Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/0r90XKBexsP8Jili7_o0-fvhBdE.roa
File: 0r90XKBexsP8Jili7_o0-fvhBdE.roa (raw, json)
Hash identifier: 3m8kg5tGPlnM0xfX4DxE95jkZftQDwOfZgkFjAeFTZI=
Subject key identifier: D2:BF:74:5C:A0:5E:C6:C3:FC:26:29:62:EF:FA:34:F9:FB:E1:05:D1
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D3F93A27F0E0E38F4E2A095BD7A85
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/0r90XKBexsP8Jili7_o0-fvhBdE.roa
Signing time: Mon 01 Jan 2024 00:29:48 +0000
ROA not before: Mon 01 Jan 2024 00:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210934
IP address blocks: 2a0e:aa07:e024::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3f:93:a2:7f:0e:0e:38:f4:e2:a0:95:bd:7a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2bf745ca05ec6c3fc262962effa34f9fbe105d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d7:ba:7d:04:3d:d6:1d:70:cc:0a:c0:e5:82:
97:83:c6:df:c1:97:d3:b6:ac:5a:2b:39:be:97:bf:
f7:7d:20:ae:d9:e9:a5:e4:1b:4c:9b:4a:c2:78:0a:
ac:e0:75:40:a8:90:5e:f6:67:fc:d3:f7:ba:d5:8a:
fe:5d:87:d2:7b:a2:5c:a8:d2:fd:74:8e:a3:97:95:
1e:e6:de:62:1d:1c:f8:da:13:de:60:8c:22:e6:19:
68:30:3b:b6:b8:93:af:9a:ec:04:12:bd:0e:37:23:
f5:65:d4:bf:de:c3:4a:87:80:b0:29:e0:fe:fe:27:
9a:5b:93:a4:51:c7:4b:9e:27:83:77:89:95:41:19:
53:0e:de:f9:8b:7d:f1:47:9d:91:ec:9d:1e:3c:c9:
d9:ed:06:71:cb:59:c3:78:5b:53:1f:44:85:25:0c:
8a:b2:1c:39:50:48:a2:69:74:6b:03:53:ba:c6:25:
07:b0:54:18:49:81:f5:a5:ba:02:db:e8:d7:30:09:
de:50:9f:f3:c8:42:c6:36:af:64:4c:61:80:9d:4e:
4c:1e:5b:71:82:2d:d4:35:c7:8a:1b:a8:83:b3:b4:
5c:5f:ec:0d:19:5e:3d:20:cd:dd:b4:45:cb:15:da:
e2:de:24:c2:33:e7:a2:7b:e3:4b:2e:6d:50:4b:66:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BF:74:5C:A0:5E:C6:C3:FC:26:29:62:EF:FA:34:F9:FB:E1:05:D1
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/0r90XKBexsP8Jili7_o0-fvhBdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e024::/48
Signature Algorithm: sha256WithRSAEncryption
37:1e:b7:22:93:71:24:48:7b:96:b0:8f:5a:2b:af:ec:39:cf:
b1:74:be:bf:a4:e8:be:30:72:35:6a:24:be:95:c1:4f:48:f1:
f0:6a:e3:24:57:31:7a:08:22:2e:de:b3:76:51:4b:6b:b0:67:
fe:73:bb:8d:37:a8:08:16:64:b8:a8:88:a9:ed:25:8c:5a:51:
5a:e4:09:12:3b:26:24:86:4c:a0:1f:cc:7e:02:4d:d2:28:48:
fa:64:43:6a:16:e0:a3:15:94:42:c1:f2:d0:45:56:3f:3f:90:
6e:4d:b9:5d:6c:3c:60:a8:e1:20:ea:40:c6:e9:2a:a2:d3:43:
36:b3:8d:bd:92:bd:c8:a1:d5:b2:d8:56:a2:97:ef:b2:76:70:
14:cf:b5:98:1c:16:f9:14:ac:36:60:72:3e:44:db:0c:e9:c2:
7d:39:59:c2:2c:db:3f:b8:bc:2b:a3:0d:42:39:11:e6:02:f4:
71:78:d9:46:21:3d:51:4c:59:27:ab:30:08:11:db:69:48:83:
01:bf:06:85:d8:9b:42:34:39:77:36:e8:f3:d0:19:b0:f5:76:
93:fb:8b:87:ca:a5:4c:2f:44:58:e9:f5:ec:5c:6b:be:ea:d8:
aa:b3:84:b8:aa:fd:5a:26:8f:48:b9:bc:89:31:f2:8b:d4:f4:
54:3f:58:e6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzCbT+Ton8ODjj04qCVvXqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjQwMTAxMDAyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmJmNzQ1Y2EwNWVjNmMzZmMyNjI5NjJlZmZhMzRmOWZiZTEwNWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjte6fQQ91h1wzArA5YKXg8bfwZfT
tqxaKzm+l7/3fSCu2eml5BtMm0rCeAqs4HVAqJBe9mf80/e61Yr+XYfSe6JcqNL9
dI6jl5Ue5t5iHRz42hPeYIwi5hloMDu2uJOvmuwEEr0ONyP1ZdS/3sNKh4CwKeD+
/ieaW5OkUcdLnieDd4mVQRlTDt75i33xR52R7J0ePMnZ7QZxy1nDeFtTH0SFJQyK
shw5UEiiaXRrA1O6xiUHsFQYSYH1pboC2+jXMAneUJ/zyELGNq9kTGGAnU5MHltx
gi3UNceKG6iDs7RcX+wNGV49IM3dtEXLFdri3iTCM+eie+NLLm1QS2bLYwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNK/dFygXsbD/CYpYu/6NPn74QXRMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvMHI5MFhLQmV4c1A4SmlsaTdfbzAtZnZoQmRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+Ak
MA0GCSqGSIb3DQEBCwUAA4IBAQA3Hrcik3EkSHuWsI9aK6/sOc+xdL6/pOi+MHI1
aiS+lcFPSPHwauMkVzF6CCIu3rN2UUtrsGf+c7uNN6gIFmS4qIip7SWMWlFa5AkS
OyYkhkygH8x+Ak3SKEj6ZENqFuCjFZRCwfLQRVY/P5BuTbldbDxgqOEg6kDG6Sqi
00M2s429kr3IodWy2Fail++ydnAUz7WYHBb5FKw2YHI+RNsM6cJ9OVnCLNs/uLwr
ow1CORHmAvRxeNlGIT1RTFknqzAIEdtpSIMBvwaF2JtCNDl3Nujz0Bmw9XaT+4uH
yqVML0RY6fXsXGu+6tiqs4S4qv1aJo9IubyJMfKL1PRUP1jm
-----END CERTIFICATE-----
Generated at Fri May 3 20:51:56 2024 by rpki-client on console-fra.rpki-client.org