Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/R47rWq-lJktblM4-Zobc7-VVZHs.roa
File: R47rWq-lJktblM4-Zobc7-VVZHs.roa (raw, json)
Hash identifier: EcmbMdiKNOxAPl/oY2Gtx+JPJJxJqfyKbu7fUpKdlVA=
Subject key identifier: 47:8E:EB:5A:AF:A5:26:4B:5B:94:CE:3E:66:86:DC:EF:E5:55:64:7B
Certificate issuer: /CN=71601c0b8b13cc121017f6d25117ac1fd0664344
Certificate serial: 018CC49399E0ACEE8FEF4B860817E7D76E36
Authority key identifier: 71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/R47rWq-lJktblM4-Zobc7-VVZHs.roa
Signing time: Mon 01 Jan 2024 10:30:56 +0000
ROA not before: Mon 01 Jan 2024 10:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15557
IP address blocks: 2a00:b180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:99:e0:ac:ee:8f:ef:4b:86:08:17:e7:d7:6e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71601c0b8b13cc121017f6d25117ac1fd0664344
Validity
Not Before: Jan 1 10:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=478eeb5aafa5264b5b94ce3e6686dcefe555647b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:06:67:10:95:69:04:7a:48:08:ff:d8:a4:
a2:86:98:a6:4f:6a:f4:6b:b9:3a:b8:e2:2b:e4:ee:
16:af:83:76:8c:6e:e5:2b:25:9d:a8:c8:69:d3:5a:
4e:f2:b4:8d:53:df:0e:c2:b2:ef:13:79:62:ae:e4:
e1:00:0d:de:9f:34:20:b0:12:08:8d:d6:7b:da:04:
73:3d:fb:6b:c1:30:da:8b:84:ca:0b:51:b5:2a:f1:
4c:df:df:80:a4:f8:70:2f:b8:09:ec:9d:cb:1e:59:
53:f5:86:57:31:81:a1:e7:87:c4:6e:1c:02:c3:61:
61:2a:1c:b5:f2:af:cf:88:67:67:06:32:94:6b:1f:
1b:c4:8a:a0:18:23:d3:45:f7:de:90:34:79:fa:09:
59:d3:74:29:3b:ea:e6:30:3a:03:46:77:d0:87:f1:
9d:a5:4c:08:31:9b:4f:3d:9a:6f:6b:7d:35:f0:bd:
23:b0:d8:69:5d:67:0e:d7:89:01:a0:fb:c4:96:76:
10:44:72:b4:df:55:0e:46:9b:b7:7f:d3:17:a1:4d:
59:2c:f5:56:31:fa:80:35:22:6b:28:63:18:01:c6:
a2:85:09:d4:2d:8c:30:e6:ec:23:53:50:ea:75:58:
2b:ed:d7:5c:d1:15:50:6b:ed:7d:89:5d:10:3a:64:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8E:EB:5A:AF:A5:26:4B:5B:94:CE:3E:66:86:DC:EF:E5:55:64:7B
X509v3 Authority Key Identifier:
keyid:71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/R47rWq-lJktblM4-Zobc7-VVZHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:b180::/32
Signature Algorithm: sha256WithRSAEncryption
b0:94:04:6c:73:74:01:e0:e8:54:85:0a:42:8b:54:f2:0e:40:
81:b1:9b:c0:59:4a:f5:d8:e2:83:22:69:39:2e:a7:06:58:03:
b1:8b:8d:1d:92:e2:a6:8a:3b:f4:0c:8b:f7:94:3b:82:bb:ef:
b7:d0:89:68:15:2e:25:9e:8c:3b:0a:9d:42:8a:cc:5f:d6:ad:
3a:0e:ee:8a:fa:fa:e0:e3:79:1f:58:40:27:5a:fc:4f:8e:f6:
08:67:ed:da:30:6e:a3:4f:4f:2e:1d:b0:c0:ef:39:70:4d:9f:
2b:56:20:5e:eb:c1:1a:1c:f4:a1:63:e7:7b:81:19:36:ec:d3:
b2:0a:c1:3d:3a:de:35:17:ea:ae:1e:77:cf:d7:68:ad:d0:c3:
99:5f:6d:8c:b8:41:c2:a3:4f:7e:c6:d6:d4:95:ce:78:03:26:
af:7d:a2:e1:66:9f:2b:df:82:95:62:0d:54:fc:60:1b:34:27:
86:ba:8d:bb:9f:78:e5:85:4d:47:0b:1a:66:c6:ce:50:da:b3:
ec:f5:4c:bb:f8:ef:a8:d6:db:d6:d9:9b:68:0e:73:0b:39:fc:
dc:4d:39:f3:4d:f0:36:19:8e:0a:4e:1a:bc:eb:1c:d5:54:28:
55:05:60:37:dc:eb:81:cc:7b:52:68:3e:1c:84:3c:13:c4:1f:
04:b3:18:d2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzEk5ngrO6P70uGCBfn1242MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNjAxYzBiOGIxM2NjMTIxMDE3ZjZkMjUxMTdhYzFmZDA2
NjQzNDQwHhcNMjQwMTAxMTAzMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzhlZWI1YWFmYTUyNjRiNWI5NGNlM2U2Njg2ZGNlZmU1NTU2NDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8wGZxCVaQR6SAj/2KSihpimT2r0
a7k6uOIr5O4Wr4N2jG7lKyWdqMhp01pO8rSNU98OwrLvE3liruThAA3enzQgsBII
jdZ72gRzPftrwTDai4TKC1G1KvFM39+ApPhwL7gJ7J3LHllT9YZXMYGh54fEbhwC
w2FhKhy18q/PiGdnBjKUax8bxIqgGCPTRffekDR5+glZ03QpO+rmMDoDRnfQh/Gd
pUwIMZtPPZpva3018L0jsNhpXWcO14kBoPvElnYQRHK031UORpu3f9MXoU1ZLPVW
MfqANSJrKGMYAcaihQnULYww5uwjU1DqdVgr7ddc0RVQa+19iV0QOmQA8QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEeO61qvpSZLW5TOPmaG3O/lVWR7MB8GA1UdIwQY
MBaAFHFgHAuLE8wSEBf20lEXrB/QZkNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kNWE0OWEtNGYxYS00OTYxLTljMWYt
NzZiMDMyNWMzYjA3LzEvUjQ3cldxLWxKa3RibE00LVpvYmM3LVZWWkhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9kNWE0OWEtNGYxYS00OTYxLTljMWYtNzZiMDMyNWMzYjA3
LzEvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgCxgDAN
BgkqhkiG9w0BAQsFAAOCAQEAsJQEbHN0AeDoVIUKQotU8g5AgbGbwFlK9djigyJp
OS6nBlgDsYuNHZLipoo79AyL95Q7grvvt9CJaBUuJZ6MOwqdQorMX9atOg7uivr6
4ON5H1hAJ1r8T472CGft2jBuo09PLh2wwO85cE2fK1YgXuvBGhz0oWPne4EZNuzT
sgrBPTreNRfqrh53z9dordDDmV9tjLhBwqNPfsbW1JXOeAMmr32i4WafK9+ClWIN
VPxgGzQnhrqNu5945YVNRwsaZsbOUNqz7PVMu/jvqNbb1tmbaA5zCzn83E05803w
NhmOCk4avOsc1VQoVQVgN9zrgcx7Umg+HIQ8E8QfBLMY0g==
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:25:46 2024 by rpki-client on console-ams.rpki-client.org