Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/lMXx7irzeTd5K9LEPDzmJNfQ6dA.roa
File: lMXx7irzeTd5K9LEPDzmJNfQ6dA.roa (raw, json)
Hash identifier: C9Dwy1MnpYaUQzjTE02Ra/Svd2g+OXOf8RnUEh5WgPI=
Subject key identifier: 94:C5:F1:EE:2A:F3:79:37:79:2B:D2:C4:3C:3C:E6:24:D7:D0:E9:D0
Certificate issuer: /CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Certificate serial: 018CC801B120A90B0DC5335E8D6DE5867E98
Authority key identifier: 1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/lMXx7irzeTd5K9LEPDzmJNfQ6dA.roa
Signing time: Tue 02 Jan 2024 02:30:03 +0000
ROA not before: Tue 02 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206202
IP address blocks: 2a01:9e00:ac00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:b1:20:a9:0b:0d:c5:33:5e:8d:6d:e5:86:7e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Validity
Not Before: Jan 2 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94c5f1ee2af37937792bd2c43c3ce624d7d0e9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b1:1e:c7:20:7c:cf:c0:09:b4:b0:a3:2c:65:
4d:4d:b0:9b:f5:d0:37:7b:89:3b:27:c3:55:8c:ba:
32:cc:3e:45:3b:d6:f5:92:b1:67:9c:6a:41:14:2f:
e0:ef:60:a8:b5:4b:36:87:22:d1:82:57:23:ec:9b:
36:db:45:41:d3:29:9f:3e:29:cd:3a:4d:14:ab:43:
63:9f:88:73:2f:af:de:f0:ef:a1:72:14:1d:97:e6:
b3:9d:c6:89:af:5f:72:bd:15:8d:42:5e:08:bd:77:
61:39:df:bf:db:57:9c:9a:f2:ac:d0:74:02:7b:dc:
e7:d6:1b:a9:2f:b3:2a:30:2f:28:5c:64:a8:77:27:
a9:b2:24:09:78:5d:73:e7:5b:00:76:a0:af:47:90:
cb:35:97:44:0e:43:4a:6c:b9:31:1e:9d:49:46:cc:
1c:dd:77:6e:35:40:a8:b2:fe:3a:53:fa:ed:da:b0:
2d:dc:2d:9c:60:fd:0a:54:1b:41:cf:b0:20:38:c1:
d0:60:71:00:ed:24:a5:7e:e7:19:85:94:53:04:94:
28:e5:ff:c2:dc:d9:f3:0b:25:53:be:df:3d:91:6d:
fe:8f:f1:f0:8b:8c:c0:93:e3:71:42:ac:2c:ad:9b:
f8:fe:7c:d9:9d:30:a6:3d:4b:5a:dc:6c:96:6b:1e:
e0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C5:F1:EE:2A:F3:79:37:79:2B:D2:C4:3C:3C:E6:24:D7:D0:E9:D0
X509v3 Authority Key Identifier:
keyid:1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/lMXx7irzeTd5K9LEPDzmJNfQ6dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:9e00:ac00::/40
Signature Algorithm: sha256WithRSAEncryption
99:a8:ea:b4:bd:05:8d:58:fe:3c:9c:32:17:1f:20:51:b6:3c:
76:29:86:f8:06:e1:45:4e:3f:c2:25:32:72:b1:7e:92:75:39:
e8:80:84:14:58:f0:1e:29:7b:4a:3d:f5:2d:fd:a5:fc:8a:19:
34:33:66:0d:90:7b:18:b4:ad:dd:31:24:46:94:55:79:55:5e:
db:05:5b:72:e0:42:ab:ca:7f:3f:65:26:08:78:e3:77:b0:fe:
a6:5a:e6:6f:c7:b4:75:a7:b8:bc:a8:64:c3:fb:89:81:9b:87:
c7:bb:af:5a:15:f6:ee:64:10:e6:60:eb:61:61:8f:32:f2:66:
6c:a5:f6:fa:c4:63:26:92:0b:80:6b:e8:b2:36:12:64:df:19:
e9:d8:86:81:ad:41:f3:12:8a:ef:27:ed:f8:b5:8d:e7:02:b3:
2f:a6:48:4c:69:15:71:50:2a:e9:45:cf:99:8b:a1:f3:2c:1f:
a0:23:38:4c:6e:9f:13:bb:5a:7f:f8:f3:6e:c0:36:fa:69:d4:
0e:6a:8c:2c:b0:5d:39:25:cf:28:73:66:e8:c6:34:96:76:ac:
4f:d8:68:7d:f7:6a:6c:e7:77:b1:0d:51:a4:32:03:5f:60:0f:
55:b6:ac:a4:63:b3:0e:7b:4f:13:0c:40:a1:dd:f6:7f:d7:ae:
f6:57:2c:78
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzIAbEgqQsNxTNejW3lhn6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZTAyZGJlZTYyYzk4ZjAxZjIwZjQ3NzBkMTZhNDdmNzlh
YmUzMmMwHhcNMjQwMTAyMDIzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGM1ZjFlZTJhZjM3OTM3NzkyYmQyYzQzYzNjZTYyNGQ3ZDBlOWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLEexyB8z8AJtLCjLGVNTbCb9dA3
e4k7J8NVjLoyzD5FO9b1krFnnGpBFC/g72CotUs2hyLRglcj7Js220VB0ymfPinN
Ok0Uq0Njn4hzL6/e8O+hchQdl+azncaJr19yvRWNQl4IvXdhOd+/21ecmvKs0HQC
e9zn1hupL7MqMC8oXGSodyepsiQJeF1z51sAdqCvR5DLNZdEDkNKbLkxHp1JRswc
3XduNUCosv46U/rt2rAt3C2cYP0KVBtBz7AgOMHQYHEA7SSlfucZhZRTBJQo5f/C
3NnzCyVTvt89kW3+j/Hwi4zAk+NxQqwsrZv4/nzZnTCmPUta3GyWax7gKQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJTF8e4q83k3eSvSxDw85iTX0OnQMB8GA1UdIwQY
MBaAFB/gLb7mLJjwHyD0dw0WpH95q+MsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC1BdHZ1WXNtUEFmSVBSM0RSYWtmM21yNHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9hMTJhMzAtZDYwZi00MDMyLTg4NjMt
MjEyNTNlYTlmM2E0LzEvbE1YeDdpcnplVGQ1SzlMRVBEem1KTmZRNmRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9hMTJhMzAtZDYwZi00MDMyLTg4NjMtMjEyNTNlYTlmM2E0
LzEvSC1BdHZ1WXNtUEFmSVBSM0RSYWtmM21yNHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgGeAKww
DQYJKoZIhvcNAQELBQADggEBAJmo6rS9BY1Y/jycMhcfIFG2PHYphvgG4UVOP8Il
MnKxfpJ1OeiAhBRY8B4pe0o99S39pfyKGTQzZg2Qexi0rd0xJEaUVXlVXtsFW3Lg
QqvKfz9lJgh443ew/qZa5m/HtHWnuLyoZMP7iYGbh8e7r1oV9u5kEOZg62FhjzLy
Zmyl9vrEYyaSC4Br6LI2EmTfGenYhoGtQfMSiu8n7fi1jecCsy+mSExpFXFQKulF
z5mLofMsH6AjOExunxO7Wn/4827ANvpp1A5qjCywXTklzyhzZujGNJZ2rE/YaH33
amznd7ENUaQyA19gD1W2rKRjsw57TxMMQKHd9n/XrvZXLHg=
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:28 2024 by rpki-client on console-fra.rpki-client.org