Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/IVEP9832zJL2Z3DJNj3subTOSFc.roa
File: IVEP9832zJL2Z3DJNj3subTOSFc.roa (raw, json)
Hash identifier: 9eys7igiHVTEatvsnAmUTIec8oc1J0rYaF1ihrIXV+Q=
Subject key identifier: 21:51:0F:F7:CD:F6:CC:92:F6:67:70:C9:36:3D:EC:B9:B4:CE:48:57
Certificate issuer: /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial: 018E14E4C75B9E3499D4C92FFD1E53868883
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/IVEP9832zJL2Z3DJNj3subTOSFc.roa
Signing time: Wed 06 Mar 2024 17:52:01 +0000
ROA not before: Wed 06 Mar 2024 17:52:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2a13:a380:300::/48 maxlen: 48
2a13:a380:301::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:e4:c7:5b:9e:34:99:d4:c9:2f:fd:1e:53:86:88:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Validity
Not Before: Mar 6 17:52:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21510ff7cdf6cc92f66770c9363decb9b4ce4857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:48:2a:5d:75:72:66:91:dd:73:eb:d3:48:
61:38:4e:71:93:65:08:c7:93:7f:76:f7:db:68:44:
6e:af:bc:5c:e4:2f:c8:1b:55:72:51:47:db:18:1c:
18:af:b3:e8:70:b4:ca:41:2e:6b:fc:2b:29:00:3e:
e2:21:00:55:70:d6:32:e5:ff:14:2c:f6:65:ff:ff:
0b:a0:d4:76:bd:83:26:9e:0d:9f:98:36:82:e5:89:
5f:14:1f:d1:07:d8:ef:84:44:09:8a:48:4a:f0:7d:
63:af:61:ac:5f:49:9f:18:38:2a:34:e5:4d:97:d1:
29:b0:03:ba:d0:11:9c:ad:da:0c:46:3c:9a:1c:72:
be:97:86:94:2c:a2:ed:f4:e3:fd:28:d0:58:46:e8:
44:8d:00:04:d7:6d:a0:68:70:25:ae:af:78:14:5d:
91:7c:24:4b:af:6e:9e:f0:13:b7:b9:23:e2:c2:04:
5e:cf:e4:f9:39:d7:07:42:33:5b:7e:a1:82:d6:dc:
3f:89:d8:fe:a0:ba:b0:08:58:28:a4:9a:b6:d3:ba:
31:17:e9:ea:01:b9:a4:c7:1b:47:d6:0d:87:28:cd:
ab:74:ca:81:3f:4d:19:1e:c1:46:2b:f8:bb:0a:a9:
7d:39:bc:fc:3c:29:aa:59:f4:3a:7a:12:5a:ba:3e:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:51:0F:F7:CD:F6:CC:92:F6:67:70:C9:36:3D:EC:B9:B4:CE:48:57
X509v3 Authority Key Identifier:
keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/IVEP9832zJL2Z3DJNj3subTOSFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a380:300::/47
Signature Algorithm: sha256WithRSAEncryption
3f:51:0d:ed:3c:15:c8:c6:ed:6b:9d:fc:2d:86:70:c0:86:92:
b6:bf:83:37:4a:f4:9d:4f:02:ce:6a:c9:7d:ef:4e:d5:c5:16:
32:36:b6:00:6d:29:c7:45:1b:f2:18:18:dd:f2:df:d5:78:43:
c2:1a:3c:1f:48:1b:86:13:3a:31:bc:ec:34:77:56:6d:fd:92:
39:3c:40:cd:8b:41:90:ad:61:0b:ff:b1:cf:b4:0e:1a:73:75:
d4:c8:f0:db:ab:82:46:a2:d2:b2:6b:a5:3a:86:58:53:e4:b6:
2b:75:20:27:18:96:ce:0e:f1:1c:59:d7:b1:e0:b4:59:ba:1b:
f9:aa:8d:f3:ee:0c:d7:b0:77:dc:da:ba:5e:8c:7b:39:a7:6c:
45:fb:e9:d2:71:db:d3:e3:7b:c0:ff:40:35:5e:8e:5f:cb:fb:
45:88:5f:48:ec:5c:2e:bb:6d:58:3c:6e:b8:79:2e:c2:8a:13:
61:25:7d:dd:52:7c:40:31:c5:93:ad:12:d6:c3:80:45:19:1a:
3f:29:f5:61:9b:64:29:16:1e:f4:4d:ec:17:e7:77:b9:47:28:
2e:e3:e2:b6:1a:78:1b:1a:95:d7:5a:78:04:fc:79:d9:f2:0f:
20:da:d3:7e:f9:de:a5:a8:05:8c:76:14:5b:9c:ac:f2:d4:8b:
dd:55:4c:fe
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY4U5MdbnjSZ1Mkv/R5ThoiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjBiNzc3ZjUzNzdiYjFjNTA2NTM4ODRiMDNlMjdkY2Rl
ZTgyOGUwHhcNMjQwMzA2MTc1MjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTUxMGZmN2NkZjZjYzkyZjY2NzcwYzkzNjNkZWNiOWI0Y2U0ODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6VIKl11cmaR3XPr00hhOE5xk2UI
x5N/dvfbaERur7xc5C/IG1VyUUfbGBwYr7PocLTKQS5r/CspAD7iIQBVcNYy5f8U
LPZl//8LoNR2vYMmng2fmDaC5YlfFB/RB9jvhEQJikhK8H1jr2GsX0mfGDgqNOVN
l9EpsAO60BGcrdoMRjyaHHK+l4aULKLt9OP9KNBYRuhEjQAE122gaHAlrq94FF2R
fCRLr26e8BO3uSPiwgRez+T5OdcHQjNbfqGC1tw/idj+oLqwCFgopJq207oxF+nq
AbmkxxtH1g2HKM2rdMqBP00ZHsFGK/i7Cql9Obz8PCmqWfQ6ehJauj6vhQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCFRD/fN9syS9mdwyTY97Lm0zkhXMB8GA1UdIwQY
MBaAFK6wt3f1N3uxxQZTiEsD4n3N7oKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMt
OTI2YzRhMzI2ZTA4LzEvSVZFUDk4MzJ6SkwyWjNESk5qM3N1YlRPU0ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMtOTI2YzRhMzI2ZTA4
LzEvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhOjgAMA
MA0GCSqGSIb3DQEBCwUAA4IBAQA/UQ3tPBXIxu1rnfwthnDAhpK2v4M3SvSdTwLO
asl9707VxRYyNrYAbSnHRRvyGBjd8t/VeEPCGjwfSBuGEzoxvOw0d1Zt/ZI5PEDN
i0GQrWEL/7HPtA4ac3XUyPDbq4JGotKya6U6hlhT5LYrdSAnGJbODvEcWdex4LRZ
uhv5qo3z7gzXsHfc2rpejHs5p2xF++nScdvT43vA/0A1Xo5fy/tFiF9I7Fwuu21Y
PG64eS7CihNhJX3dUnxAMcWTrRLWw4BFGRo/KfVhm2QpFh70TewX53e5Rygu4+K2
GngbGpXXWngE/HnZ8g8g2tN++d6lqAWMdhRbnKzy1IvdVUz+
-----END CERTIFICATE-----
Generated at Thu May 2 18:34:37 2024 by rpki-client on console-fra.rpki-client.org