Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/Jk6UkY2VEtVdgUL2kzVR1EnCI60.roa
File: Jk6UkY2VEtVdgUL2kzVR1EnCI60.roa (raw, json)
Hash identifier: NM8Feq/VyGeBqjg5MbQ8jZcHgU1E5SzOFqS3WrQwN4c=
Subject key identifier: 26:4E:94:91:8D:95:12:D5:5D:81:42:F6:93:35:51:D4:49:C2:23:AD
Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Certificate serial: 018CC500D0326EB9DAC1FCBFF7249A45E5AB
Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/Jk6UkY2VEtVdgUL2kzVR1EnCI60.roa
Signing time: Mon 01 Jan 2024 12:30:14 +0000
ROA not before: Mon 01 Jan 2024 12:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41745
IP address blocks: 2a03:afc0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d0:32:6e:b9:da:c1:fc:bf:f7:24:9a:45:e5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Validity
Not Before: Jan 1 12:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=264e94918d9512d55d8142f6933551d449c223ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d2:d2:6f:bd:eb:ff:2e:93:e6:bb:98:03:86:
3e:2a:77:4f:c5:49:ea:2b:c5:3a:a4:11:9c:c9:62:
a0:e2:64:02:d6:76:48:29:5b:a9:42:98:35:94:b5:
ec:a0:56:02:17:06:97:8e:5b:ce:4a:ff:f6:e5:7e:
06:5b:72:23:64:3c:ff:34:ac:45:7e:d8:5a:bd:20:
a8:da:de:0f:9f:9b:5a:47:02:e9:c9:22:05:12:2b:
59:16:c2:10:62:79:78:05:bd:22:4a:db:da:ab:f5:
ff:d5:0f:6c:04:da:2b:e4:63:6f:12:84:60:4f:78:
d3:90:c0:55:63:22:a1:2c:cb:91:6d:6f:d5:09:c1:
ef:f0:57:a9:5e:4b:e9:b3:b8:34:6e:73:89:95:04:
17:28:df:f1:be:fe:a4:59:60:84:16:b0:10:06:d4:
23:d4:f2:65:c3:6c:e0:58:ec:65:a6:84:22:15:1f:
94:e1:a6:9d:c4:78:13:75:cf:b2:52:7d:8d:fd:65:
45:bd:9e:a0:fa:af:58:44:f1:fe:0c:ba:fe:e2:40:
e6:90:25:ea:a4:f1:f0:46:b9:a5:06:5e:f2:d1:6b:
cd:8c:9a:e9:d8:5d:84:18:56:13:0e:a8:40:50:13:
c9:f0:f8:1e:4b:fe:80:71:0e:73:74:97:9a:9a:4b:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4E:94:91:8D:95:12:D5:5D:81:42:F6:93:35:51:D4:49:C2:23:AD
X509v3 Authority Key Identifier:
keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/Jk6UkY2VEtVdgUL2kzVR1EnCI60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:afc0:9::/48
Signature Algorithm: sha256WithRSAEncryption
44:1c:56:30:46:02:02:b0:89:08:6a:54:99:5e:f0:c4:a6:5e:
1a:ac:be:45:2c:e3:d9:88:68:87:e2:8c:e4:f6:43:86:64:99:
9f:54:a2:9c:fc:b5:ad:73:bc:b9:fe:73:de:97:eb:3e:93:13:
c2:4b:5b:58:ff:a0:bb:c0:e0:d5:14:37:d2:06:e2:c9:3b:4b:
27:75:25:52:1e:78:7b:0b:38:f5:fa:1d:64:3b:9e:7f:f6:dc:
e3:40:35:b2:ed:5f:e1:33:be:5f:3d:5e:07:d0:1d:8b:0c:54:
0f:dd:8d:ab:1b:29:50:e0:dd:c8:b5:22:e2:4b:c5:cd:98:53:
14:32:5c:45:9a:72:1f:8c:29:31:01:71:ae:3d:b1:d3:00:6c:
96:6c:30:db:cb:d7:47:35:5a:1d:5c:0a:2e:50:db:15:6e:96:
a4:c8:e3:e7:d7:f3:b0:b4:8e:f8:22:b8:38:4f:d5:2c:f5:66:
e9:e4:38:9e:3f:29:54:42:af:ee:b8:99:69:12:fe:78:72:39:
b4:7b:f9:dd:43:56:67:68:12:59:20:02:92:5d:cf:b1:44:15:
e3:d9:f1:90:b8:98:96:12:8b:d4:71:0f:cc:d3:e0:5f:de:bc:
02:c7:5e:e7:1a:51:81:fd:06:eb:fe:b8:2d:ee:06:e9:5c:7e:
fd:e0:49:6f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzFANAybrnawfy/9ySaReWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMzljZTRjMjlhYjNmODAyZjlkZTkzM2Y0NDk1MDI2YzRk
MGVlNGEwHhcNMjQwMTAxMTIzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjRlOTQ5MThkOTUxMmQ1NWQ4MTQyZjY5MzM1NTFkNDQ5YzIyM2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtLSb73r/y6T5ruYA4Y+KndPxUnq
K8U6pBGcyWKg4mQC1nZIKVupQpg1lLXsoFYCFwaXjlvOSv/25X4GW3IjZDz/NKxF
fthavSCo2t4Pn5taRwLpySIFEitZFsIQYnl4Bb0iStvaq/X/1Q9sBNor5GNvEoRg
T3jTkMBVYyKhLMuRbW/VCcHv8FepXkvps7g0bnOJlQQXKN/xvv6kWWCEFrAQBtQj
1PJlw2zgWOxlpoQiFR+U4aadxHgTdc+yUn2N/WVFvZ6g+q9YRPH+DLr+4kDmkCXq
pPHwRrmlBl7y0WvNjJrp2F2EGFYTDqhAUBPJ8PgeS/6AcQ5zdJeamkvF9QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCZOlJGNlRLVXYFC9pM1UdRJwiOtMB8GA1UdIwQY
MBaAFG05zkwpqz+AL53pM/RJUCbE0O5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5Nzkt
Y2RjMzFkNWZiOGE0LzEvSms2VWtZMlZFdFZkZ1VMMmt6VlIxRW5DSTYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5NzktY2RjMzFkNWZiOGE0
LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgOvwAAJ
MA0GCSqGSIb3DQEBCwUAA4IBAQBEHFYwRgICsIkIalSZXvDEpl4arL5FLOPZiGiH
4ozk9kOGZJmfVKKc/LWtc7y5/nPel+s+kxPCS1tY/6C7wODVFDfSBuLJO0sndSVS
Hnh7Czj1+h1kO55/9tzjQDWy7V/hM75fPV4H0B2LDFQP3Y2rGylQ4N3ItSLiS8XN
mFMUMlxFmnIfjCkxAXGuPbHTAGyWbDDby9dHNVodXAouUNsVbpakyOPn1/OwtI74
Irg4T9Us9Wbp5DiePylUQq/uuJlpEv54cjm0e/ndQ1ZnaBJZIAKSXc+xRBXj2fGQ
uJiWEovUcQ/M0+Bf3rwCx17nGlGB/Qbr/rgt7gbpXH794Elv
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:47:17 2024 by rpki-client on console-ams.rpki-client.org