Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/71iubwt9WxGYYgKF1WDcJWnDxPI.roa
File: 71iubwt9WxGYYgKF1WDcJWnDxPI.roa (raw, json)
Hash identifier: kmQ05b5nZMymFwgjq+wKGNTMtGbXqSawuDVqn0Hzz3g=
Subject key identifier: EF:58:AE:6F:0B:7D:5B:11:98:62:02:85:D5:60:DC:25:69:C3:C4:F2
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019174F9541A8D3E8973ED30A6947D066055
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/71iubwt9WxGYYgKF1WDcJWnDxPI.roa
Signing time: Wed 21 Aug 2024 12:46:22 +0000
ROA not before: Wed 21 Aug 2024 12:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214329
IP address blocks: 2a03:5840:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:74:f9:54:1a:8d:3e:89:73:ed:30:a6:94:7d:06:60:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Aug 21 12:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef58ae6f0b7d5b1198620285d560dc2569c3c4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:3d:52:93:1e:a1:37:51:3d:50:23:4c:de:
03:b3:9c:42:22:3a:3e:d9:aa:65:1d:b6:27:d5:90:
33:a9:95:31:3f:74:df:5c:83:db:e3:ad:f8:31:76:
c1:6f:35:64:e9:85:00:5a:6e:fa:91:6a:03:20:77:
25:af:7a:3d:20:30:db:7f:1e:9c:45:33:87:08:88:
a9:29:06:7d:00:32:bb:ad:92:64:3d:01:20:11:9e:
04:e6:40:19:0c:6f:d3:48:26:49:8f:54:51:b2:ad:
61:32:0d:f7:75:a0:5d:d4:04:fb:86:0e:4f:aa:16:
e6:2f:e2:05:5f:e0:72:11:01:98:02:b6:d2:5a:66:
62:4a:8a:07:82:a2:5b:2f:fd:4b:34:03:17:ea:8d:
0c:8c:64:fd:13:ba:75:49:14:1e:22:46:f2:4e:cc:
e9:56:1f:d8:9a:9f:22:d4:12:68:d0:53:f5:87:55:
19:ed:63:a0:a4:64:98:79:e8:94:e0:9e:7b:52:dc:
ca:ef:e6:c2:1c:bb:b5:69:a3:dc:d0:20:7c:24:15:
75:58:ea:fc:21:7c:41:ed:d9:66:0f:1c:b4:58:a8:
d4:45:81:66:26:b8:b1:aa:15:2d:51:02:4a:c2:8e:
77:58:93:18:d4:db:9e:66:5e:5e:c1:9e:8b:a6:82:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:58:AE:6F:0B:7D:5B:11:98:62:02:85:D5:60:DC:25:69:C3:C4:F2
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/71iubwt9WxGYYgKF1WDcJWnDxPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:120::/48
Signature Algorithm: sha256WithRSAEncryption
09:82:fd:9e:26:3d:27:d6:24:5b:fa:a4:c9:ed:15:af:93:8c:
e9:41:70:bd:12:4f:bb:32:13:1e:15:93:e1:da:eb:61:6c:4f:
7e:71:60:61:6d:bb:9a:2a:fb:84:cc:88:18:e1:4c:d2:16:4f:
a7:3a:1a:b5:bd:ab:6e:af:76:01:53:24:42:8d:13:4c:c0:d5:
07:fc:b1:15:d3:80:c1:df:67:7d:e6:1a:fb:1a:39:94:60:62:
1a:ff:02:be:19:54:1e:6f:22:0a:5e:12:dd:57:4c:ce:02:0e:
dd:75:1d:42:85:ae:70:88:0d:06:03:2d:0e:aa:63:ac:c8:21:
04:06:49:4e:a9:81:b8:bb:8c:8d:23:f5:37:29:53:91:97:f3:
1e:a0:de:56:2d:c8:da:39:a7:7d:5a:7a:60:55:c1:08:13:21:
24:4b:dd:f2:5e:e4:34:f5:7a:d9:28:b0:d2:d5:d5:38:d9:33:
73:74:bc:d6:bd:bd:06:6f:61:6d:f1:2d:0f:7f:5d:ad:f5:12:
59:8f:a8:4f:48:35:28:e5:7d:f8:e4:b7:01:1d:54:65:f0:6c:
47:84:bd:65:52:86:4a:fa:c4:36:a9:f8:76:43:43:fc:c5:2c:
f6:eb:2a:88:bf:93:db:a4:1c:ea:4c:c2:15:1c:b1:1b:c6:e4:
27:21:5b:0a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZF0+VQajT6Jc+0wppR9BmBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjQwODIxMTI0NjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjU4YWU2ZjBiN2Q1YjExOTg2MjAyODVkNTYwZGMyNTY5YzNjNGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthI9UpMeoTdRPVAjTN4Ds5xCIjo+
2aplHbYn1ZAzqZUxP3TfXIPb4634MXbBbzVk6YUAWm76kWoDIHclr3o9IDDbfx6c
RTOHCIipKQZ9ADK7rZJkPQEgEZ4E5kAZDG/TSCZJj1RRsq1hMg33daBd1AT7hg5P
qhbmL+IFX+ByEQGYArbSWmZiSooHgqJbL/1LNAMX6o0MjGT9E7p1SRQeIkbyTszp
Vh/Ymp8i1BJo0FP1h1UZ7WOgpGSYeeiU4J57UtzK7+bCHLu1aaPc0CB8JBV1WOr8
IXxB7dlmDxy0WKjURYFmJrixqhUtUQJKwo53WJMY1NueZl5ewZ6LpoJQ6QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO9Yrm8LfVsRmGIChdVg3CVpw8TyMB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvNzFpdWJ3dDlXeEdZWWdLRjFXRGNKV25EeFBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAEg
MA0GCSqGSIb3DQEBCwUAA4IBAQAJgv2eJj0n1iRb+qTJ7RWvk4zpQXC9Ek+7MhMe
FZPh2uthbE9+cWBhbbuaKvuEzIgY4UzSFk+nOhq1vatur3YBUyRCjRNMwNUH/LEV
04DB32d95hr7GjmUYGIa/wK+GVQebyIKXhLdV0zOAg7ddR1Cha5wiA0GAy0OqmOs
yCEEBklOqYG4u4yNI/U3KVORl/MeoN5WLcjaOad9WnpgVcEIEyEkS93yXuQ09XrZ
KLDS1dU42TNzdLzWvb0Gb2Ft8S0Pf12t9RJZj6hPSDUo5X345LcBHVRl8GxHhL1l
UoZK+sQ2qfh2Q0P8xSz26yqIv5PbpBzqTMIVHLEbxuQnIVsK
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:10:27 2024 by rpki-client on console-ams.rpki-client.org