Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/xvCcGjnQpyLYtTvYTNTtyKDjpQM.roa
File: xvCcGjnQpyLYtTvYTNTtyKDjpQM.roa (raw, json)
Hash identifier: YAgCr4Fya2YYuNzY0Zp/WjtExl0p7JLFBDh0omMbfXE=
Subject key identifier: C6:F0:9C:1A:39:D0:A7:22:D8:B5:3B:D8:4C:D4:ED:C8:A0:E3:A5:03
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 0191C3EAAECFA96AD2FABACA61341749D080
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/xvCcGjnQpyLYtTvYTNTtyKDjpQM.roa
Signing time: Thu 05 Sep 2024 20:40:22 +0000
ROA not before: Thu 05 Sep 2024 20:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210348
IP address blocks: 2a03:5840:150::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c3:ea:ae:cf:a9:6a:d2:fa:ba:ca:61:34:17:49:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Sep 5 20:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6f09c1a39d0a722d8b53bd84cd4edc8a0e3a503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:86:54:b3:5b:3c:38:dc:29:a7:81:f8:2a:61:
8d:8f:73:f6:d2:b4:63:36:36:d5:34:68:b8:2a:7e:
85:69:80:5f:71:42:53:26:68:0f:e4:ae:c7:eb:d3:
13:86:7c:df:4c:4c:5c:26:89:c3:0f:d6:87:1b:eb:
c9:29:05:62:c1:94:86:94:a1:8e:58:ea:0c:2a:1b:
59:26:2c:c8:04:56:f6:3d:24:1b:d6:ee:83:c7:05:
d0:c6:f6:89:17:fe:83:ce:71:d1:93:b8:0a:08:9b:
90:f0:73:07:41:cb:2b:0d:af:eb:4f:d5:67:95:b7:
a6:78:ba:a7:50:af:5a:78:93:6c:58:a7:e4:ed:16:
ae:58:e7:52:5d:b3:de:70:38:ed:9a:63:00:bd:31:
a3:e4:11:1b:a0:0a:3e:32:59:aa:31:cc:8a:d4:14:
c2:a8:89:ff:1a:e8:37:76:29:37:ea:c0:b6:75:8f:
29:3d:00:57:7a:65:90:79:7f:e6:37:89:d1:a2:56:
f8:17:8b:e8:75:08:75:28:4c:47:72:9f:aa:5a:40:
f0:5b:ef:9e:d2:2a:b4:c8:05:14:0c:95:5d:ed:52:
84:e5:0f:8d:68:3d:0c:61:35:4a:12:6d:ab:7b:5c:
97:01:36:ed:29:e6:5c:88:34:58:ec:85:d5:df:1d:
d8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F0:9C:1A:39:D0:A7:22:D8:B5:3B:D8:4C:D4:ED:C8:A0:E3:A5:03
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/xvCcGjnQpyLYtTvYTNTtyKDjpQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:150::/44
Signature Algorithm: sha256WithRSAEncryption
95:e2:5c:94:6c:88:2e:55:07:2b:ac:a1:c1:df:f5:2a:ac:a9:
3e:cf:80:f5:26:18:74:7b:0e:8e:23:8f:73:cd:03:4e:1a:8a:
ab:eb:06:22:95:8e:09:1e:83:b5:ee:ad:d8:88:20:d4:e8:2e:
bc:34:b2:4d:2f:c0:3c:d8:e3:12:ba:ab:f9:f0:43:97:1e:f7:
ff:30:52:68:25:6a:62:6d:bd:1c:c0:9a:e0:fb:d6:75:c2:19:
b2:0c:c3:0c:2e:e7:e5:fb:59:03:1b:f7:6e:4a:c5:b5:ff:20:
dc:08:09:cf:e4:55:7e:d6:ec:40:33:a0:d1:8b:09:ed:cb:94:
21:f9:ac:b2:52:72:84:89:6f:41:1f:98:69:6c:90:55:f4:73:
ee:bd:bf:e4:d0:3e:bd:5f:18:1f:7c:ed:bd:e0:bd:0d:e6:50:
a5:df:05:5e:08:35:04:72:65:a3:89:6f:f7:b0:97:fe:96:d9:
d2:71:91:6b:15:c3:e6:5d:20:69:79:31:5c:fd:5e:b6:3a:a0:
9c:c5:c6:f1:9d:9a:10:d4:0a:71:7d:84:93:84:46:ae:70:ba:
46:19:dd:1c:50:9a:c3:2f:ff:95:26:84:f8:66:d3:da:32:c8:
48:85:d5:dc:ef:73:e4:76:d7:64:59:cb:48:bb:8b:a6:f6:5c:
58:9a:c1:4a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZHD6q7PqWrS+rrKYTQXSdCAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjQwOTA1MjA0MDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmYwOWMxYTM5ZDBhNzIyZDhiNTNiZDg0Y2Q0ZWRjOGEwZTNhNTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIZUs1s8ONwpp4H4KmGNj3P20rRj
NjbVNGi4Kn6FaYBfcUJTJmgP5K7H69MThnzfTExcJonDD9aHG+vJKQViwZSGlKGO
WOoMKhtZJizIBFb2PSQb1u6DxwXQxvaJF/6DznHRk7gKCJuQ8HMHQcsrDa/rT9Vn
lbemeLqnUK9aeJNsWKfk7RauWOdSXbPecDjtmmMAvTGj5BEboAo+MlmqMcyK1BTC
qIn/Gug3dik36sC2dY8pPQBXemWQeX/mN4nRolb4F4vodQh1KExHcp+qWkDwW++e
0iq0yAUUDJVd7VKE5Q+NaD0MYTVKEm2re1yXATbtKeZciDRY7IXV3x3YNQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMbwnBo50Kci2LU72EzU7cig46UDMB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEveHZDY0dqblFweUxZdFR2WVROVHR5S0RqcFFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgNYQAFQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCV4lyUbIguVQcrrKHB3/UqrKk+z4D1Jhh0ew6O
I49zzQNOGoqr6wYilY4JHoO17q3YiCDU6C68NLJNL8A82OMSuqv58EOXHvf/MFJo
JWpibb0cwJrg+9Z1whmyDMMMLufl+1kDG/duSsW1/yDcCAnP5FV+1uxAM6DRiwnt
y5Qh+ayyUnKEiW9BH5hpbJBV9HPuvb/k0D69XxgffO294L0N5lCl3wVeCDUEcmWj
iW/3sJf+ltnScZFrFcPmXSBpeTFc/V62OqCcxcbxnZoQ1ApxfYSThEaucLpGGd0c
UJrDL/+VJoT4ZtPaMshIhdXc73PkdtdkWctIu4um9lxYmsFK
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:10:27 2024 by rpki-client on console-ams.rpki-client.org