Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/jwax1sKi_DtqfL4qoatyB5YqK5I.roa
File: jwax1sKi_DtqfL4qoatyB5YqK5I.roa (raw, json)
Hash identifier: syaTpon20zjY05Q3sBp3ckiqKGByIlBycQPEgkGnOhk=
Subject key identifier: 8F:06:B1:D6:C2:A2:FC:3B:6A:7C:BE:2A:A1:AB:72:07:96:2A:2B:92
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D245A68B482CE49828B41DB4FC075
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/jwax1sKi_DtqfL4qoatyB5YqK5I.roa
Signing time: Mon 01 Jan 2024 00:29:41 +0000
ROA not before: Mon 01 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58235
IP address blocks: 2a0e:aa01:ab01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:24:5a:68:b4:82:ce:49:82:8b:41:db:4f:c0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f06b1d6c2a2fc3b6a7cbe2aa1ab7207962a2b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:35:bd:d2:7d:ce:66:07:55:bb:60:f3:fc:
79:f4:46:95:cc:e2:8f:68:8f:2e:66:77:43:24:54:
5b:71:10:11:8e:41:2e:c3:e8:ef:68:c1:8a:eb:2e:
18:46:84:db:95:75:ed:17:10:ce:70:bd:a9:1b:12:
1d:96:35:c9:89:5e:72:bb:bf:f5:a4:89:06:ce:02:
09:18:f0:a1:8c:00:fd:32:e0:64:66:0e:35:14:db:
6d:2f:05:46:7d:54:c9:83:de:9a:16:91:18:e1:46:
ae:57:4e:c1:0b:10:29:78:2b:9a:6e:90:13:e0:ac:
1a:95:6b:51:0f:43:41:0f:7c:b2:65:f5:70:53:99:
c9:e1:a4:71:82:17:5e:cd:03:7d:86:24:5a:e6:eb:
8e:c3:fe:08:c9:f5:f6:20:4c:60:6f:39:21:72:34:
08:5b:5d:cd:e2:f2:08:97:e3:10:c6:d9:cf:3c:7d:
53:e6:15:65:1f:cd:62:80:40:fa:3c:e7:a6:77:f3:
64:d6:80:b2:88:bc:3f:93:b5:8b:65:e2:b1:df:b3:
7e:c7:2b:f4:df:b9:8d:41:c8:c5:cc:2f:b9:a2:34:
0a:7d:2f:41:45:a6:ee:88:58:29:2c:a7:a4:6d:76:
31:0b:2c:f6:f5:dc:69:1b:6b:99:6d:a3:84:f2:88:
fc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:06:B1:D6:C2:A2:FC:3B:6A:7C:BE:2A:A1:AB:72:07:96:2A:2B:92
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/jwax1sKi_DtqfL4qoatyB5YqK5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa01:ab01::/48
Signature Algorithm: sha256WithRSAEncryption
17:d9:b9:a3:0e:47:5d:9d:8c:f1:75:2f:b2:9c:d0:42:a1:fe:
00:21:83:6f:b9:88:a1:23:06:c0:46:ce:80:00:80:87:64:08:
e5:05:f2:65:e8:bf:ab:52:c6:59:9f:c6:cc:de:7c:1a:24:df:
bb:45:51:0b:ac:30:99:6f:b1:c9:4b:ee:dd:f0:8d:2a:3e:23:
65:2d:ea:d8:e5:38:ab:61:7a:ac:82:51:dd:1b:1d:05:98:42:
a9:ec:81:63:71:a8:b8:71:7b:27:4b:af:14:36:18:f2:cf:59:
d6:d3:b0:7c:de:f5:12:2c:d4:2b:62:47:0d:15:48:b1:92:e0:
1c:59:b5:d8:ea:06:47:24:4e:c3:b5:af:f8:02:1f:48:71:14:
49:a6:a3:b8:b8:b7:a5:55:7a:de:3f:a1:ac:bf:27:18:f7:de:
38:3e:5d:d3:43:5a:95:e9:2b:48:ae:0f:ed:62:13:c0:17:c0:
2e:66:08:7b:37:9c:0e:7f:7d:72:50:21:11:0b:1b:5b:90:30:
07:db:32:eb:b3:41:e6:17:06:f8:34:ed:c9:3e:13:1e:ca:d8:
96:f7:54:31:04:1b:f2:87:68:f2:2d:0b:c6:29:96:c7:53:f6:
76:33:2a:4c:08:94:0d:21:92:6a:9f:94:b3:5e:a2:b0:a4:d0:
cb:6b:37:02
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzCbSRaaLSCzkmCi0HbT8B1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjQwMTAxMDAyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjA2YjFkNmMyYTJmYzNiNmE3Y2JlMmFhMWFiNzIwNzk2MmEyYjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDU1vdJ9zmYHVbtg8/x59EaVzOKP
aI8uZndDJFRbcRARjkEuw+jvaMGK6y4YRoTblXXtFxDOcL2pGxIdljXJiV5yu7/1
pIkGzgIJGPChjAD9MuBkZg41FNttLwVGfVTJg96aFpEY4UauV07BCxApeCuabpAT
4KwalWtRD0NBD3yyZfVwU5nJ4aRxghdezQN9hiRa5uuOw/4IyfX2IExgbzkhcjQI
W13N4vIIl+MQxtnPPH1T5hVlH81igED6POemd/Nk1oCyiLw/k7WLZeKx37N+xyv0
37mNQcjFzC+5ojQKfS9BRabuiFgpLKekbXYxCyz29dxpG2uZbaOE8oj8JwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI8GsdbCovw7any+KqGrcgeWKiuSMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvandheDFzS2lfRHRxZkw0cW9hdHlCNVlxSzVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qAasB
MA0GCSqGSIb3DQEBCwUAA4IBAQAX2bmjDkddnYzxdS+ynNBCof4AIYNvuYihIwbA
Rs6AAICHZAjlBfJl6L+rUsZZn8bM3nwaJN+7RVELrDCZb7HJS+7d8I0qPiNlLerY
5TirYXqsglHdGx0FmEKp7IFjcai4cXsnS68UNhjyz1nW07B83vUSLNQrYkcNFUix
kuAcWbXY6gZHJE7Dta/4Ah9IcRRJpqO4uLelVXreP6GsvycY9944Pl3TQ1qV6StI
rg/tYhPAF8AuZgh7N5wOf31yUCERCxtbkDAH2zLrs0HmFwb4NO3JPhMeytiW91Qx
BBvyh2jyLQvGKZbHU/Z2MypMCJQNIZJqn5SzXqKwpNDLazcC
-----END CERTIFICATE-----
Generated at Fri May 3 18:35:15 2024 by rpki-client on console-fra.rpki-client.org