Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/N_y9KE0k9vvf1awc0h-_t3L-mmE.roa
File: N_y9KE0k9vvf1awc0h-_t3L-mmE.roa (raw, json)
Hash identifier: 49/P8SEfxvQehHVohlgOX12DKu9FDVQLJccZ2GrqsW8=
Subject key identifier: 37:FC:BD:28:4D:24:F6:FB:DF:D5:AC:1C:D2:1F:BF:B7:72:FE:9A:61
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01934E0CED1FA3AA2AB94832BFF5776D3838
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/N_y9KE0k9vvf1awc0h-_t3L-mmE.roa
Signing time: Thu 21 Nov 2024 09:28:10 +0000
ROA not before: Thu 21 Nov 2024 09:28:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52048
IP address blocks: 2a06:c3c0::/48 maxlen: 48
2a09:d000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:0c:ed:1f:a3:aa:2a:b9:48:32:bf:f5:77:6d:38:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Nov 21 09:28:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37fcbd284d24f6fbdfd5ac1cd21fbfb772fe9a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:56:a5:5c:af:ca:ed:68:11:7f:27:2a:63:
e1:61:fe:90:96:c1:d3:17:39:e4:45:a6:a2:ab:a5:
bb:0a:74:c4:cd:ec:ae:bd:c7:23:56:9e:b1:61:0d:
54:23:5c:bc:4c:27:8f:e4:28:3a:2a:87:de:95:f6:
3e:bb:3b:5e:62:87:07:a1:ad:2d:95:22:14:d1:de:
42:6f:e2:b8:b4:45:20:4f:44:b5:cd:29:62:4a:67:
c6:8e:41:3f:f4:b2:26:84:13:c3:19:dd:9b:43:bb:
41:eb:e5:c2:91:55:9c:af:7a:b6:35:f8:d2:82:5c:
c2:80:4c:e4:29:c6:dd:13:34:f3:32:67:62:42:48:
30:c0:6d:3e:b2:f3:42:b0:97:c8:79:ab:27:fa:61:
8f:4b:ff:ba:29:5a:af:3f:92:52:14:43:c4:6e:f5:
0d:4d:35:f3:69:1c:03:f2:85:70:8e:fc:a6:5e:a5:
30:f1:d9:d4:47:f0:83:6e:05:ef:ac:a7:7b:f0:1a:
80:29:90:cf:be:a4:c9:98:90:96:29:0b:a1:62:19:
d0:21:43:12:da:6d:78:67:b9:36:4e:e3:1d:9d:d7:
56:68:76:67:80:58:b5:c6:c5:4b:30:98:63:e9:df:
24:0f:1f:5e:22:d5:fb:ea:47:97:a2:df:11:7f:4c:
94:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FC:BD:28:4D:24:F6:FB:DF:D5:AC:1C:D2:1F:BF:B7:72:FE:9A:61
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/N_y9KE0k9vvf1awc0h-_t3L-mmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:c3c0::/48
2a09:d000::/48
Signature Algorithm: sha256WithRSAEncryption
5c:f4:66:a2:59:ac:d8:8f:91:cc:42:5e:76:b4:54:b2:a3:40:
50:a4:dd:6b:d4:ec:fc:be:f8:09:d8:c4:26:db:5e:30:41:74:
d9:c9:e8:7e:48:af:d4:02:16:3d:95:51:3b:7a:20:fc:23:97:
3e:e9:f5:17:b2:67:38:5a:db:d3:5f:f5:04:9d:ac:16:b1:81:
f1:ac:d1:ce:9f:5b:be:7a:75:9d:ef:e6:36:2a:59:3b:d0:9b:
b0:ae:82:7d:85:fb:8d:d3:f1:bd:e8:2c:63:55:43:04:6d:09:
06:86:21:16:3d:d6:24:dd:09:b0:f2:94:5e:55:a7:36:b1:d2:
b1:ad:bd:ef:01:20:0d:e9:76:a1:4b:a7:07:d1:e0:2a:04:23:
7d:14:77:d6:e5:71:99:fb:02:69:1e:58:42:70:f2:47:ee:69:
48:b5:ee:d0:80:94:c4:27:62:14:3e:5b:33:4c:e0:0a:4c:f4:
ab:98:4a:16:d3:d8:d8:4c:6e:15:61:09:05:84:b5:84:25:a1:
fb:fe:61:9e:23:b7:4e:a6:1a:cf:14:95:2b:d6:74:32:87:07:
e5:0c:e9:e4:c1:b9:53:8a:c8:85:e9:9e:d5:fe:e0:3d:38:1a:
0c:96:02:c9:bc:c0:02:68:37:81:2a:4f:05:a2:77:41:4b:90:
43:da:3d:49
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZNODO0fo6oquUgyv/V3bTg4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjQxMTIxMDkyODEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2ZjYmQyODRkMjRmNmZiZGZkNWFjMWNkMjFmYmZiNzcyZmU5YTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpVWpVyvyu1oEX8nKmPhYf6QlsHT
FznkRaaiq6W7CnTEzeyuvccjVp6xYQ1UI1y8TCeP5Cg6KofelfY+uzteYocHoa0t
lSIU0d5Cb+K4tEUgT0S1zSliSmfGjkE/9LImhBPDGd2bQ7tB6+XCkVWcr3q2NfjS
glzCgEzkKcbdEzTzMmdiQkgwwG0+svNCsJfIeasn+mGPS/+6KVqvP5JSFEPEbvUN
TTXzaRwD8oVwjvymXqUw8dnUR/CDbgXvrKd78BqAKZDPvqTJmJCWKQuhYhnQIUMS
2m14Z7k2TuMdnddWaHZngFi1xsVLMJhj6d8kDx9eItX76keXot8Rf0yUlQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDf8vShNJPb739WsHNIfv7dy/pphMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvTl95OUtFMGs5dnZmMWF3YzBoLV90M0wtbW1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgbDwAAA
AwcAKgnQAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQBc9GaiWazYj5HMQl52tFSyo0BQ
pN1r1Oz8vvgJ2MQm214wQXTZyeh+SK/UAhY9lVE7eiD8I5c+6fUXsmc4WtvTX/UE
nawWsYHxrNHOn1u+enWd7+Y2Klk70JuwroJ9hfuN0/G96CxjVUMEbQkGhiEWPdYk
3Qmw8pReVac2sdKxrb3vASAN6XahS6cH0eAqBCN9FHfW5XGZ+wJpHlhCcPJH7mlI
te7QgJTEJ2IUPlszTOAKTPSrmEoW09jYTG4VYQkFhLWEJaH7/mGeI7dOphrPFJUr
1nQyhwflDOnkwblTisiF6Z7V/uA9OBoMlgLJvMACaDeBKk8FondBS5BD2j1J
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:26:46 2024 by rpki-client on console-ams.rpki-client.org