Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/U8JzqsokxyzzWLrRJILJ8pgmmVE.roa
File: U8JzqsokxyzzWLrRJILJ8pgmmVE.roa (raw, json)
Hash identifier: VetSeD4kjyqJ/8WZw+CuFBUq7rb+WPNhyLOs+6plcPg=
Subject key identifier: 53:C2:73:AA:CA:24:C7:2C:F3:58:BA:D1:24:82:C9:F2:98:26:99:51
Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial: 018F9E70353B7E205E33F7457B59DD1B862E
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/U8JzqsokxyzzWLrRJILJ8pgmmVE.roa
Signing time: Wed 22 May 2024 03:55:04 +0000
ROA not before: Wed 22 May 2024 03:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5068
IP address blocks: 2a13:ce40:6660::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9e:70:35:3b:7e:20:5e:33:f7:45:7b:59:dd:1b:86:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Validity
Not Before: May 22 03:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53c273aaca24c72cf358bad12482c9f298269951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:4f:04:54:99:7c:99:3c:41:41:d1:51:4d:
b7:94:13:85:58:be:70:56:d3:4a:85:db:57:33:07:
b7:4c:65:73:e7:0a:93:6d:39:e7:35:5c:33:63:4b:
d1:ed:e3:6a:ce:e7:94:d5:d9:37:f5:17:81:c9:84:
e8:97:dd:fd:69:65:dc:ba:7c:09:d3:19:4e:8f:80:
ac:b5:38:4f:70:3d:88:f6:1d:bd:0a:50:30:f4:da:
af:13:c1:a6:a9:1e:d8:1e:99:4a:86:4f:2e:da:7e:
90:51:fa:c4:69:34:3b:a6:1f:aa:77:a4:49:0c:89:
ea:ca:fb:8b:67:04:58:2d:04:c1:cb:3b:e4:c1:85:
e8:4b:e2:55:f9:02:fd:0e:ed:72:ce:24:16:3e:43:
5b:12:96:af:00:a2:0f:20:b5:1c:c6:f4:34:f0:94:
ad:19:99:21:cf:ee:7c:4b:37:8e:85:07:34:88:43:
22:f7:5c:04:9b:ef:45:fa:19:27:6e:cd:1c:7a:04:
06:c6:19:7a:11:b6:9a:7d:b3:d4:79:fc:3c:de:15:
11:f0:36:4b:09:86:e0:f9:79:93:07:e9:ec:9b:88:
27:b1:00:92:a8:a6:2e:5c:e7:1f:c6:68:25:f1:9f:
a3:31:ff:a3:d8:11:e4:47:50:c3:4a:30:c9:37:62:
ef:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C2:73:AA:CA:24:C7:2C:F3:58:BA:D1:24:82:C9:F2:98:26:99:51
X509v3 Authority Key Identifier:
keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/U8JzqsokxyzzWLrRJILJ8pgmmVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ce40:6660::/48
Signature Algorithm: sha256WithRSAEncryption
4e:63:b1:cb:ea:40:c7:c2:58:f7:0a:88:7b:2b:e4:bd:63:e0:
8f:3a:f1:93:33:a9:bf:f9:9b:9f:53:98:3b:1e:25:3b:b0:6f:
f0:24:71:ff:b1:bd:4b:46:4f:a0:d0:7e:5a:a6:35:6d:9c:a1:
ad:fd:9e:d4:e3:69:46:e9:8a:d9:1e:cf:05:4f:67:cb:58:c0:
5d:8b:3d:33:c6:d2:8b:96:35:2a:1f:43:e5:59:bf:00:5a:95:
af:6e:fc:ba:bf:4c:4a:dd:b7:24:ee:9f:b5:7f:28:56:03:26:
40:9e:44:7a:bc:8d:7f:be:0c:57:13:ac:a5:ba:7d:eb:45:99:
58:0e:24:ca:f6:82:68:11:54:ed:fb:43:ac:22:cc:16:2a:26:
0a:f9:17:ed:69:83:d3:a3:eb:97:af:9e:2f:7a:47:26:60:dc:
d5:86:cb:be:60:29:8d:c9:99:21:ed:30:21:26:43:6e:0e:28:
e0:d3:aa:d1:f1:8f:65:f4:46:ae:34:4f:1d:bf:29:53:62:f1:
6f:26:5b:69:ec:ce:2c:f4:b8:b5:d3:33:a3:6d:4f:8b:9f:1a:
af:03:8b:80:12:e3:b0:39:71:aa:b5:7f:9d:77:b3:40:ae:ff:
8e:25:b6:1a:09:0f:97:3b:81:31:63:8f:8e:0f:70:a3:49:a6:
a7:9e:65:ca
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY+ecDU7fiBeM/dFe1ndG4YuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjODlhZjYwOTg2ZTZkOTU4MzIyZmIwMjZjNmI2NWFlZWM5
NDlhMGQwHhcNMjQwNTIyMDM1NTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2MyNzNhYWNhMjRjNzJjZjM1OGJhZDEyNDgyYzlmMjk4MjY5OTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY1PBFSZfJk8QUHRUU23lBOFWL5w
VtNKhdtXMwe3TGVz5wqTbTnnNVwzY0vR7eNqzueU1dk39ReByYTol939aWXcunwJ
0xlOj4CstThPcD2I9h29ClAw9NqvE8GmqR7YHplKhk8u2n6QUfrEaTQ7ph+qd6RJ
DInqyvuLZwRYLQTByzvkwYXoS+JV+QL9Du1yziQWPkNbEpavAKIPILUcxvQ08JSt
GZkhz+58SzeOhQc0iEMi91wEm+9F+hknbs0cegQGxhl6EbaafbPUefw83hUR8DZL
CYbg+XmTB+nsm4gnsQCSqKYuXOcfxmgl8Z+jMf+j2BHkR1DDSjDJN2LvKQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFPCc6rKJMcs81i60SSCyfKYJplRMB8GA1UdIwQY
MBaAFKyJr2CYbm2VgyL7AmxrZa7slJoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTIt
OWM4YmJhNjY0ZmYwLzEvVThKenFzb2t4eXp6V0xyUkpJTEo4cGdtbVZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTItOWM4YmJhNjY0ZmYw
LzEvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhPOQGZg
MA0GCSqGSIb3DQEBCwUAA4IBAQBOY7HL6kDHwlj3Coh7K+S9Y+CPOvGTM6m/+Zuf
U5g7HiU7sG/wJHH/sb1LRk+g0H5apjVtnKGt/Z7U42lG6YrZHs8FT2fLWMBdiz0z
xtKLljUqH0PlWb8AWpWvbvy6v0xK3bck7p+1fyhWAyZAnkR6vI1/vgxXE6ylun3r
RZlYDiTK9oJoEVTt+0OsIswWKiYK+RftaYPTo+uXr54vekcmYNzVhsu+YCmNyZkh
7TAhJkNuDijg06rR8Y9l9EauNE8dvylTYvFvJltp7M4s9Li10zOjbU+LnxqvA4uA
EuOwOXGqtX+dd7NArv+OJbYaCQ+XO4ExY4+OD3CjSaannmXK
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:46 2024 by rpki-client on console-ams.rpki-client.org