Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/bxUdlG0ON62H_gOgMiUcPTsrmzw.roa
File: bxUdlG0ON62H_gOgMiUcPTsrmzw.roa (raw, json)
Hash identifier: 1WFgLuVnt4IOoG5kXriRDzH75BTBqLCUnyIEb0d5U7w=
Subject key identifier: 6F:15:1D:94:6D:0E:37:AD:87:FE:03:A0:32:25:1C:3D:3B:2B:9B:3C
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 018CC501365E2DE0996A554514A066CD8F21
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/bxUdlG0ON62H_gOgMiUcPTsrmzw.roa
Signing time: Mon 01 Jan 2024 12:30:40 +0000
ROA not before: Mon 01 Jan 2024 12:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25091
IP address blocks: 2a0c:4144:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:36:5e:2d:e0:99:6a:55:45:14:a0:66:cd:8f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Jan 1 12:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f151d946d0e37ad87fe03a032251c3d3b2b9b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:bf:f8:5f:8e:17:78:0c:d0:4b:9b:6c:9f:
d7:33:0b:f3:e4:ed:e6:98:1e:2a:29:0b:26:0f:c9:
16:fb:1a:9c:aa:b1:7e:af:4f:74:07:d9:3d:cb:99:
68:32:5c:c9:59:3d:81:72:d9:98:a1:a8:15:da:8b:
67:8b:60:aa:4b:4e:0e:64:45:51:08:01:30:12:fe:
86:d8:79:cd:5e:cb:c7:e3:46:e8:4b:29:6c:03:c2:
af:dd:27:25:60:5d:2c:87:78:9f:b4:eb:fb:53:3d:
62:df:ef:50:fd:15:5a:49:2b:8f:2a:50:d4:f2:04:
ce:e5:42:bb:53:c8:12:60:d7:26:cd:21:80:60:f1:
a2:7f:a8:1a:59:44:09:42:a4:50:88:6a:0d:71:9b:
78:f0:b2:e1:64:78:13:df:bf:39:74:40:84:c0:72:
22:c4:9f:97:9a:42:08:da:5c:a1:bf:f3:a1:aa:3d:
20:ec:57:e7:43:17:a5:85:ca:8a:a6:d5:44:e2:c2:
aa:00:b2:4c:37:81:a5:43:53:5e:72:ab:b9:16:d1:
53:af:50:2b:e0:a7:5b:40:2c:1b:fd:24:d1:ba:75:
3c:f3:fb:7e:3f:25:59:9c:73:dc:79:9c:8b:8f:1d:
c1:0d:88:2a:8b:4f:6b:ea:71:a8:7a:37:2e:79:d5:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:15:1D:94:6D:0E:37:AD:87:FE:03:A0:32:25:1C:3D:3B:2B:9B:3C
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/bxUdlG0ON62H_gOgMiUcPTsrmzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:4144:100::/48
Signature Algorithm: sha256WithRSAEncryption
af:45:6b:f0:f5:0a:b3:7b:43:33:84:30:31:fc:7a:15:ee:4d:
cc:ee:e1:63:2f:8b:30:d6:82:02:5b:87:37:68:26:44:81:b6:
9d:68:fb:ed:ee:70:21:e3:97:50:89:e6:4a:3d:1f:ed:a4:ce:
1d:01:50:19:c8:45:f1:2a:39:31:8b:83:36:ad:3e:4c:a6:51:
c0:0f:84:25:d5:a2:db:98:84:d1:fb:be:f7:73:a1:31:f3:5e:
91:a7:f5:f2:21:28:a6:06:95:09:df:30:11:53:d7:ac:48:34:
b7:ba:61:c9:99:b3:21:5f:26:d0:c3:9a:77:ac:bb:e4:46:e6:
c0:5a:9d:89:2b:9b:02:bb:2f:0e:cb:2e:a0:0e:40:4a:42:41:
0c:e3:5b:31:17:2c:70:c8:63:71:e4:af:ca:61:4c:46:20:ef:
85:9e:0c:cd:8b:af:ba:b0:9b:64:3e:e1:9e:e6:02:6d:36:fc:
39:8e:25:c3:4d:90:44:a6:c1:d1:c6:33:d3:92:0f:7e:f3:6f:
6f:db:85:98:72:74:3a:d2:64:39:48:16:46:03:46:5f:5e:24:
7c:e4:bb:b1:2c:e2:ac:e8:44:aa:49:4a:09:c4:ea:d9:84:47:
c6:47:9f:7b:21:3d:27:21:46:97:f4:03:3d:8b:45:86:c5:55:
06:b8:22:e3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzFATZeLeCZalVFFKBmzY8hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZDk1MjI0NWJiMzRlNDBjZGFiNWQ0YjA5MDE0M2MwZDg1
ODEzOTAwHhcNMjQwMTAxMTIzMDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjE1MWQ5NDZkMGUzN2FkODdmZTAzYTAzMjI1MWMzZDNiMmI5YjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj6/+F+OF3gM0EubbJ/XMwvz5O3m
mB4qKQsmD8kW+xqcqrF+r090B9k9y5loMlzJWT2BctmYoagV2otni2CqS04OZEVR
CAEwEv6G2HnNXsvH40boSylsA8Kv3SclYF0sh3iftOv7Uz1i3+9Q/RVaSSuPKlDU
8gTO5UK7U8gSYNcmzSGAYPGif6gaWUQJQqRQiGoNcZt48LLhZHgT3785dECEwHIi
xJ+XmkII2lyhv/Ohqj0g7FfnQxelhcqKptVE4sKqALJMN4GlQ1Necqu5FtFTr1Ar
4KdbQCwb/STRunU88/t+PyVZnHPceZyLjx3BDYgqi09r6nGoejcuedXSEQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFG8VHZRtDjeth/4DoDIlHD07K5s8MB8GA1UdIwQY
MBaAFKLZUiRbs05AzatdSwkBQ8DYWBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDIt
YTIyZmZlZTRhNTE1LzEvYnhVZGxHME9ONjJIX2dPZ01pVWNQVHNybXp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDItYTIyZmZlZTRhNTE1
LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgxBRAEA
MA0GCSqGSIb3DQEBCwUAA4IBAQCvRWvw9Qqze0MzhDAx/HoV7k3M7uFjL4sw1oIC
W4c3aCZEgbadaPvt7nAh45dQieZKPR/tpM4dAVAZyEXxKjkxi4M2rT5MplHAD4Ql
1aLbmITR+773c6Ex816Rp/XyISimBpUJ3zARU9esSDS3umHJmbMhXybQw5p3rLvk
RubAWp2JK5sCuy8Oyy6gDkBKQkEM41sxFyxwyGNx5K/KYUxGIO+FngzNi6+6sJtk
PuGe5gJtNvw5jiXDTZBEpsHRxjPTkg9+829v24WYcnQ60mQ5SBZGA0ZfXiR85Lux
LOKs6ESqSUoJxOrZhEfGR597IT0nIUaX9AM9i0WGxVUGuCLj
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:53:38 2024 by rpki-client on console-fra.rpki-client.org