Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/CGayfejSPPgxycTHKM3PHwsuzLU.roa
File: CGayfejSPPgxycTHKM3PHwsuzLU.roa (raw, json)
Hash identifier: AGqpDLXElBn4u1x9JqsPvMGa+rSAKC5GCC6O4FoZxCI=
Subject key identifier: 08:66:B2:7D:E8:D2:3C:F8:31:C9:C4:C7:28:CD:CF:1F:0B:2E:CC:B5
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D40839FBE978CB31C4C3C40F152E0
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/CGayfejSPPgxycTHKM3PHwsuzLU.roa
Signing time: Mon 01 Jan 2024 00:29:49 +0000
ROA not before: Mon 01 Jan 2024 00:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211176
IP address blocks: 2a0e:aa07:e020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:40:83:9f:be:97:8c:b3:1c:4c:3c:40:f1:52:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0866b27de8d23cf831c9c4c728cdcf1f0b2eccb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:bb:df:fc:a1:f5:8c:2d:07:ec:4c:63:7e:
59:7f:65:17:02:8f:92:70:23:77:b0:0a:ec:1f:98:
53:51:37:be:cd:c0:7c:59:be:ab:06:39:d7:64:7e:
95:d5:f8:d5:e6:e4:a4:0a:59:1b:6e:7c:8f:c5:29:
8c:30:7c:04:4e:6f:d4:9d:a3:22:f0:3d:90:4e:1a:
f5:c1:e1:d3:94:7f:ac:16:e0:1d:ac:f6:25:7f:38:
1a:3d:9e:58:b0:f5:09:e8:af:41:b0:0a:5b:91:75:
bd:87:ac:b2:bb:3e:ff:59:2d:5a:f7:c0:04:fe:b9:
a2:33:ad:50:2b:45:ae:b9:3a:03:e9:69:69:c9:fa:
f8:b3:a6:85:b3:f7:6b:a5:fb:1a:cd:a0:e3:b6:e2:
b3:76:50:35:27:2d:23:62:78:21:86:5c:7c:24:b9:
36:cd:3c:35:3a:75:47:e7:04:73:43:25:35:e0:5f:
b2:d3:0d:86:64:7b:87:7d:d4:a3:11:27:d6:10:98:
97:c5:35:c8:8f:55:f2:f8:46:8c:32:89:2c:51:36:
3a:63:ae:e1:4f:e7:a1:3b:71:01:c2:71:b0:82:12:
4b:28:b5:df:fe:2f:82:df:b3:08:7f:af:b9:d3:7a:
60:6e:51:d1:5c:6a:83:7f:79:96:8b:88:d5:5e:bc:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:66:B2:7D:E8:D2:3C:F8:31:C9:C4:C7:28:CD:CF:1F:0B:2E:CC:B5
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/CGayfejSPPgxycTHKM3PHwsuzLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e020::/48
Signature Algorithm: sha256WithRSAEncryption
b2:e6:85:bb:5d:87:b5:a5:9a:c7:55:c8:53:b1:60:a0:89:32:
7b:73:65:62:a1:a0:17:0d:38:cb:e0:3d:9e:47:99:df:ae:a4:
90:aa:fd:25:39:83:de:31:8e:ea:f7:e7:d6:07:df:31:62:f1:
9b:aa:de:97:21:8b:4f:41:b7:e3:60:11:8b:22:51:3d:ae:f6:
ff:c7:5e:5c:c9:a7:59:9c:2d:81:63:28:cc:c9:18:c2:a2:49:
25:a1:5b:f3:0d:a8:da:ee:b7:8f:35:13:5c:49:de:02:3d:ee:
4c:6c:98:0d:42:0c:93:a7:a1:33:b9:20:03:23:ac:10:43:20:
16:96:31:82:0c:25:37:32:d0:dd:67:5b:ba:38:59:40:53:a3:
8a:07:f5:24:ee:94:c5:cd:cc:c7:25:60:43:d0:89:c9:1c:4c:
25:16:8b:b4:dd:e0:30:ce:17:a2:27:90:9a:8f:c1:57:f9:eb:
8d:15:81:2d:be:02:7f:f8:88:ca:42:e7:2e:2a:7e:29:68:38:
87:c1:b7:f1:00:8c:9d:da:e0:b1:25:b4:f6:89:81:50:ea:8d:
a2:49:1d:cc:97:26:91:c1:03:8d:ea:39:36:cc:de:ad:d2:8f:
b4:27:b9:d5:06:b7:d9:0f:eb:c2:45:ff:d2:f4:da:18:ba:06:
24:b0:bf:db
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzCbUCDn76XjLMcTDxA8VLgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjQwMTAxMDAyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODY2YjI3ZGU4ZDIzY2Y4MzFjOWM0YzcyOGNkY2YxZjBiMmVjY2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIa73/yh9YwtB+xMY35Zf2UXAo+S
cCN3sArsH5hTUTe+zcB8Wb6rBjnXZH6V1fjV5uSkClkbbnyPxSmMMHwETm/UnaMi
8D2QThr1weHTlH+sFuAdrPYlfzgaPZ5YsPUJ6K9BsApbkXW9h6yyuz7/WS1a98AE
/rmiM61QK0WuuToD6Wlpyfr4s6aFs/drpfsazaDjtuKzdlA1Jy0jYnghhlx8JLk2
zTw1OnVH5wRzQyU14F+y0w2GZHuHfdSjESfWEJiXxTXIj1Xy+EaMMoksUTY6Y67h
T+ehO3EBwnGwghJLKLXf/i+C37MIf6+503pgblHRXGqDf3mWi4jVXrzL0wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAhmsn3o0jz4McnExyjNzx8LLsy1MB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvQ0dheWZlalNQUGd4eWNUSEtNM1BId3N1ekxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+Ag
MA0GCSqGSIb3DQEBCwUAA4IBAQCy5oW7XYe1pZrHVchTsWCgiTJ7c2VioaAXDTjL
4D2eR5nfrqSQqv0lOYPeMY7q9+fWB98xYvGbqt6XIYtPQbfjYBGLIlE9rvb/x15c
yadZnC2BYyjMyRjCokkloVvzDaja7rePNRNcSd4CPe5MbJgNQgyTp6EzuSADI6wQ
QyAWljGCDCU3MtDdZ1u6OFlAU6OKB/Uk7pTFzczHJWBD0InJHEwlFou03eAwzhei
J5Caj8FX+euNFYEtvgJ/+IjKQucuKn4paDiHwbfxAIyd2uCxJbT2iYFQ6o2iSR3M
lyaRwQON6jk2zN6t0o+0J7nVBrfZD+vCRf/S9NoYugYksL/b
-----END CERTIFICATE-----
Generated at Sat May 4 00:34:50 2024 by rpki-client on console-fra.rpki-client.org