Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/YIHHz30ItkklVM8LB36TIFYDY_g.roa
File: YIHHz30ItkklVM8LB36TIFYDY_g.roa (raw, json)
Hash identifier: sya4R2cJ2GYcBVKd3/v69J/jKr2a1W3LQasvtjygfHI=
Subject key identifier: 60:81:C7:CF:7D:08:B6:49:25:54:CF:0B:07:7E:93:20:56:03:63:F8
Certificate issuer: /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial: 018CC3490DDB482BBB159321395AF74D1CBA
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/YIHHz30ItkklVM8LB36TIFYDY_g.roa
Signing time: Mon 01 Jan 2024 04:29:53 +0000
ROA not before: Mon 01 Jan 2024 04:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46887
IP address blocks: 2a06:6540:2001::/48 maxlen: 48
2a06:6541:2001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:0d:db:48:2b:bb:15:93:21:39:5a:f7:4d:1c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Validity
Not Before: Jan 1 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6081c7cf7d08b6492554cf0b077e9320560363f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:b4:0c:9a:ee:2f:ac:6b:ea:ee:a0:b0:ea:
02:5f:72:95:49:fe:4f:f4:79:51:3b:70:c5:78:98:
d9:1c:25:fa:85:f4:2b:72:59:d9:fb:5e:e9:f1:f3:
f4:c2:86:1b:ee:25:b0:1b:ba:76:3c:16:6b:4d:f6:
fc:0d:4b:83:a7:ed:03:12:dd:cb:2a:a6:94:3d:ca:
f9:7e:2f:ae:77:76:be:e6:52:8e:23:48:92:d7:4e:
f1:20:49:1f:49:f3:a1:a7:b5:16:eb:c7:d6:c9:04:
db:8c:a2:ec:14:63:b0:bf:cd:ac:be:13:12:ac:69:
bb:57:f6:65:8c:b3:cc:d2:e8:04:b5:79:c1:4e:1a:
3d:0d:d0:bc:0a:69:58:15:75:cd:49:8c:70:71:54:
03:24:c5:f1:51:4f:31:6e:1c:62:50:cd:bc:9c:fb:
4a:f0:3f:b4:48:98:86:ca:22:91:91:1c:c9:a2:26:
b3:39:3c:64:6e:1d:2e:3d:30:d3:5a:68:de:cb:c3:
8e:4b:c3:56:86:dc:c2:85:be:6c:a4:80:b2:c8:50:
61:71:0a:ab:af:63:d6:53:86:90:40:b3:e6:50:88:
4c:b0:b4:e5:d0:9e:cf:e6:aa:5f:b2:ae:9e:ae:57:
e9:99:c3:aa:48:d8:28:e4:05:d4:1b:52:04:85:7b:
6d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:81:C7:CF:7D:08:B6:49:25:54:CF:0B:07:7E:93:20:56:03:63:F8
X509v3 Authority Key Identifier:
keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/YIHHz30ItkklVM8LB36TIFYDY_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:6540:2001::/48
2a06:6541:2001::/48
Signature Algorithm: sha256WithRSAEncryption
15:16:53:be:44:1d:cc:61:26:bf:71:95:e4:77:5a:c5:2c:24:
40:6e:5f:19:9e:a2:6b:d1:64:f2:ae:4f:d2:14:d0:14:57:1e:
75:c0:26:9d:cf:77:48:2b:47:0b:a3:69:f7:b3:6d:6f:c0:73:
04:97:d4:ee:f7:b6:89:c7:cc:be:3c:fa:68:cb:41:44:1f:5b:
52:4d:9f:e9:52:fe:e0:1e:3e:e5:32:d3:c5:92:5a:20:84:29:
b4:9d:85:8c:21:fd:19:e0:2e:e8:fc:bb:9d:56:42:39:2e:c3:
a9:b9:9b:9b:7b:99:bd:e4:ad:a9:49:7a:dd:78:4c:2b:7f:4e:
87:8b:21:8f:69:28:1c:01:21:10:b9:75:41:e8:27:31:ba:6f:
a1:85:2f:29:59:c4:f5:35:59:25:40:41:a8:2c:35:0e:05:88:
61:a9:0d:34:4c:8d:c0:43:29:22:39:2f:92:76:5a:eb:d2:dc:
8e:04:3a:66:e6:ac:98:bc:3d:8a:8c:4a:14:c9:3f:04:60:4a:
e8:03:d1:24:0b:c1:90:50:66:26:0a:a8:78:5e:5c:cf:09:fc:
93:ca:c5:dc:6d:0f:e8:52:4b:20:cc:ac:45:c0:fe:53:d2:7f:
23:bc:46:bc:01:38:06:b2:a4:9e:14:3d:9b:cf:d5:a2:db:4e:
d3:5d:bc:f9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzDSQ3bSCu7FZMhOVr3TRy6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzQ2NmNjODlmOWRiNGUzMWM1NDAwZDJhZTdhMmJmZmRi
MjI1NDcwHhcNMjQwMTAxMDQyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDgxYzdjZjdkMDhiNjQ5MjU1NGNmMGIwNzdlOTMyMDU2MDM2M2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArge0DJruL6xr6u6gsOoCX3KVSf5P
9HlRO3DFeJjZHCX6hfQrclnZ+17p8fP0woYb7iWwG7p2PBZrTfb8DUuDp+0DEt3L
KqaUPcr5fi+ud3a+5lKOI0iS107xIEkfSfOhp7UW68fWyQTbjKLsFGOwv82svhMS
rGm7V/ZljLPM0ugEtXnBTho9DdC8CmlYFXXNSYxwcVQDJMXxUU8xbhxiUM28nPtK
8D+0SJiGyiKRkRzJoiazOTxkbh0uPTDTWmjey8OOS8NWhtzChb5spICyyFBhcQqr
r2PWU4aQQLPmUIhMsLTl0J7P5qpfsq6erlfpmcOqSNgo5AXUG1IEhXtt4QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGCBx899CLZJJVTPCwd+kyBWA2P4MB8GA1UdIwQY
MBaAFFrEZsyJ+dtOMcVADSrnor/9siVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2Yt
OWFiZDFhYTY0YmUxLzEvWUlISHozMEl0a2tsVk04TEIzNlRJRllEWV9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2YtOWFiZDFhYTY0YmUx
LzEvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgZlQCAB
AwcAKgZlQSABMA0GCSqGSIb3DQEBCwUAA4IBAQAVFlO+RB3MYSa/cZXkd1rFLCRA
bl8ZnqJr0WTyrk/SFNAUVx51wCadz3dIK0cLo2n3s21vwHMEl9Tu97aJx8y+PPpo
y0FEH1tSTZ/pUv7gHj7lMtPFkloghCm0nYWMIf0Z4C7o/LudVkI5LsOpuZube5m9
5K2pSXrdeEwrf06HiyGPaSgcASEQuXVB6Ccxum+hhS8pWcT1NVklQEGoLDUOBYhh
qQ00TI3AQykiOS+Sdlrr0tyOBDpm5qyYvD2KjEoUyT8EYEroA9EkC8GQUGYmCqh4
XlzPCfyTysXcbQ/oUksgzKxFwP5T0n8jvEa8ATgGsqSeFD2bz9Wi207TXbz5
-----END CERTIFICATE-----
Generated at Sun May 19 17:31:07 2024 by rpki-client on console-ams.rpki-client.org