Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/cVUSNlAoBJR9E4oPCIAYCceSAzA.roa
File: cVUSNlAoBJR9E4oPCIAYCceSAzA.roa (raw, json)
Hash identifier: ZhanAnhjZ3xQyWPnbmc9nBNta60VMbVm6EUbbS0omvo=
Subject key identifier: 71:55:12:36:50:28:04:94:7D:13:8A:0F:08:80:18:09:C7:92:03:30
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 018CC94C28661DAAF490F55067E2B7649425
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/cVUSNlAoBJR9E4oPCIAYCceSAzA.roa
Signing time: Tue 02 Jan 2024 08:31:00 +0000
ROA not before: Tue 02 Jan 2024 08:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41954
IP address blocks: 2001:67c:25a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:28:66:1d:aa:f4:90:f5:50:67:e2:b7:64:94:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Jan 2 08:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71551236502804947d138a0f08801809c7920330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0c:3d:5a:e1:97:75:4e:00:0b:c1:be:23:4d:
3b:7e:37:ba:c9:fe:49:0f:63:cd:2c:5d:03:4b:e4:
87:95:0c:31:aa:a7:8e:f7:42:5c:3d:8d:26:73:8c:
27:a7:84:f0:54:78:06:5d:46:31:84:4b:83:45:e1:
cb:3b:fc:78:c0:68:58:11:79:c9:7e:f4:ae:fb:e7:
ca:72:e7:bb:0f:4d:dc:45:27:96:3c:ce:aa:4f:29:
45:34:8b:35:81:97:41:7d:a5:43:39:d6:ec:fc:a5:
18:6b:7c:44:32:28:99:6f:94:43:bc:08:5f:18:5b:
83:9c:4e:ac:88:83:45:5c:ff:43:cb:30:9f:47:e7:
15:eb:73:26:10:78:47:98:3b:e7:76:9c:28:7b:52:
f3:30:ce:90:41:f1:2c:a4:dd:ac:41:a1:24:1f:0d:
f1:72:41:c2:5a:c9:0f:2b:d8:c9:4b:73:6a:f1:1d:
ee:36:9e:9a:0a:53:42:67:64:17:9d:2b:21:d5:a7:
c0:81:fc:6e:ef:c1:de:f9:11:c4:a5:70:12:c5:ed:
0a:d1:a1:8f:3b:b2:85:e5:c9:5f:0b:f7:8c:1b:39:
43:d1:6a:5d:c2:4d:ac:e5:51:61:43:67:55:e5:e4:
b1:1f:50:c7:9d:08:9a:c0:95:1d:33:6c:b0:cc:83:
c9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:55:12:36:50:28:04:94:7D:13:8A:0F:08:80:18:09:C7:92:03:30
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/cVUSNlAoBJR9E4oPCIAYCceSAzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:25a0::/48
Signature Algorithm: sha256WithRSAEncryption
0f:1d:bb:4f:23:18:79:83:d8:d1:10:2e:d7:9a:87:ac:d2:e5:
3f:ef:ce:97:01:7d:5a:7c:10:61:ce:de:4e:ef:4a:fe:27:a5:
68:96:bf:ee:37:24:bc:9d:f0:b8:f1:41:90:f7:4d:ae:6d:c1:
50:5a:36:74:46:6c:eb:fa:7a:5b:0c:ed:cc:40:20:e0:a6:25:
d6:5f:d7:53:07:31:6a:a4:6d:20:11:65:27:39:ec:6a:96:bb:
5a:d4:a4:6d:bb:a5:2b:12:61:35:64:e0:c1:aa:89:4d:83:31:
4f:95:24:61:c0:49:9a:5c:38:75:b8:14:76:41:b6:4e:5b:75:
fe:76:f6:c7:b5:ef:a0:26:a8:10:d6:1a:34:d4:a7:67:a9:22:
33:62:9c:6c:d0:6d:71:52:87:6e:2a:5b:ad:2c:36:6b:f8:c8:
3e:e2:32:65:9c:ed:44:fc:29:de:d7:18:16:29:e5:48:88:85:
1b:6c:c5:fa:f7:b0:9b:4d:bf:7d:b1:ab:24:07:63:8c:a5:dd:
a0:46:ed:ce:6c:8e:93:14:6d:97:2d:43:50:3f:08:70:88:82:
c2:09:be:6e:a3:81:f0:df:ab:95:93:98:2e:3f:a9:30:91:54:
66:e0:98:5a:6b:28:8b:52:23:2f:fd:93:bf:55:d6:3a:b6:9b:
8a:c2:f0:95
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJTChmHar0kPVQZ+K3ZJQlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNGQ4YzQxZTEyMmM4ODFkOTM2ZDkxZDViMDJkYmQ4NmEy
ZTcwYTUwHhcNMjQwMTAyMDgzMTAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTU1MTIzNjUwMjgwNDk0N2QxMzhhMGYwODgwMTgwOWM3OTIwMzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmww9WuGXdU4AC8G+I007fje6yf5J
D2PNLF0DS+SHlQwxqqeO90JcPY0mc4wnp4TwVHgGXUYxhEuDReHLO/x4wGhYEXnJ
fvSu++fKcue7D03cRSeWPM6qTylFNIs1gZdBfaVDOdbs/KUYa3xEMiiZb5RDvAhf
GFuDnE6siINFXP9DyzCfR+cV63MmEHhHmDvndpwoe1LzMM6QQfEspN2sQaEkHw3x
ckHCWskPK9jJS3Nq8R3uNp6aClNCZ2QXnSsh1afAgfxu78He+RHEpXASxe0K0aGP
O7KF5clfC/eMGzlD0Wpdwk2s5VFhQ2dV5eSxH1DHnQiawJUdM2ywzIPJlwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHFVEjZQKASUfROKDwiAGAnHkgMwMB8GA1UdIwQY
MBaAFMtNjEHhIsiB2TbZHVsC29hqLnClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hOTEzMWMtODJkMi00MWI3LTllMjAt
MTM2OTYxOTdkM2I2LzEvY1ZVU05sQW9CSlI5RTRvUENJQVlDY2VTQXpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hOTEzMWMtODJkMi00MWI3LTllMjAtMTM2OTYxOTdkM2I2
LzEveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCWg
MA0GCSqGSIb3DQEBCwUAA4IBAQAPHbtPIxh5g9jREC7Xmoes0uU/786XAX1afBBh
zt5O70r+J6Volr/uNyS8nfC48UGQ902ubcFQWjZ0Rmzr+npbDO3MQCDgpiXWX9dT
BzFqpG0gEWUnOexqlrta1KRtu6UrEmE1ZODBqolNgzFPlSRhwEmaXDh1uBR2QbZO
W3X+dvbHte+gJqgQ1ho01KdnqSIzYpxs0G1xUoduKlutLDZr+Mg+4jJlnO1E/Cne
1xgWKeVIiIUbbMX697CbTb99saskB2OMpd2gRu3ObI6TFG2XLUNQPwhwiILCCb5u
o4Hw36uVk5guP6kwkVRm4JhaayiLUiMv/ZO/VdY6tpuKwvCV
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:07:10 2024 by rpki-client on console-fra.rpki-client.org