Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/LD84gfI8aMk8oG-Sxduox4oN6MM.roa
File: LD84gfI8aMk8oG-Sxduox4oN6MM.roa (raw, json)
Hash identifier: PJQJD0RZztp+S3YIVZib0EfcJCwuKohxp057GeHtBIc=
Subject key identifier: 2C:3F:38:81:F2:3C:68:C9:3C:A0:6F:92:C5:DB:A8:C7:8A:0D:E8:C3
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 018D50FA0775988E2D54A94CFEE12E527C52
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/LD84gfI8aMk8oG-Sxduox4oN6MM.roa
Signing time: Sun 28 Jan 2024 16:49:39 +0000
ROA not before: Sun 28 Jan 2024 16:49:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a04:5b81:2010::/44 maxlen: 48
2a04:5b81:2060::/44 maxlen: 48
2a04:5b81:2100::/40 maxlen: 48
2a04:5b81:2130::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:50:fa:07:75:98:8e:2d:54:a9:4c:fe:e1:2e:52:7c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jan 28 16:49:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c3f3881f23c68c93ca06f92c5dba8c78a0de8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:06:fc:ea:be:ce:6b:55:ff:1a:88:20:e4:9f:
c8:dc:04:3b:7e:2b:65:49:7a:27:de:dd:25:ec:ae:
c4:8f:e0:8f:d5:da:e2:35:0c:cc:bd:f6:6e:6e:ca:
4f:0b:44:04:7f:25:7d:8e:24:84:3f:3c:e9:c9:51:
31:4d:60:f3:5b:86:fb:ba:a8:bb:f1:d8:37:5d:88:
48:03:58:38:ce:6b:43:6d:e4:bf:31:9b:90:24:6d:
5f:ea:9e:6f:9c:19:ca:5c:e7:d7:c1:f3:57:1f:2b:
a2:6b:0c:23:ef:8c:6e:65:bf:a1:28:35:af:02:2d:
4c:11:2b:86:86:80:83:56:68:5c:dd:46:d3:63:24:
b5:91:68:4d:02:ed:54:fe:55:e5:be:6e:89:3c:01:
5f:17:fe:c2:b1:f9:7c:07:c4:32:cf:40:28:02:80:
66:5f:c9:13:ed:80:98:91:e1:fd:8f:77:f8:10:60:
7f:e0:3e:89:54:c2:e4:aa:87:57:f2:06:44:63:a6:
b5:46:e7:27:dc:f4:86:42:9f:4b:e6:57:07:fa:56:
36:99:21:fa:d0:4d:bd:d4:99:db:9a:f0:43:84:e7:
24:07:b0:79:2e:5c:33:22:19:a6:a8:c6:57:8a:8e:
72:7c:b3:fa:50:0d:80:9f:eb:ea:77:1f:8a:4e:94:
37:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3F:38:81:F2:3C:68:C9:3C:A0:6F:92:C5:DB:A8:C7:8A:0D:E8:C3
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/LD84gfI8aMk8oG-Sxduox4oN6MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5b81:2010::/44
2a04:5b81:2060::/44
2a04:5b81:2100::/40
Signature Algorithm: sha256WithRSAEncryption
21:fd:26:db:12:1a:d5:fa:4a:32:01:6e:54:dc:9a:e1:b6:ec:
75:f2:bc:cb:d1:a7:bf:19:a6:cb:52:44:46:a0:96:13:f6:f4:
cc:ad:be:dc:88:8d:ad:92:0a:63:8c:b7:f3:7a:ad:3c:7a:14:
5a:6e:cd:e2:80:cb:56:49:71:90:a8:38:65:54:1a:4a:3a:3b:
0a:20:fb:3f:6a:83:74:6d:85:73:ca:c0:d1:31:ed:f3:47:e4:
d7:77:20:bf:eb:9d:1c:64:18:82:43:90:ff:99:c2:2a:39:66:
e4:b0:c3:33:02:ad:14:34:8a:26:4d:0e:9c:bc:ec:55:50:90:
cb:1c:e7:7f:a4:81:aa:4d:09:ea:c1:d6:21:ca:81:56:b7:76:
bb:70:af:d4:01:87:46:77:6a:f9:fb:62:96:6b:41:a7:9b:37:
2e:20:43:5a:b5:d3:6c:a9:43:96:d6:ec:fa:88:84:52:7f:f2:
bc:5c:d2:71:44:1d:59:68:10:5c:a6:12:88:cb:3f:bc:ea:bb:
e4:d2:31:6d:55:63:91:5e:50:e5:89:e6:6b:6d:62:ac:64:e1:
b5:e7:f1:da:3b:21:3a:6d:43:1e:22:48:a7:7b:66:51:9e:1c:
e3:36:ae:19:9a:53:58:36:06:36:1d:4e:81:73:72:d3:2c:97:
6e:ae:55:1b
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAY1Q+gd1mI4tVKlM/uEuUnxSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1
MTNhMGYwHhcNMjQwMTI4MTY0OTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzNmMzg4MWYyM2M2OGM5M2NhMDZmOTJjNWRiYThjNzhhMGRlOGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ab86r7Oa1X/Gogg5J/I3AQ7fitl
SXon3t0l7K7Ej+CP1driNQzMvfZubspPC0QEfyV9jiSEPzzpyVExTWDzW4b7uqi7
8dg3XYhIA1g4zmtDbeS/MZuQJG1f6p5vnBnKXOfXwfNXHyuiawwj74xuZb+hKDWv
Ai1MESuGhoCDVmhc3UbTYyS1kWhNAu1U/lXlvm6JPAFfF/7Csfl8B8Qyz0AoAoBm
X8kT7YCYkeH9j3f4EGB/4D6JVMLkqodX8gZEY6a1Rucn3PSGQp9L5lcH+lY2mSH6
0E291JnbmvBDhOckB7B5LlwzIhmmqMZXio5yfLP6UA2An+vqdx+KTpQ3IQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFCw/OIHyPGjJPKBvksXbqMeKDejDMB8GA1UdIwQY
MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt
MWQyMWQxYmNlM2ZlLzEvTEQ4NGdmSThhTWs4b0ctU3hkdW94NG9ONk1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl
LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAAjAaAwcEKgRbgSAQ
AwcEKgRbgSBgAwYAKgRbgSEwDQYJKoZIhvcNAQELBQADggEBACH9JtsSGtX6SjIB
blTcmuG27HXyvMvRp78ZpstSREaglhP29MytvtyIja2SCmOMt/N6rTx6FFpuzeKA
y1ZJcZCoOGVUGko6Owog+z9qg3RthXPKwNEx7fNH5Nd3IL/rnRxkGIJDkP+Zwio5
ZuSwwzMCrRQ0iiZNDpy87FVQkMsc53+kgapNCerB1iHKgVa3drtwr9QBh0Z3avn7
YpZrQaebNy4gQ1q102ypQ5bW7PqIhFJ/8rxc0nFEHVloEFymEojLP7zqu+TSMW1V
Y5FeUOWJ5mttYqxk4bXn8do7ITptQx4iSKd7ZlGeHOM2rhmaU1g2BjYdToFzctMs
l26uVRs=
-----END CERTIFICATE-----
Generated at Mon May 6 15:17:37 2024 by rpki-client on console-fra.rpki-client.org