Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/pETPrTeaQH0enkfT1dzJLzYjlAA.roa
File: pETPrTeaQH0enkfT1dzJLzYjlAA.roa (raw, json)
Hash identifier: oQJ6ytgBCJYk6eMzx2jRyvn7/7BD01ZnQg5Yt6D/Aoc=
Subject key identifier: A4:44:CF:AD:37:9A:40:7D:1E:9E:47:D3:D5:DC:C9:2F:36:23:94:00
Certificate issuer: /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial: 018CC3B6B2F92C2D44D2B8371AFBBEB0AF5A
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/pETPrTeaQH0enkfT1dzJLzYjlAA.roa
Signing time: Mon 01 Jan 2024 06:29:39 +0000
ROA not before: Mon 01 Jan 2024 06:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207821
IP address blocks: 2a0a:2782::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b2:f9:2c:2d:44:d2:b8:37:1a:fb:be:b0:af:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Validity
Not Before: Jan 1 06:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a444cfad379a407d1e9e47d3d5dcc92f36239400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:d2:7f:5b:e3:3f:cc:a1:18:2a:bd:60:cd:
7b:ac:02:bb:2c:8e:6d:b6:45:86:cd:dc:4f:fb:29:
fa:65:36:cc:3c:70:90:52:b6:e3:62:17:29:ff:88:
99:b9:78:ab:83:ac:91:20:c2:f7:ca:dc:7a:5e:06:
e4:8d:2d:ac:62:7c:96:88:8c:9e:1a:56:ac:6c:60:
5b:6b:eb:e1:ba:d9:c9:1f:cd:7f:5a:9e:32:ca:e3:
4c:03:38:2b:c4:60:a0:a4:dc:7d:51:c2:94:61:81:
f5:57:54:0b:0a:9f:b9:ca:58:21:ed:e3:a0:ed:c2:
27:bf:71:2a:c6:6e:93:9b:8f:5e:37:db:2d:ce:cf:
d3:85:73:03:7e:11:39:38:ac:0d:d4:b7:eb:eb:f3:
e4:cf:93:19:cd:60:02:77:9c:8c:a1:af:f1:6b:fc:
88:6e:cf:81:3b:e9:6b:02:b5:65:cf:89:a7:cc:42:
fa:4c:cd:96:62:8c:93:e4:25:ed:21:33:a1:d9:13:
6b:2b:3e:a0:6a:0d:f4:f5:63:65:69:a5:7c:dd:ec:
30:d4:c4:7d:b1:9d:8a:cb:dc:f7:9e:13:4a:09:f8:
78:80:77:6d:56:25:34:32:4c:ac:7f:5f:9c:a4:0e:
8e:46:6c:57:e8:5a:a5:ce:9b:46:95:10:df:b1:b9:
3b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:44:CF:AD:37:9A:40:7D:1E:9E:47:D3:D5:DC:C9:2F:36:23:94:00
X509v3 Authority Key Identifier:
keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/pETPrTeaQH0enkfT1dzJLzYjlAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2782::/32
Signature Algorithm: sha256WithRSAEncryption
00:bc:09:c4:48:80:7e:51:19:c6:80:a7:02:b8:41:a6:5f:b5:
7a:55:7a:d8:e5:72:10:ac:6d:7e:f6:76:cf:33:b1:85:bb:13:
1c:f0:96:02:cd:12:08:a4:85:f6:ae:58:bf:4b:2b:2d:f1:09:
f6:55:db:20:08:17:d5:69:e5:da:0a:f8:ae:aa:6a:c3:83:63:
3e:d4:33:30:0d:c5:dc:e6:01:11:c0:0a:a3:f6:c4:85:2c:c5:
5d:bb:0c:df:df:1d:ab:22:1b:bc:09:c9:f7:70:74:3e:8c:b1:
8e:01:96:eb:8a:26:31:2f:83:fb:96:be:56:30:30:66:8c:2f:
a3:d3:da:d9:45:bc:d6:16:3e:60:4e:d9:ec:4b:e7:6c:6f:dd:
27:ec:13:ee:90:40:e8:70:a6:4b:f2:f4:6c:8b:9a:71:f0:dc:
32:b3:6e:79:07:9f:78:57:1c:61:b2:20:ec:41:d2:1b:6f:e1:
fd:16:f2:46:5e:60:0d:35:a3:f0:f1:ca:d6:80:b9:85:ea:53:
05:d6:a2:6b:1a:07:f1:07:a6:08:19:3e:29:d9:c1:4b:fa:b7:
dc:6e:c6:46:a7:37:4f:49:d6:18:7c:df:1c:03:17:68:68:59:
30:54:bf:bf:99:59:9b:85:dd:f2:fd:69:fb:f2:db:a1:96:26:
48:0e:95:81
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzDtrL5LC1E0rg3Gvu+sK9aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MGJhZTYwOTcwYTJkZmM4NmRkNjA3YzViOTE1YWQ1YzUz
NGI0MTMwHhcNMjQwMTAxMDYyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDQ0Y2ZhZDM3OWE0MDdkMWU5ZTQ3ZDNkNWRjYzkyZjM2MjM5NDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi7Sf1vjP8yhGCq9YM17rAK7LI5t
tkWGzdxP+yn6ZTbMPHCQUrbjYhcp/4iZuXirg6yRIML3ytx6XgbkjS2sYnyWiIye
GlasbGBba+vhutnJH81/Wp4yyuNMAzgrxGCgpNx9UcKUYYH1V1QLCp+5ylgh7eOg
7cInv3Eqxm6Tm49eN9stzs/ThXMDfhE5OKwN1Lfr6/Pkz5MZzWACd5yMoa/xa/yI
bs+BO+lrArVlz4mnzEL6TM2WYoyT5CXtITOh2RNrKz6gag309WNlaaV83eww1MR9
sZ2Ky9z3nhNKCfh4gHdtViU0Mkysf1+cpA6ORmxX6FqlzptGlRDfsbk7bwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKREz603mkB9Hp5H09XcyS82I5QAMB8GA1UdIwQY
MBaAFPULrmCXCi38ht1gfFuRWtXFNLQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mNzFkY2ItOWU5Mi00NGU3LWIwNDIt
MzY2NTA2N2RiMjU2LzEvcEVUUHJUZWFRSDBlbmtmVDFkekpMellqbEFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9mNzFkY2ItOWU5Mi00NGU3LWIwNDItMzY2NTA2N2RiMjU2
LzEvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgongjAN
BgkqhkiG9w0BAQsFAAOCAQEAALwJxEiAflEZxoCnArhBpl+1elV62OVyEKxtfvZ2
zzOxhbsTHPCWAs0SCKSF9q5Yv0srLfEJ9lXbIAgX1Wnl2gr4rqpqw4NjPtQzMA3F
3OYBEcAKo/bEhSzFXbsM398dqyIbvAnJ93B0PoyxjgGW64omMS+D+5a+VjAwZowv
o9Pa2UW81hY+YE7Z7EvnbG/dJ+wT7pBA6HCmS/L0bIuacfDcMrNueQefeFccYbIg
7EHSG2/h/RbyRl5gDTWj8PHK1oC5hepTBdaiaxoH8QemCBk+KdnBS/q33G7GRqc3
T0nWGHzfHAMXaGhZMFS/v5lZm4Xd8v1p+/LboZYmSA6VgQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:08:23 2024 by rpki-client on console-fra.rpki-client.org