Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/KfMdCAK55kYeYk0Nl8XbR2sdgz8.roa
File: KfMdCAK55kYeYk0Nl8XbR2sdgz8.roa (raw, json)
Hash identifier: 7bY2qsX3hvXe8+D6HrEXRI+ycW4GGOIw264mLPcjmcE=
Subject key identifier: 29:F3:1D:08:02:B9:E6:46:1E:62:4D:0D:97:C5:DB:47:6B:1D:83:3F
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D33424AB44E8E6A0024F021199FF9
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/KfMdCAK55kYeYk0Nl8XbR2sdgz8.roa
Signing time: Mon 01 Jan 2024 00:29:45 +0000
ROA not before: Mon 01 Jan 2024 00:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208498
IP address blocks: 2a0e:aa01:ab10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:33:42:4a:b4:4e:8e:6a:00:24:f0:21:19:9f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29f31d0802b9e6461e624d0d97c5db476b1d833f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:75:2e:4b:36:a0:d4:66:93:c9:a7:b8:91:
22:fc:85:d3:23:af:cc:05:33:df:b2:6e:d2:ad:a9:
e8:80:06:c4:c7:45:87:f0:20:23:1b:b0:5e:a9:bb:
a0:20:72:2b:97:80:8b:bc:cc:6f:f6:f6:02:ba:50:
51:6e:d5:86:c2:72:72:8c:f2:9b:3d:dd:76:02:50:
c1:db:36:da:43:6b:62:7e:65:c2:4e:b1:ac:ba:4b:
d1:20:d9:27:96:b7:4f:a7:e2:8b:f0:f0:9c:3e:fb:
81:99:33:d2:b8:d2:6d:80:53:e4:97:f9:51:ee:d6:
87:09:7a:b8:e6:11:a2:63:08:a8:38:f5:01:22:1a:
03:88:f9:ca:38:95:1e:a9:ed:80:e7:60:62:5a:bf:
0a:6f:ef:9f:1b:7f:d5:fd:eb:b9:2c:6a:87:e1:22:
ae:f2:dc:b2:dd:e5:12:15:60:a8:00:9c:2a:60:87:
8d:8a:db:59:19:1e:62:8c:8e:48:05:cb:90:a0:b2:
5d:dc:e6:83:e3:78:90:42:a4:86:18:ed:46:38:84:
85:b1:30:16:a7:a1:82:b8:a3:b3:af:09:41:9c:36:
6a:86:00:48:34:53:b2:d8:83:68:46:fb:19:d7:f9:
82:d3:e6:01:74:2e:17:b9:19:bd:7f:5c:1b:4a:ea:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F3:1D:08:02:B9:E6:46:1E:62:4D:0D:97:C5:DB:47:6B:1D:83:3F
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/KfMdCAK55kYeYk0Nl8XbR2sdgz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa01:ab10::/44
Signature Algorithm: sha256WithRSAEncryption
7a:27:6f:51:10:3b:cd:e6:df:f1:5e:5d:a2:ee:c7:9f:19:ce:
64:e6:41:91:87:7d:02:81:41:5b:d5:80:98:a3:d8:b9:c6:26:
35:0d:84:59:ca:bc:0c:06:e2:cf:fd:65:6c:b6:21:11:9b:a1:
8d:ce:57:4a:be:78:13:73:aa:f0:9a:5d:f4:f8:c9:85:f4:b4:
1d:97:52:46:49:e6:22:10:4d:3b:7c:48:f8:3e:d6:1c:6d:78:
dd:07:95:b6:cb:3f:cc:7f:2f:46:bc:c4:e4:27:ae:82:ab:0c:
b9:ed:38:9c:89:61:95:c4:c7:c9:73:ab:1c:3e:43:2e:2b:5c:
75:27:87:06:4e:95:81:b4:a3:8d:8e:ec:fc:74:84:37:f7:3a:
9b:f8:6e:bc:17:e4:6a:29:3e:51:53:78:ea:2c:be:13:16:28:
32:89:8b:1b:92:d7:15:21:5b:71:74:ee:06:bc:14:32:b0:25:
85:e5:da:8f:9d:60:54:9e:07:82:e6:57:06:f4:28:ac:29:01:
72:fc:48:7c:db:12:23:bc:a7:85:76:13:48:f8:c9:d0:b7:70:
96:d3:3c:dc:f8:28:a8:fc:7f:19:dc:57:36:1a:66:9c:eb:44:
5a:71:09:42:f3:ea:34:d5:02:af:4d:aa:4a:c2:e3:ea:17:22:
ce:b5:cc:b3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzCbTNCSrROjmoAJPAhGZ/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjQwMTAxMDAyOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWYzMWQwODAyYjllNjQ2MWU2MjRkMGQ5N2M1ZGI0NzZiMWQ4MzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF91Lks2oNRmk8mnuJEi/IXTI6/M
BTPfsm7SranogAbEx0WH8CAjG7BeqbugIHIrl4CLvMxv9vYCulBRbtWGwnJyjPKb
Pd12AlDB2zbaQ2tifmXCTrGsukvRINknlrdPp+KL8PCcPvuBmTPSuNJtgFPkl/lR
7taHCXq45hGiYwioOPUBIhoDiPnKOJUeqe2A52BiWr8Kb++fG3/V/eu5LGqH4SKu
8tyy3eUSFWCoAJwqYIeNittZGR5ijI5IBcuQoLJd3OaD43iQQqSGGO1GOISFsTAW
p6GCuKOzrwlBnDZqhgBINFOy2INoRvsZ1/mC0+YBdC4XuRm9f1wbSup84QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCnzHQgCueZGHmJNDZfF20drHYM/MB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvS2ZNZENBSzU1a1llWWswTmw4WGJSMnNkZ3o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qAasQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB6J29REDvN5t/xXl2i7sefGc5k5kGRh30CgUFb
1YCYo9i5xiY1DYRZyrwMBuLP/WVstiERm6GNzldKvngTc6rwml30+MmF9LQdl1JG
SeYiEE07fEj4PtYcbXjdB5W2yz/Mfy9GvMTkJ66Cqwy57TiciWGVxMfJc6scPkMu
K1x1J4cGTpWBtKONjuz8dIQ39zqb+G68F+RqKT5RU3jqLL4TFigyiYsbktcVIVtx
dO4GvBQysCWF5dqPnWBUngeC5lcG9CisKQFy/Eh82xIjvKeFdhNI+MnQt3CW0zzc
+Cio/H8Z3Fc2Gmac60RacQlC8+o01QKvTapKwuPqFyLOtcyz
-----END CERTIFICATE-----
Generated at Fri May 3 20:51:56 2024 by rpki-client on console-fra.rpki-client.org