Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/pKI3eBEQp68WDIQEUJhwqRWPYsc.roa
File: pKI3eBEQp68WDIQEUJhwqRWPYsc.roa (raw, json)
Hash identifier: IpOvW8QzxMOVNRrSBlsgKqV3tRaohypVBi9YY6Hpvqw=
Subject key identifier: A4:A2:37:78:11:10:A7:AF:16:0C:84:04:50:98:70:A9:15:8F:62:C7
Certificate issuer: /CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
Certificate serial: 018CC26D346DB04205EB588CC13303840662
Authority key identifier: 89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/pKI3eBEQp68WDIQEUJhwqRWPYsc.roa
Signing time: Mon 01 Jan 2024 00:29:45 +0000
ROA not before: Mon 01 Jan 2024 00:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2001:678:f64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:34:6d:b0:42:05:eb:58:8c:c1:33:03:84:06:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
Validity
Not Before: Jan 1 00:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4a237781110a7af160c8404509870a9158f62c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:aa:28:28:07:74:1b:3d:1f:4a:cb:1c:db:
ce:38:4d:45:6b:32:d8:11:65:e0:a6:ef:04:0f:1a:
f5:c0:42:2a:e6:33:d2:06:6f:9b:ac:0d:32:ac:e5:
f6:46:d2:d6:89:a9:28:70:b1:32:db:5a:bd:42:d1:
86:3f:51:fe:29:22:40:dd:bb:e9:f1:22:ba:a6:cb:
05:ba:9b:fb:8c:61:89:fc:32:1f:51:92:ea:54:92:
8c:79:d6:94:60:06:e4:24:81:7d:24:06:a5:b3:5a:
08:a7:95:c6:c4:3a:f8:c7:cb:04:f1:80:94:19:82:
9e:0c:b7:e5:e4:66:c0:ac:91:77:e3:4f:22:d6:aa:
39:e3:d2:86:b2:7a:a4:16:45:80:08:8f:c6:c1:bc:
9e:eb:b2:7c:0c:78:1e:75:48:9b:7c:64:4c:0c:9f:
f6:7f:8c:59:93:e9:dc:cb:8b:c4:e0:67:e1:b9:fb:
f0:cd:bd:40:ce:24:8c:7a:b9:1d:96:fd:4e:2a:44:
21:1d:9c:9d:48:79:96:4f:2f:82:6e:39:e9:53:c8:
38:a6:86:0b:ae:2e:2f:14:61:f2:cf:35:31:f9:7b:
37:23:8d:ef:2b:5c:97:8a:af:54:9e:1c:c5:95:af:
63:d0:2a:48:6d:2d:87:6e:7c:d3:c3:48:f2:5a:1e:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A2:37:78:11:10:A7:AF:16:0C:84:04:50:98:70:A9:15:8F:62:C7
X509v3 Authority Key Identifier:
keyid:89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/pKI3eBEQp68WDIQEUJhwqRWPYsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:8c:bf:90:17:16:c4:53:f5:d1:1e:66:d9:f3:94:47:d4:00:
05:ab:d4:4b:07:4f:f5:c9:86:d1:5a:3a:c2:58:90:25:f2:e8:
07:cf:ba:a7:2f:4c:63:fa:61:04:01:aa:2d:7d:0d:43:0f:d0:
c1:5e:af:32:f5:8d:9b:4d:5f:d0:62:03:cf:88:d6:49:cf:f4:
90:a9:e6:1a:81:de:41:ea:43:5b:3e:29:c7:6c:61:d8:c5:31:
f4:85:0d:c4:b0:4d:5a:c5:d2:42:ac:fa:be:2d:43:49:f7:77:
bd:c3:e6:0a:a9:ce:d9:b8:42:b1:12:69:28:e3:b4:d0:13:6b:
d9:f0:be:51:bc:d2:2b:d4:95:6e:52:a7:cc:87:78:bc:db:4b:
ce:36:83:74:4c:ec:0c:16:82:74:45:eb:62:0c:8c:67:89:97:
f8:86:2f:cf:ad:29:57:e3:ed:58:c0:89:20:47:e9:f8:3d:88:
57:a4:65:0f:d0:53:8d:9d:4c:49:46:6c:61:8c:05:7d:6d:d6:
61:f0:56:fd:1d:59:e5:40:3a:06:b7:87:a9:c0:fc:d6:8b:d8:
a8:cc:77:58:43:be:be:b1:e2:60:8c:a4:5c:a2:4a:ba:3f:06:
84:5d:fd:b1:56:38:f6:03:47:1c:bd:1c:3b:f6:38:1b:66:d9:
80:e3:e2:2e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzCbTRtsEIF61iMwTMDhAZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YmQ1NGU3ZDY5YzE0N2Q2YjU2ZjhjNmEyMDlkM2RlYWVh
Mjc3ZGQwHhcNMjQwMTAxMDAyOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGEyMzc3ODExMTBhN2FmMTYwYzg0MDQ1MDk4NzBhOTE1OGY2MmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPCqKCgHdBs9H0rLHNvOOE1FazLY
EWXgpu8EDxr1wEIq5jPSBm+brA0yrOX2RtLWiakocLEy21q9QtGGP1H+KSJA3bvp
8SK6pssFupv7jGGJ/DIfUZLqVJKMedaUYAbkJIF9JAals1oIp5XGxDr4x8sE8YCU
GYKeDLfl5GbArJF3408i1qo549KGsnqkFkWACI/Gwbye67J8DHgedUibfGRMDJ/2
f4xZk+ncy4vE4Gfhufvwzb1AziSMerkdlv1OKkQhHZydSHmWTy+CbjnpU8g4poYL
ri4vFGHyzzUx+Xs3I43vK1yXiq9UnhzFla9j0CpIbS2HbnzTw0jyWh7GuQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKSiN3gREKevFgyEBFCYcKkVj2LHMB8GA1UdIwQY
MBaAFIm9VOfWnBR9a1b4xqIJ096uonfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWIxVTU5YWNGSDFyVnZqR29nblQzcTZpZDkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kODAwYmUtNGFjZi00OWYyLTk2OWQt
ZGIyMjdjNDk2ODA0LzEvcEtJM2VCRVFwNjhXRElRRVVKaHdxUldQWXNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kODAwYmUtNGFjZi00OWYyLTk2OWQtZGIyMjdjNDk2ODA0
LzEvaWIxVTU5YWNGSDFyVnZqR29nblQzcTZpZDkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA9k
MA0GCSqGSIb3DQEBCwUAA4IBAQANjL+QFxbEU/XRHmbZ85RH1AAFq9RLB0/1yYbR
WjrCWJAl8ugHz7qnL0xj+mEEAaotfQ1DD9DBXq8y9Y2bTV/QYgPPiNZJz/SQqeYa
gd5B6kNbPinHbGHYxTH0hQ3EsE1axdJCrPq+LUNJ93e9w+YKqc7ZuEKxEmko47TQ
E2vZ8L5RvNIr1JVuUqfMh3i820vONoN0TOwMFoJ0RetiDIxniZf4hi/PrSlX4+1Y
wIkgR+n4PYhXpGUP0FONnUxJRmxhjAV9bdZh8Fb9HVnlQDoGt4epwPzWi9iozHdY
Q76+seJgjKRcokq6PwaEXf2xVjj2A0ccvRw79jgbZtmA4+Iu
-----END CERTIFICATE-----
Generated at Thu May 2 18:43:56 2024 by rpki-client on console-fra.rpki-client.org