Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/m4X1xjusBhpUoisZbDeCnsW4kYg.roa
File: m4X1xjusBhpUoisZbDeCnsW4kYg.roa (raw, json)
Hash identifier: Ol0WUf4iLfmCEuzbgrJoA0fwI8Mb11+RLTTdwclNToQ=
Subject key identifier: 9B:85:F5:C6:3B:AC:06:1A:54:A2:2B:19:6C:37:82:9E:C5:B8:91:88
Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial: 0190D68D8BC5EAC527FD107DDEE3D86E13D3
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/m4X1xjusBhpUoisZbDeCnsW4kYg.roa
Signing time: Sun 21 Jul 2024 18:28:38 +0000
ROA not before: Sun 21 Jul 2024 18:28:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212568
IP address blocks: 2a13:ccc6::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d6:8d:8b:c5:ea:c5:27:fd:10:7d:de:e3:d8:6e:13:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Validity
Not Before: Jul 21 18:28:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b85f5c63bac061a54a22b196c37829ec5b89188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:c4:15:54:bc:91:0c:7a:e8:69:a6:57:05:
e8:c9:e2:8a:82:4b:d0:82:21:8b:d3:92:5b:56:80:
3e:a1:7d:af:4a:d3:17:92:7a:31:f0:bd:29:57:5f:
49:4a:8f:a1:28:ca:8f:0c:ee:41:41:a1:98:c9:b1:
55:30:24:cd:80:d6:12:91:7e:39:b7:1a:4f:25:c3:
67:4e:eb:4b:af:dc:db:dc:42:cf:77:3a:fe:7e:9d:
cc:d6:ef:6a:a5:8a:f2:43:d5:29:30:82:9e:a5:40:
b8:3a:3e:23:d8:d5:67:ba:3e:b9:9f:be:7b:88:7a:
a8:c9:7c:6a:43:41:90:88:c0:5e:40:60:b0:f2:ab:
3a:1c:7c:ad:32:55:b1:47:22:7a:91:6f:0a:2b:06:
75:bd:6d:db:c3:85:52:00:b1:3a:54:f3:3e:02:5b:
ff:36:f7:3e:c9:e9:aa:dc:b3:35:28:19:3e:24:7e:
be:5e:1b:49:e8:8d:6c:53:c5:14:d7:7f:da:44:de:
e1:8c:f0:ac:7c:4b:03:0b:41:0f:69:e1:ac:3d:4c:
f5:ff:b2:8d:03:61:13:2c:18:be:8b:b7:7c:e1:eb:
eb:c0:5c:0d:23:9e:10:30:89:66:af:75:43:ee:66:
9f:eb:3e:c9:04:76:9c:06:21:28:bf:b5:37:fa:56:
cd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:85:F5:C6:3B:AC:06:1A:54:A2:2B:19:6C:37:82:9E:C5:B8:91:88
X509v3 Authority Key Identifier:
keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/m4X1xjusBhpUoisZbDeCnsW4kYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ccc6::/44
Signature Algorithm: sha256WithRSAEncryption
0f:bf:c2:39:e8:d5:c2:b0:44:63:30:31:48:2b:0a:bf:03:4b:
1c:84:4f:39:fa:1f:e3:6b:d6:e3:87:06:3e:be:1d:f1:a7:60:
ae:ff:ea:68:b5:d8:45:68:c3:da:70:eb:53:05:4d:cb:15:e9:
1e:c1:4f:dc:3c:d1:56:86:94:7a:a5:e9:97:c9:0d:d0:b5:e6:
f3:87:b1:23:3a:ee:d9:ac:73:1d:80:7c:08:1c:13:28:ef:3a:
35:f7:2d:30:8e:7b:76:b6:f3:3e:2a:da:72:e7:15:75:b7:25:
0a:ad:6d:a0:dc:c6:ee:8d:64:0b:30:31:a2:da:59:4f:dc:d3:
19:b3:90:db:4d:cd:0b:9b:9c:51:0e:15:dc:b3:ab:07:89:04:
28:24:f5:39:38:46:ee:de:79:57:22:66:d8:f2:de:df:51:25:
ab:65:d6:b1:1f:c3:16:82:67:89:9d:af:9c:44:3a:bd:88:dc:
ce:62:88:4f:cc:57:af:8d:47:e4:a7:88:91:ff:f4:6a:c8:da:
de:a2:a3:5b:bd:18:8b:3b:36:d0:b0:a4:d2:60:92:ed:7f:f2:
ee:f1:47:41:0c:10:88:8e:f7:02:b5:5c:6b:ab:de:59:78:4d:
62:b1:61:b8:2d:6f:7e:a3:99:30:d9:04:d6:c0:a5:68:29:07:
6c:a4:2c:d3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZDWjYvF6sUn/RB93uPYbhPTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWE3NDhiYTE0YTc2ZTVkOGE2ZWRhY2I1NDI2MDgyYTU2
ZjVlM2QwHhcNMjQwNzIxMTgyODM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Yjg1ZjVjNjNiYWMwNjFhNTRhMjJiMTk2YzM3ODI5ZWM1Yjg5MTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn77EFVS8kQx66GmmVwXoyeKKgkvQ
giGL05JbVoA+oX2vStMXknox8L0pV19JSo+hKMqPDO5BQaGYybFVMCTNgNYSkX45
txpPJcNnTutLr9zb3ELPdzr+fp3M1u9qpYryQ9UpMIKepUC4Oj4j2NVnuj65n757
iHqoyXxqQ0GQiMBeQGCw8qs6HHytMlWxRyJ6kW8KKwZ1vW3bw4VSALE6VPM+Alv/
Nvc+yemq3LM1KBk+JH6+XhtJ6I1sU8UU13/aRN7hjPCsfEsDC0EPaeGsPUz1/7KN
A2ETLBi+i7d84evrwFwNI54QMIlmr3VD7maf6z7JBHacBiEov7U3+lbNVQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJuF9cY7rAYaVKIrGWw3gp7FuJGIMB8GA1UdIwQY
MBaAFLqqdIuhSnbl2KbtrLVCYIKlb149MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgt
YzUxOTUxNjJlM2JlLzEvbTRYMXhqdXNCaHBVb2lzWmJEZUNuc1c0a1lnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgtYzUxOTUxNjJlM2Jl
LzEvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhPMxgAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAPv8I56NXCsERjMDFIKwq/A0schE85+h/ja9bj
hwY+vh3xp2Cu/+potdhFaMPacOtTBU3LFekewU/cPNFWhpR6pemXyQ3Qtebzh7Ej
Ou7ZrHMdgHwIHBMo7zo19y0wjnt2tvM+Ktpy5xV1tyUKrW2g3MbujWQLMDGi2llP
3NMZs5DbTc0Lm5xRDhXcs6sHiQQoJPU5OEbu3nlXImbY8t7fUSWrZdaxH8MWgmeJ
na+cRDq9iNzOYohPzFevjUfkp4iR//RqyNreoqNbvRiLOzbQsKTSYJLtf/Lu8UdB
DBCIjvcCtVxrq95ZeE1isWG4LW9+o5kw2QTWwKVoKQdspCzT
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:18:34 2024 by rpki-client on console-fra.rpki-client.org