Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/LjaL6cPi4yWOdjq0eAh6VO3qd_M.roa
File: LjaL6cPi4yWOdjq0eAh6VO3qd_M.roa (raw, json)
Hash identifier: 2VKnCxIZ7kgxNq6dYGqLwxh1QAcf6tvlg1MbZMrTNY8=
Subject key identifier: 2E:36:8B:E9:C3:E2:E3:25:8E:76:3A:B4:78:08:7A:54:ED:EA:77:F3
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 018CC86FD971FCF13B08592422ED1CAEE2D7
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/LjaL6cPi4yWOdjq0eAh6VO3qd_M.roa
Signing time: Tue 02 Jan 2024 04:30:22 +0000
ROA not before: Tue 02 Jan 2024 04:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199884
IP address blocks: 2a03:5840:320::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:d9:71:fc:f1:3b:08:59:24:22:ed:1c:ae:e2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 04:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e368be9c3e2e3258e763ab478087a54edea77f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:da:80:75:5d:01:1f:9f:bc:e8:3b:b5:31:
f4:70:4f:b8:f1:e9:ae:d3:a9:bc:0c:3d:89:dd:b5:
08:95:04:f4:2f:14:7c:b9:7f:22:63:06:c9:8c:22:
e8:6f:79:98:90:6b:e3:04:c6:df:dc:ab:7f:6a:f0:
dc:e3:9f:3e:44:a4:95:10:2d:c3:00:ce:94:67:a8:
65:62:d4:a3:87:63:1b:cb:ee:26:64:35:fa:d0:b7:
5d:37:2f:ed:a7:67:c3:25:a3:0c:f1:7b:56:49:fc:
7c:b8:6c:89:c7:1d:16:2a:ce:33:43:7c:05:e3:4a:
ea:42:20:5a:fc:df:78:49:2f:9f:27:94:59:fb:99:
2f:b3:8f:f2:4f:f9:da:46:3c:41:a8:f7:39:a4:8f:
7e:38:d5:81:fb:32:55:72:76:60:af:30:87:34:35:
a9:64:38:7e:98:f4:96:25:b1:37:62:4c:ee:10:cd:
9e:3e:7a:32:e0:07:15:ee:a8:0f:fa:ff:7f:9c:d4:
6e:6e:40:10:06:bc:d8:f0:bf:c2:28:47:ac:3d:77:
ba:2e:f9:d2:8f:21:ce:f2:db:31:6e:c6:0c:32:16:
44:b3:2c:e7:51:00:44:87:aa:b9:40:b8:50:f7:7c:
fe:53:76:bd:0d:bd:16:cf:2d:f0:5c:38:4d:31:a8:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:36:8B:E9:C3:E2:E3:25:8E:76:3A:B4:78:08:7A:54:ED:EA:77:F3
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/LjaL6cPi4yWOdjq0eAh6VO3qd_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:320::/44
Signature Algorithm: sha256WithRSAEncryption
a0:bb:81:8f:99:45:98:8d:bb:23:7a:b0:03:35:64:74:3d:e8:
81:9e:bc:8c:61:15:17:9b:a5:44:ff:c5:a8:48:5b:22:b1:1b:
03:1c:f6:7c:21:f7:1b:fa:81:a9:8d:31:f0:e3:02:2f:15:f9:
90:0a:28:fa:1e:12:62:cf:bd:69:1d:b7:f4:eb:03:07:f9:dd:
52:f7:cc:d0:c2:f7:ea:a3:c7:35:84:0f:d8:b0:da:3e:a5:e4:
eb:a3:10:70:87:a3:2e:00:5a:ba:80:e7:cb:37:7c:79:1c:c2:
ef:62:ef:31:ec:7c:98:92:1f:70:df:8a:1d:d6:f7:5f:3a:5f:
d9:c2:0d:aa:50:21:06:aa:05:ee:91:e4:d5:79:d3:2a:61:a5:
39:ad:bc:bf:87:95:4a:23:e9:ef:a3:75:1c:b2:f9:3f:f9:8b:
a7:21:f7:1e:63:14:7e:2e:33:65:34:21:b1:cb:68:0b:f6:09:
3d:34:3f:b5:f1:de:da:ad:84:2a:4a:c6:7a:80:f9:2f:d7:21:
fe:e6:ae:03:b3:ad:27:12:1e:c0:0a:b4:e6:66:1b:bb:c8:2a:
43:6c:d9:be:76:e7:6a:21:d0:3a:90:41:29:89:e7:53:79:33:
06:cd:42:71:98:0d:ce:10:ab:18:b2:65:60:92:95:c3:29:15:
00:e2:6a:4e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIb9lx/PE7CFkkIu0cruLXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjQwMTAyMDQzMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTM2OGJlOWMzZTJlMzI1OGU3NjNhYjQ3ODA4N2E1NGVkZWE3N2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvDagHVdAR+fvOg7tTH0cE+48emu
06m8DD2J3bUIlQT0LxR8uX8iYwbJjCLob3mYkGvjBMbf3Kt/avDc458+RKSVEC3D
AM6UZ6hlYtSjh2Mby+4mZDX60LddNy/tp2fDJaMM8XtWSfx8uGyJxx0WKs4zQ3wF
40rqQiBa/N94SS+fJ5RZ+5kvs4/yT/naRjxBqPc5pI9+ONWB+zJVcnZgrzCHNDWp
ZDh+mPSWJbE3YkzuEM2ePnoy4AcV7qgP+v9/nNRubkAQBrzY8L/CKEesPXe6LvnS
jyHO8tsxbsYMMhZEsyznUQBEh6q5QLhQ93z+U3a9Db0Wzy3wXDhNMahqnwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFC42i+nD4uMljnY6tHgIelTt6nfzMB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvTGphTDZjUGk0eVdPZGpxMGVBaDZWTzNxZF9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgNYQAMg
MA0GCSqGSIb3DQEBCwUAA4IBAQCgu4GPmUWYjbsjerADNWR0PeiBnryMYRUXm6VE
/8WoSFsisRsDHPZ8Ifcb+oGpjTHw4wIvFfmQCij6HhJiz71pHbf06wMH+d1S98zQ
wvfqo8c1hA/YsNo+peTroxBwh6MuAFq6gOfLN3x5HMLvYu8x7HyYkh9w34od1vdf
Ol/Zwg2qUCEGqgXukeTVedMqYaU5rby/h5VKI+nvo3Ucsvk/+YunIfceYxR+LjNl
NCGxy2gL9gk9ND+18d7arYQqSsZ6gPkv1yH+5q4Ds60nEh7ACrTmZhu7yCpDbNm+
dudqIdA6kEEpiedTeTMGzUJxmA3OEKsYsmVgkpXDKRUA4mpO
-----END CERTIFICATE-----
Generated at Sun May 19 18:38:33 2024 by rpki-client on console-ams.rpki-client.org