Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/dfDy_jmvFF391d5s2WSD8NpYSFM.roa
File: dfDy_jmvFF391d5s2WSD8NpYSFM.roa (raw, json)
Hash identifier: ybwal1NjyKAJB/4R7x+Pijd35yCDBTirebrHvhdg86w=
Subject key identifier: 75:F0:F2:FE:39:AF:14:5D:FD:D5:DE:6C:D9:64:83:F0:DA:58:48:53
Certificate issuer: /CN=948956c1c6769f42d60403de1319bf463454a0d6
Certificate serial: 018E372ECFF4E6833865EA6C106C904B6E90
Authority key identifier: 94:89:56:C1:C6:76:9F:42:D6:04:03:DE:13:19:BF:46:34:54:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlWwcZ2n0LWBAPeExm_RjRUoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/dfDy_jmvFF391d5s2WSD8NpYSFM.roa
Signing time: Wed 13 Mar 2024 09:39:58 +0000
ROA not before: Wed 13 Mar 2024 09:39:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197900
IP address blocks: 2001:67c:60c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/lIlWwcZ2n0LWBAPeExm_RjRUoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/lIlWwcZ2n0LWBAPeExm_RjRUoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIlWwcZ2n0LWBAPeExm_RjRUoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:2e:cf:f4:e6:83:38:65:ea:6c:10:6c:90:4b:6e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948956c1c6769f42d60403de1319bf463454a0d6
Validity
Not Before: Mar 13 09:39:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75f0f2fe39af145dfdd5de6cd96483f0da584853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:f0:0b:e9:3c:d5:26:3f:e3:6a:39:fb:df:
0e:74:13:fb:9d:ed:c2:46:99:14:fd:d8:dd:80:d8:
4e:c9:e9:d3:f2:68:6a:91:8a:91:16:1b:6b:3f:44:
00:24:50:b6:23:37:a2:fd:90:04:77:19:53:87:5e:
96:9f:96:cd:d5:45:1e:84:3a:79:a9:c5:84:62:32:
30:b7:b0:9c:8d:b3:76:f4:c0:ce:00:42:33:05:39:
8a:39:ac:8e:be:55:00:68:a2:ce:d2:8f:8f:d6:d6:
98:28:e2:1a:95:a8:f9:21:b3:86:5e:f5:2d:84:2d:
83:6a:1e:97:23:e4:a7:7f:ca:54:35:02:8c:fe:ab:
22:e4:ee:6a:46:5e:f9:07:bc:71:c4:b0:ab:60:3c:
19:63:9d:ec:6c:7f:40:0f:a0:62:36:45:21:35:c4:
b0:94:69:21:32:e5:88:5c:58:3c:b9:f6:72:b6:7d:
2c:a0:e0:0a:f6:cb:55:7d:57:d4:e9:84:1a:66:27:
9e:3c:3a:b9:f4:a7:8c:fe:49:6e:bd:10:90:f2:0d:
b7:14:e4:ce:e4:cf:33:80:59:df:3e:db:41:53:46:
7e:66:df:fe:62:0a:e9:bb:31:bf:e6:3b:d6:83:05:
9f:0e:82:c2:a9:6e:6b:20:57:bf:4e:29:b1:ee:97:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F0:F2:FE:39:AF:14:5D:FD:D5:DE:6C:D9:64:83:F0:DA:58:48:53
X509v3 Authority Key Identifier:
keyid:94:89:56:C1:C6:76:9F:42:D6:04:03:DE:13:19:BF:46:34:54:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlWwcZ2n0LWBAPeExm_RjRUoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/dfDy_jmvFF391d5s2WSD8NpYSFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/lIlWwcZ2n0LWBAPeExm_RjRUoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:60c::/48
Signature Algorithm: sha256WithRSAEncryption
83:e9:6a:4c:0a:86:20:d1:5b:96:28:7b:64:a7:ca:04:5c:0a:
03:80:c5:05:71:cf:05:38:d8:3e:af:f4:48:40:4a:f7:05:bc:
fa:8a:ab:6c:1d:53:79:9a:2e:10:28:c0:6b:8c:78:51:41:87:
59:14:e3:84:29:4d:8a:6a:ee:18:e5:47:77:f1:7a:11:fa:a4:
97:45:b7:96:37:25:b2:f7:8d:a9:32:97:dd:6f:5e:c5:16:69:
b2:63:6f:7a:a6:2a:43:73:7d:8f:ae:be:a0:74:2d:4f:9b:14:
73:88:86:fc:f9:ff:d4:2e:9c:58:0c:e0:28:73:31:62:45:0e:
22:fc:1b:70:05:82:b9:5f:ed:30:77:32:bd:fb:ac:60:43:04:
b9:eb:0f:8c:35:e0:b4:e0:22:a3:f3:e6:87:73:07:5a:51:f1:
07:1c:9a:ae:09:19:26:fa:35:e4:5b:a1:b0:e9:3e:d9:43:6e:
77:a8:5e:01:93:69:ad:9d:d2:0b:94:66:b3:51:2e:d5:9a:2c:
2e:c5:59:10:78:98:75:8e:ea:06:e0:a0:b3:5a:f4:1a:e7:b8:
84:14:38:8e:d8:d1:0a:15:e4:1e:f5:bb:63:d7:6d:f0:50:85:
5e:a8:e5:54:e4:08:23:5b:8d:c5:85:86:cc:c9:94:67:82:5a:
5c:ab:24:ef
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY43Ls/05oM4ZepsEGyQS26QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ODk1NmMxYzY3NjlmNDJkNjA0MDNkZTEzMTliZjQ2MzQ1
NGEwZDYwHhcNMjQwMzEzMDkzOTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWYwZjJmZTM5YWYxNDVkZmRkNWRlNmNkOTY0ODNmMGRhNTg0ODUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP3wC+k81SY/42o5+98OdBP7ne3C
RpkU/djdgNhOyenT8mhqkYqRFhtrP0QAJFC2Izei/ZAEdxlTh16Wn5bN1UUehDp5
qcWEYjIwt7CcjbN29MDOAEIzBTmKOayOvlUAaKLO0o+P1taYKOIalaj5IbOGXvUt
hC2Dah6XI+Snf8pUNQKM/qsi5O5qRl75B7xxxLCrYDwZY53sbH9AD6BiNkUhNcSw
lGkhMuWIXFg8ufZytn0soOAK9stVfVfU6YQaZieePDq59KeM/kluvRCQ8g23FOTO
5M8zgFnfPttBU0Z+Zt/+YgrpuzG/5jvWgwWfDoLCqW5rIFe/Timx7pcTTwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHXw8v45rxRd/dXebNlkg/DaWEhTMB8GA1UdIwQY
MBaAFJSJVsHGdp9C1gQD3hMZv0Y0VKDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbElsV3djWjJuMExXQkFQZUV4bV9SalJVb05ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84YTM4NjktMzdhMi00OTYwLTg0MTUt
NDk3MWU4YTBjOTAwLzEvZGZEeV9qbXZGRjM5MWQ1czJXU0Q4TnBZU0ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84YTM4NjktMzdhMi00OTYwLTg0MTUtNDk3MWU4YTBjOTAw
LzEvbElsV3djWjJuMExXQkFQZUV4bV9SalJVb05ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAYM
MA0GCSqGSIb3DQEBCwUAA4IBAQCD6WpMCoYg0VuWKHtkp8oEXAoDgMUFcc8FONg+
r/RIQEr3Bbz6iqtsHVN5mi4QKMBrjHhRQYdZFOOEKU2Kau4Y5Ud38XoR+qSXRbeW
NyWy942pMpfdb17FFmmyY296pipDc32Prr6gdC1PmxRziIb8+f/ULpxYDOAoczFi
RQ4i/BtwBYK5X+0wdzK9+6xgQwS56w+MNeC04CKj8+aHcwdaUfEHHJquCRkm+jXk
W6Gw6T7ZQ253qF4Bk2mtndILlGazUS7VmiwuxVkQeJh1juoG4KCzWvQa57iEFDiO
2NEKFeQe9btj123wUIVeqOVU5AgjW43FhYbMyZRnglpcqyTv
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:15 2024 by rpki-client on console-fra.rpki-client.org