Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/WXDdDzTwfzyyriRRG19spnDACXM.roa
File: WXDdDzTwfzyyriRRG19spnDACXM.roa (raw, json)
Hash identifier: DYoJQ2QkjjrvqiqbBb3wdjGKMJRQlIOWK8xQDl8EqXY=
Subject key identifier: 59:70:DD:0F:34:F0:7F:3C:B2:AE:24:51:1B:5F:6C:A6:70:C0:09:73
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018CC801D76863235CFD894E9094C2120761
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/WXDdDzTwfzyyriRRG19spnDACXM.roa
Signing time: Tue 02 Jan 2024 02:30:12 +0000
ROA not before: Tue 02 Jan 2024 02:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39220
IP address blocks: 2a09:7:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d7:68:63:23:5c:fd:89:4e:90:94:c2:12:07:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 2 02:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5970dd0f34f07f3cb2ae24511b5f6ca670c00973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:58:6e:05:94:e2:57:2d:95:f2:cb:3a:77:e9:
5d:fe:3b:89:43:c4:99:a6:21:78:e4:23:2f:c0:ec:
9e:a6:78:f5:d1:bb:5a:b6:86:2b:8a:09:38:63:01:
01:36:12:b2:30:bd:9b:97:d5:6d:38:09:be:57:7f:
a2:af:df:d5:7f:6a:2f:43:82:f5:ee:de:28:c7:34:
40:0f:2c:bf:02:0f:ad:13:34:be:7f:ed:4b:64:cb:
0f:07:52:15:a4:78:17:f6:90:20:c6:3f:d9:c9:ea:
35:61:fe:a2:b7:17:b3:2c:70:9d:69:9b:41:87:60:
cd:2b:03:45:ac:73:d8:13:de:3f:94:11:c1:81:f3:
d8:b5:99:68:c2:67:53:42:7b:b5:45:41:ab:a9:37:
42:f1:0e:25:5f:58:c6:07:52:96:a0:d2:9f:5f:60:
fd:f9:3d:8e:13:f4:06:3f:71:7b:cd:6e:87:cf:7d:
2a:73:ec:8d:e5:19:f7:38:6b:49:fc:33:d1:20:7a:
50:4b:3c:e3:24:3d:39:59:71:04:79:4d:a2:7c:ec:
c2:1f:b6:95:2b:ed:c0:bc:72:90:65:71:6e:6f:99:
08:5a:b3:2f:f3:1b:2f:cd:be:af:aa:99:74:67:3a:
1b:9c:c1:f8:b6:25:21:2c:23:ad:de:26:25:02:af:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:70:DD:0F:34:F0:7F:3C:B2:AE:24:51:1B:5F:6C:A6:70:C0:09:73
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/WXDdDzTwfzyyriRRG19spnDACXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7:2000::/48
Signature Algorithm: sha256WithRSAEncryption
03:a4:8d:7e:53:15:bc:6a:03:32:a2:6e:34:ec:25:f0:27:1c:
40:78:f4:1c:e8:03:0c:d8:7f:6e:d8:d1:82:b1:df:90:fc:76:
0c:0a:58:55:58:16:97:b7:47:a1:44:12:12:0c:cc:bc:8d:15:
59:7a:32:dd:09:01:d7:4a:5b:1a:c4:58:a0:4e:8c:aa:e9:7e:
d0:3f:7b:38:ca:a1:c4:d5:3c:d8:2d:86:c4:0c:7f:ea:d3:d6:
14:a1:68:ce:5a:9c:1a:db:32:0e:5a:54:ff:82:68:7a:da:5c:
7f:f4:73:5e:76:21:a7:e1:73:62:b2:75:f1:3d:4d:6a:8f:db:
47:04:bd:0b:d3:46:71:3d:ee:ef:08:66:36:e4:ff:ae:06:98:
3f:d2:8a:1b:0c:ce:7f:4d:0e:8d:99:77:87:2d:63:38:bb:65:
67:48:34:5b:2c:d8:21:3d:96:a0:b1:33:7f:0d:b0:9f:3b:45:
f7:14:1f:7a:ab:66:ac:dd:39:bc:9b:b1:14:bf:65:cd:af:38:
a1:f8:7e:ed:a5:76:6a:5f:01:b8:9f:6b:1b:37:05:6d:32:e4:
5d:f2:a1:a5:38:39:fe:2d:77:a2:f6:a3:f8:db:ba:8e:d7:99:
ed:15:04:73:11:ad:7a:62:5c:da:b1:ae:18:f9:b4:c9:38:5e:
c9:a3:58:21
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIAddoYyNc/YlOkJTCEgdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjQwMTAyMDIzMDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTcwZGQwZjM0ZjA3ZjNjYjJhZTI0NTExYjVmNmNhNjcwYzAwOTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVhuBZTiVy2V8ss6d+ld/juJQ8SZ
piF45CMvwOyepnj10btatoYrigk4YwEBNhKyML2bl9VtOAm+V3+ir9/Vf2ovQ4L1
7t4oxzRADyy/Ag+tEzS+f+1LZMsPB1IVpHgX9pAgxj/Zyeo1Yf6itxezLHCdaZtB
h2DNKwNFrHPYE94/lBHBgfPYtZlowmdTQnu1RUGrqTdC8Q4lX1jGB1KWoNKfX2D9
+T2OE/QGP3F7zW6Hz30qc+yN5Rn3OGtJ/DPRIHpQSzzjJD05WXEEeU2ifOzCH7aV
K+3AvHKQZXFub5kIWrMv8xsvzb6vqpl0ZzobnMH4tiUhLCOt3iYlAq+OIQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFlw3Q808H88sq4kURtfbKZwwAlzMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvV1hEZER6VHdmenl5cmlSUkcxOXNwbkRBQ1hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgkAByAA
MA0GCSqGSIb3DQEBCwUAA4IBAQADpI1+UxW8agMyom407CXwJxxAePQc6AMM2H9u
2NGCsd+Q/HYMClhVWBaXt0ehRBISDMy8jRVZejLdCQHXSlsaxFigToyq6X7QP3s4
yqHE1TzYLYbEDH/q09YUoWjOWpwa2zIOWlT/gmh62lx/9HNediGn4XNisnXxPU1q
j9tHBL0L00ZxPe7vCGY25P+uBpg/0oobDM5/TQ6NmXeHLWM4u2VnSDRbLNghPZag
sTN/DbCfO0X3FB96q2as3Tm8m7EUv2XNrzih+H7tpXZqXwG4n2sbNwVtMuRd8qGl
ODn+LXei9qP427qO15ntFQRzEa16Ylzasa4Y+bTJOF7Jo1gh
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:55:50 2024 by rpki-client on console-ams.rpki-client.org