Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/eB4N6zI1pYcuh9LmWrRBm9ChMx0.roa
File: eB4N6zI1pYcuh9LmWrRBm9ChMx0.roa (raw, json)
Hash identifier: e6DdzfemKrrjow8uvhhk2VSVVA1cF9FWlxTGdFQw+E0=
Subject key identifier: 78:1E:0D:EB:32:35:A5:87:2E:87:D2:E6:5A:B4:41:9B:D0:A1:33:1D
Certificate issuer: /CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Certificate serial: 019172703821CF1BB1B3539C1579DFDE32C1
Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/eB4N6zI1pYcuh9LmWrRBm9ChMx0.roa
Signing time: Wed 21 Aug 2024 00:57:22 +0000
ROA not before: Wed 21 Aug 2024 00:57:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214331
IP address blocks: 2a06:b700:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 21:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:72:70:38:21:cf:1b:b1:b3:53:9c:15:79:df:de:32:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Validity
Not Before: Aug 21 00:57:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=781e0deb3235a5872e87d2e65ab4419bd0a1331d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:d2:28:8e:9f:8c:d6:63:48:0d:73:7b:27:
f4:71:1f:44:be:c7:9d:3b:d7:aa:3f:75:ff:49:e6:
36:22:18:c1:9a:41:27:ff:5f:63:50:96:df:1c:f1:
20:f2:70:95:48:54:22:ac:68:36:23:6d:7f:f7:6c:
d7:06:6e:27:f8:49:18:70:bf:f5:bb:1b:53:4a:cf:
4b:1b:6e:7c:d5:d8:15:90:dd:1b:bf:0d:af:4d:d0:
92:40:b1:1f:17:4d:93:49:a1:7a:d0:5c:ef:27:22:
b3:06:19:c7:fa:43:bf:e6:1e:d7:5f:d6:d6:b2:fc:
a3:f0:da:ed:93:22:30:ae:19:92:72:10:8e:58:ef:
50:26:9b:32:25:b4:f6:f4:d9:0b:36:b4:f5:f0:7f:
18:50:33:e1:06:73:e7:46:62:14:11:a0:1d:f9:af:
69:77:19:67:77:68:3f:c6:14:e8:2a:74:4a:ae:c7:
54:de:18:fe:5b:bc:d8:37:ae:a7:5f:4c:09:4c:f9:
41:31:f5:30:21:f2:31:09:c9:5f:d0:70:af:da:dc:
d7:1a:86:dc:15:e9:21:e7:10:ac:88:06:61:a6:37:
d8:58:b9:18:f1:cb:87:31:e8:3a:f7:89:9e:78:17:
f6:48:25:32:f1:13:0e:b4:e1:6a:17:96:30:a4:64:
7f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1E:0D:EB:32:35:A5:87:2E:87:D2:E6:5A:B4:41:9B:D0:A1:33:1D
X509v3 Authority Key Identifier:
keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/eB4N6zI1pYcuh9LmWrRBm9ChMx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b700:1000::/48
Signature Algorithm: sha256WithRSAEncryption
2d:1c:f1:e2:cd:3e:3d:2a:6e:70:c5:c4:a6:19:a3:ed:c8:6b:
2e:87:45:12:28:80:af:cc:98:33:34:4b:6d:85:b2:4b:c6:68:
bc:84:5f:39:9a:4f:f0:c3:73:74:51:84:d6:04:95:34:5f:84:
f3:70:ec:29:52:38:d7:02:fd:49:e1:eb:5e:52:27:42:74:4c:
64:74:52:cc:4a:5a:9e:dc:3c:11:f9:25:b7:82:ec:9d:33:cf:
e4:d0:03:77:08:17:77:46:4f:66:d3:ef:1b:c4:37:8d:e4:fd:
ab:ae:ae:91:fa:81:d3:56:a0:98:2b:20:34:35:fc:cd:a0:e0:
a8:3f:02:22:2b:94:1d:2e:03:05:94:ef:df:f3:13:08:70:c1:
2d:53:c3:5e:d1:10:0b:82:b6:f4:2c:0c:24:61:96:c5:05:12:
ec:a5:22:d1:ff:54:50:9d:fa:a7:f7:17:a9:ce:3c:21:e3:64:
69:43:99:b3:bf:0a:20:80:2d:38:dd:80:11:bb:81:cc:eb:e6:
e1:2b:98:6e:5a:a8:b0:43:9c:5a:cc:85:e2:6b:dc:77:8f:67:
57:14:8d:a1:2b:0f:b3:7e:fb:4d:fd:ce:d6:93:03:37:73:bc:
9f:94:a8:53:4f:4a:04:5f:44:dd:72:cc:fd:27:f9:fa:c6:5a:
bd:da:fe:1e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZFycDghzxuxs1OcFXnf3jLBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMjhmZjMxMGRhN2RmODMwOWNmYWI0ZGNmOWEyMzU4NDJi
NjA4NzIwHhcNMjQwODIxMDA1NzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODFlMGRlYjMyMzVhNTg3MmU4N2QyZTY1YWI0NDE5YmQwYTEzMzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUzSKI6fjNZjSA1zeyf0cR9Evsed
O9eqP3X/SeY2IhjBmkEn/19jUJbfHPEg8nCVSFQirGg2I21/92zXBm4n+EkYcL/1
uxtTSs9LG2581dgVkN0bvw2vTdCSQLEfF02TSaF60FzvJyKzBhnH+kO/5h7XX9bW
svyj8NrtkyIwrhmSchCOWO9QJpsyJbT29NkLNrT18H8YUDPhBnPnRmIUEaAd+a9p
dxlnd2g/xhToKnRKrsdU3hj+W7zYN66nX0wJTPlBMfUwIfIxCclf0HCv2tzXGobc
Fekh5xCsiAZhpjfYWLkY8cuHMeg694meeBf2SCUy8RMOtOFqF5YwpGR/gwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHgeDesyNaWHLofS5lq0QZvQoTMdMB8GA1UdIwQY
MBaAFIoo/zENp9+DCc+rTc+aI1hCtghyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWlqX01RMm4zNE1KejZ0Tno1b2pXRUsyQ0hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hNWQyODYtODY3MC00N2U0LTk3YjQt
MjRjZjhhNjFkN2U4LzEvZUI0TjZ6STFwWWN1aDlMbVdyUkJtOUNoTXgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hNWQyODYtODY3MC00N2U0LTk3YjQtMjRjZjhhNjFkN2U4
LzEvaWlqX01RMm4zNE1KejZ0Tno1b2pXRUsyQ0hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKga3ABAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAtHPHizT49Km5wxcSmGaPtyGsuh0USKICvzJgz
NEtthbJLxmi8hF85mk/ww3N0UYTWBJU0X4TzcOwpUjjXAv1J4eteUidCdExkdFLM
Slqe3DwR+SW3guydM8/k0AN3CBd3Rk9m0+8bxDeN5P2rrq6R+oHTVqCYKyA0NfzN
oOCoPwIiK5QdLgMFlO/f8xMIcMEtU8Ne0RALgrb0LAwkYZbFBRLspSLR/1RQnfqn
9xepzjwh42RpQ5mzvwoggC043YARu4HM6+bhK5huWqiwQ5xazIXia9x3j2dXFI2h
Kw+zfvtN/c7WkwM3c7yflKhTT0oEX0Tdcsz9J/n6xlq92v4e
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:44:36 2024 by rpki-client on console-fra.rpki-client.org