Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/vksR5ybZoiXHko_WA4LVL1vzXF0.roa
File: vksR5ybZoiXHko_WA4LVL1vzXF0.roa (raw, json)
Hash identifier: 61UTfXqtLL3J1bROVlwvCL7vuIQeZDqvfpEN0Zeyk38=
Subject key identifier: BE:4B:11:E7:26:D9:A2:25:C7:92:8F:D6:03:82:D5:2F:5B:F3:5C:5D
Certificate issuer: /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial: 0192F71C53871A6B1EF5B18C71E0C835A5DC
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/vksR5ybZoiXHko_WA4LVL1vzXF0.roa
Signing time: Mon 04 Nov 2024 12:18:01 +0000
ROA not before: Mon 04 Nov 2024 12:18:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62245
IP address blocks: 2001:67c:1918::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f7:1c:53:87:1a:6b:1e:f5:b1:8c:71:e0:c8:35:a5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
Validity
Not Before: Nov 4 12:18:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be4b11e726d9a225c7928fd60382d52f5bf35c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:25:f2:69:ef:44:17:39:9d:6b:02:12:37:
a8:cb:7a:ba:02:37:0e:a4:40:6d:73:37:c4:e7:e6:
2f:22:7a:7f:3f:98:19:10:47:07:86:9f:5e:bd:b5:
41:8c:08:f9:42:7a:a1:b5:b9:28:3d:25:ff:b3:51:
1a:2f:b3:38:17:3b:a1:0a:ff:83:7e:be:7d:93:83:
bb:f8:cc:8f:54:d7:56:34:ea:be:17:b6:46:d6:2d:
51:f9:07:04:17:0c:a9:24:5c:7f:ee:02:d5:ef:5a:
e4:38:56:18:fc:5a:a8:5b:ee:83:bc:b5:3f:9e:b5:
3c:4c:58:34:38:76:54:d6:ff:9b:0a:30:ac:fc:ad:
68:8a:23:7a:b6:af:d4:fa:99:c0:53:bd:81:15:50:
ce:e0:be:05:09:e2:a1:63:e0:d6:01:a2:36:82:e8:
91:1d:20:1e:aa:c2:21:ac:cf:7a:b3:b4:a8:c4:55:
99:89:ec:a3:b4:9f:e9:48:6b:65:06:8b:6e:2b:7e:
1d:ec:47:d5:7d:f3:70:f4:17:3f:cf:05:c4:63:bd:
79:8b:12:f4:c8:79:25:33:4d:a1:fc:e4:53:ba:93:
a5:18:52:04:8a:f8:66:d0:47:db:ff:83:49:ff:ee:
0b:ac:da:c3:52:56:ad:a9:d9:45:20:3d:a8:6f:fc:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4B:11:E7:26:D9:A2:25:C7:92:8F:D6:03:82:D5:2F:5B:F3:5C:5D
X509v3 Authority Key Identifier:
keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/vksR5ybZoiXHko_WA4LVL1vzXF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1918::/48
Signature Algorithm: sha256WithRSAEncryption
83:9e:56:1f:de:87:dd:40:65:8e:ed:e9:c1:73:23:5a:54:78:
eb:17:88:7f:93:e1:9d:d0:a6:4c:6d:e9:9f:40:a7:7b:89:56:
e9:ec:c8:36:86:cb:44:e1:ea:77:e6:f1:f3:05:7c:3f:77:61:
19:3c:53:10:68:07:7a:95:7b:34:d7:f6:40:e1:81:f8:4d:ad:
c4:d8:61:19:3a:2f:e1:b5:b2:07:30:a6:41:bc:60:5b:ad:64:
55:38:c4:65:84:2d:7a:37:22:3e:f9:02:58:82:41:99:4d:95:
00:2e:c0:1e:7f:d6:08:fe:e1:c8:16:37:c2:71:96:e1:80:52:
37:09:0e:ee:b6:ce:e8:cb:5e:4d:e6:b8:2b:b7:db:6d:61:7d:
4f:df:c5:f6:c5:64:71:44:b9:79:b2:5a:24:c8:cd:9b:4b:6b:
33:51:68:da:32:58:d0:f4:36:1a:c7:ef:76:ac:c8:14:94:ff:
b4:49:18:c9:61:d0:27:be:b4:d7:af:a7:54:fa:9b:45:68:45:
10:3d:cc:ce:e5:6e:89:15:fe:c5:ef:c5:a4:f3:43:04:bb:41:
25:ac:f4:8d:49:1d:ad:da:77:23:6d:b9:f0:11:57:01:16:5c:
67:7b:4b:27:86:e7:23:f2:ec:6f:b9:4d:ac:53:09:10:66:5c:
22:21:46:a3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZL3HFOHGmse9bGMceDINaXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMGZlOTcxYjNlMzZiMTZhOTJiZTg1ZjU5OTg1YmU0NTk2
OGI4NjQwHhcNMjQxMTA0MTIxODAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTRiMTFlNzI2ZDlhMjI1Yzc5MjhmZDYwMzgyZDUyZjViZjM1YzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5kl8mnvRBc5nWsCEjeoy3q6AjcO
pEBtczfE5+YvInp/P5gZEEcHhp9evbVBjAj5QnqhtbkoPSX/s1EaL7M4FzuhCv+D
fr59k4O7+MyPVNdWNOq+F7ZG1i1R+QcEFwypJFx/7gLV71rkOFYY/FqoW+6DvLU/
nrU8TFg0OHZU1v+bCjCs/K1oiiN6tq/U+pnAU72BFVDO4L4FCeKhY+DWAaI2guiR
HSAeqsIhrM96s7SoxFWZieyjtJ/pSGtlBotuK34d7EfVffNw9Bc/zwXEY715ixL0
yHklM02h/ORTupOlGFIEivhm0Efb/4NJ/+4LrNrDUlatqdlFID2ob/xb0wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL5LEecm2aIlx5KP1gOC1S9b81xdMB8GA1UdIwQY
MBaAFDMP6XGz42sWqSvoX1mYW+RZaLhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXdfcGNiUGpheGFwSy1oZldaaGI1RmxvdUdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hMzg2OTMtY2ZhMC00M2U4LWE1MWIt
MTFlOWU5ZjAxMzQzLzEvdmtzUjV5YlpvaVhIa29fV0E0TFZMMXZ6WEYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9hMzg2OTMtY2ZhMC00M2U4LWE1MWItMTFlOWU5ZjAxMzQz
LzEvTXdfcGNiUGpheGFwSy1oZldaaGI1RmxvdUdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBkY
MA0GCSqGSIb3DQEBCwUAA4IBAQCDnlYf3ofdQGWO7enBcyNaVHjrF4h/k+Gd0KZM
bemfQKd7iVbp7Mg2hstE4ep35vHzBXw/d2EZPFMQaAd6lXs01/ZA4YH4Ta3E2GEZ
Oi/htbIHMKZBvGBbrWRVOMRlhC16NyI++QJYgkGZTZUALsAef9YI/uHIFjfCcZbh
gFI3CQ7uts7oy15N5rgrt9ttYX1P38X2xWRxRLl5slokyM2bS2szUWjaMljQ9DYa
x+92rMgUlP+0SRjJYdAnvrTXr6dU+ptFaEUQPczO5W6JFf7F78Wk80MEu0ElrPSN
SR2t2ncjbbnwEVcBFlxne0snhucj8uxvuU2sUwkQZlwiIUaj
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:23:29 2024 by rpki-client on console-fra.rpki-client.org