u0tNpFWb1BaRjf4VYMU4ejXsRuiiEAMogjxGHCrqdNn57R+
tqOj+7dxnjkIGgA6nCo8qt2t3q59C0Y7Ltdlp0jlABUlvK5YTPePRIvHSOoSeF2g
fjqLFN/fznDJmiXUrdn7UwItbaXk2LgGr570WfPKsnnJC0HEuJSggWTWCQIDAQAB
o4ICDjCCAgowHQYDVR0OBBYEFHA9WPa7e/dn0Pk2s0MMc7h/OQfoMB8GA1UdIwQY
MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1
LTM4MjM1NWZjMmZmMS8xL2NEMVk5cnQ3OTJmUS1UYXpRd3h6dUg4NUItZy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1LTM4MjM1NWZjMmZm
MS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCkWH
ICAwDQYJKoZIhvcNAQELBQADggEBAI8tAG9uosfY031lsEyFa49KJgNMmodbXGW4
mH0hnG9wHAeYauooO6wHom2/b3BMa8ThzscqLeYc1yVJjPAJ0gsFbT9AAiLvt90k
3giyGtEV1/jIvuwgpqPjtNQkyIm/PmZxu4GUO0ENxeAdJc1FdhMZPqEEYE9FXsfe
8GCYkCHI6nYdpwktkEz+aNvk3Nn84tT3dkOEVadGqUkWWzD0W5Byh0eRnU2gUnNX
ddk8Q5LkFhgc2HYPm3FMFGHJAONIsLDgvuBoJkI0a2CZWXDURQqnAzIufeDaX5ZT
m3gtx6sVrAhc6oIma8oAFMh9/cHz92yK9KqT5KcvhlRVWTIZIbw=
-----END CERTIFICATE-----
Generated at Sun May 19 00:42:27 2024 by rpki-client on console-ams.rpki-client.org