Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/ssaz3VymfDw4ZNyPrJkJ14yKcMg.roa
File: ssaz3VymfDw4ZNyPrJkJ14yKcMg.roa (raw, json)
Hash identifier: h5Jot6dU0NZxZ3TkiGd6dnhDx14TglzhrrApORoJXxI=
Subject key identifier: B2:C6:B3:DD:5C:A6:7C:3C:38:64:DC:8F:AC:99:09:D7:8C:8A:70:C8
Certificate issuer: /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial: 018CC4254E983F1A2F9BB6AE9389F2A7C0D7
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/ssaz3VymfDw4ZNyPrJkJ14yKcMg.roa
Signing time: Mon 01 Jan 2024 08:30:28 +0000
ROA not before: Mon 01 Jan 2024 08:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 141.33.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 22:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4e:98:3f:1a:2f:9b:b6:ae:93:89:f2:a7:c0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2c6b3dd5ca67c3c3864dc8fac9909d78c8a70c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:f0:a5:10:c9:78:2c:65:85:a5:f6:4d:c5:
11:f9:14:cc:bf:68:08:02:6b:62:be:a2:42:44:7e:
a5:c5:0f:fe:ac:ff:a2:61:80:c0:24:ff:59:8d:4f:
cd:d3:b0:33:02:00:84:26:79:03:4a:48:66:3a:87:
1a:34:a3:1d:f7:95:d9:ba:e6:1e:4f:69:45:53:25:
cd:49:99:61:70:70:50:14:fe:ee:66:6a:7a:75:74:
b7:40:e5:4b:c7:da:4b:5a:85:44:7e:b5:75:fe:77:
a3:66:92:89:c5:a7:7a:d0:e5:cb:02:6c:5d:12:4f:
2e:9a:08:9b:b2:40:c6:d9:e6:c9:03:d6:43:90:c6:
09:5d:f3:92:2a:aa:67:5b:53:11:cc:98:ff:52:e1:
8f:c5:93:78:48:06:21:e8:ca:8f:03:1d:b5:07:04:
af:75:05:5a:70:2f:66:e1:13:c5:22:fc:19:55:38:
59:b3:41:ab:74:a4:ac:3a:f2:3c:6f:ff:4b:c9:5d:
e4:70:55:58:b9:67:12:2a:99:93:6d:25:1f:59:8d:
42:c4:90:cb:1b:02:ec:96:f6:b0:cb:2a:2d:13:a4:
91:9c:7e:01:71:a3:fc:33:7a:86:70:31:dc:ff:81:
85:8a:55:45:dd:c2:da:d3:f1:58:f8:96:62:32:92:
c1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C6:B3:DD:5C:A6:7C:3C:38:64:DC:8F:AC:99:09:D7:8C:8A:70:C8
X509v3 Authority Key Identifier:
keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/ssaz3VymfDw4ZNyPrJkJ14yKcMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.33.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:45:b8:fb:37:13:e8:eb:7d:1f:92:04:e6:da:24:11:ca:18:
cc:3a:a4:c1:ef:66:f7:d5:a1:c0:3c:5b:6a:43:d0:33:d5:e0:
54:5e:5c:c5:87:7e:7c:f8:4d:3e:f3:08:3f:0d:d3:c7:b7:9d:
f9:82:13:cc:0a:c1:e8:98:2c:50:23:29:2b:dd:6c:44:86:19:
e1:ed:c3:b5:72:a3:2d:16:1b:91:74:5b:52:f4:81:22:2f:62:
2c:04:72:a0:47:f0:a8:0d:58:02:4a:76:a4:e7:ae:ef:4f:5b:
77:40:1f:fb:f2:15:6e:38:4f:02:f4:86:05:0e:8f:28:dc:09:
73:f0:ce:49:92:41:eb:62:00:5b:45:7a:0c:d0:48:94:1c:8b:
3e:4c:b0:8f:4f:01:41:0a:20:9d:27:3c:d9:58:ff:82:9d:aa:
df:0c:21:b9:ad:f1:19:ac:6c:e7:84:99:3f:11:0c:9d:2d:f9:
99:5c:8d:45:4a:d0:70:09:19:8e:2e:f2:46:5b:56:e5:45:ce:
e1:76:af:d7:87:5d:f9:28:c4:41:f3:b4:e1:ce:30:54:0f:1f:
15:f8:3d:a1:ce:6d:ed:74:fa:90:59:a0:c9:fb:d1:0e:d4:82:
23:7e:1c:99:8a:86:98:c2:d3:f0:d1:91:80:0b:01:34:eb:35:
7e:30:62:89
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYzEJU6YPxovm7auk4nyp8DXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ODFlNTc3N2NjZTk5MGMwYjJiMGY0YzI5Y2M4ZDJjZjlh
ZmU4M2IwHhcNMjQwMTAxMDgzMDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmM2YjNkZDVjYTY3YzNjMzg2NGRjOGZhYzk5MDlkNzhjOGE3MGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/zwpRDJeCxlhaX2TcUR+RTMv2gI
AmtivqJCRH6lxQ/+rP+iYYDAJP9ZjU/N07AzAgCEJnkDSkhmOocaNKMd95XZuuYe
T2lFUyXNSZlhcHBQFP7uZmp6dXS3QOVLx9pLWoVEfrV1/nejZpKJxad60OXLAmxd
Ek8umgibskDG2ebJA9ZDkMYJXfOSKqpnW1MRzJj/UuGPxZN4SAYh6MqPAx21BwSv
dQVacC9m4RPFIvwZVThZs0GrdKSsOvI8b/9LyV3kcFVYuWcSKpmTbSUfWY1CxJDL
GwLslvawyyotE6SRnH4BcaP8M3qGcDHc/4GFilVF3cLa0/FY+JZiMpLBTQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFLLGs91cpnw8OGTcj6yZCdeMinDIMB8GA1UdIwQY
MBaAFNiB5Xd8zpkMCysPTCnMjSz5r+g7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMklIbGQzek9tUXdMS3c5TUtjeU5MUG12NkRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zYzk1ZjMtZGMzZC00OGViLWI2ZDct
ZDgzNWRlMDhiY2Y2LzEvc3NhejNWeW1mRHc0Wk55UHJKa0oxNHlLY01nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8zYzk1ZjMtZGMzZC00OGViLWI2ZDctZDgzNWRlMDhiY2Y2
LzEvMklIbGQzek9tUXdMS3c5TUtjeU5MUG12NkRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjSEwDQYJ
KoZIhvcNAQELBQADggEBAF1FuPs3E+jrfR+SBObaJBHKGMw6pMHvZvfVocA8W2pD
0DPV4FReXMWHfnz4TT7zCD8N08e3nfmCE8wKweiYLFAjKSvdbESGGeHtw7Vyoy0W
G5F0W1L0gSIvYiwEcqBH8KgNWAJKdqTnru9PW3dAH/vyFW44TwL0hgUOjyjcCXPw
zkmSQetiAFtFegzQSJQciz5MsI9PAUEKIJ0nPNlY/4Kdqt8MIbmt8RmsbOeEmT8R
DJ0t+ZlcjUVK0HAJGY4u8kZbVuVFzuF2r9eHXfkoxEHztOHOMFQPHxX4PaHObe10
+pBZoMn70Q7UgiN+HJmKhpjC0/DRkYALATTrNX4wYok=
-----END CERTIFICATE-----
Generated at Fri May 17 07:09:38 2024 by rpki-client on console-ams.rpki-client.org