Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ogbGCuW2LMZxp1GfJEE5cR4aDr0.roa
File: ogbGCuW2LMZxp1GfJEE5cR4aDr0.roa (raw, json)
Hash identifier: 1BaCz8yH2d4cX/6I2UbCDFYZci3GMSA2d7F/vk/5yuo=
Subject key identifier: A2:06:C6:0A:E5:B6:2C:C6:71:A7:51:9F:24:41:39:71:1E:1A:0E:BD
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018CC801E06C9BA7551C44BF18C2987585C1
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ogbGCuW2LMZxp1GfJEE5cR4aDr0.roa
Signing time: Tue 02 Jan 2024 02:30:15 +0000
ROA not before: Tue 02 Jan 2024 02:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208982
IP address blocks: 2a09:7:2009::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:e0:6c:9b:a7:55:1c:44:bf:18:c2:98:75:85:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 2 02:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a206c60ae5b62cc671a7519f244139711e1a0ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:85:dd:d2:ac:21:69:27:70:46:01:e6:92:b0:
a2:ee:15:6b:e2:d0:84:73:43:54:a8:5c:f0:86:22:
76:d4:6a:32:f8:a9:cf:3b:68:01:a6:26:67:76:2b:
c8:dd:e4:71:39:a1:28:5d:f9:5c:ac:fb:6e:a6:91:
71:bd:be:e1:a8:49:1b:0c:b5:1e:9c:b0:31:bd:f5:
41:64:86:dd:da:a5:c9:10:df:54:a5:9d:cf:60:20:
72:7a:73:b7:e1:f6:6c:f5:0f:78:1f:04:c5:7e:ce:
6c:6e:a7:e0:b5:60:74:70:85:7e:e8:3f:0a:4b:19:
f5:0f:2e:7d:d8:d9:dc:26:51:4b:1d:fc:8a:32:9c:
8a:e7:ac:c1:56:ee:03:0e:aa:77:fd:d5:d3:ba:73:
89:f2:28:87:2c:0d:33:31:b4:21:33:09:a8:fd:64:
8c:0a:e1:2f:f6:8e:00:a9:3f:ca:16:b2:9b:d8:d8:
ca:b0:0b:6d:cc:13:d0:e2:c3:52:ad:f6:a4:f2:34:
51:3d:f9:86:11:cc:a2:2b:e3:10:06:46:47:cc:95:
5d:99:53:cd:4e:77:37:d3:99:bb:f4:9b:71:86:e2:
cf:bc:d2:52:c5:f1:12:b1:86:13:fd:d4:ef:ff:13:
80:4c:15:a5:a9:ec:9f:8c:73:5f:38:ae:3f:56:93:
eb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:06:C6:0A:E5:B6:2C:C6:71:A7:51:9F:24:41:39:71:1E:1A:0E:BD
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ogbGCuW2LMZxp1GfJEE5cR4aDr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7:2009::/48
Signature Algorithm: sha256WithRSAEncryption
60:85:7f:fc:ae:14:46:85:cc:ee:f6:3a:55:ba:e5:cb:90:8a:
03:f1:7e:43:a1:3d:79:72:0a:ef:76:9d:e0:1e:87:b7:f5:1f:
d4:8d:3d:2f:0b:fa:76:ce:92:90:a9:9d:63:92:2a:c9:0f:de:
37:88:99:bd:91:da:9c:41:6c:d1:20:f4:07:8e:a5:78:d9:f2:
69:4d:19:94:08:6a:56:bf:6c:c0:5d:19:f3:80:d9:b3:37:5b:
ee:36:ec:92:26:c6:b8:1d:70:81:4a:ae:52:21:e2:e1:87:a8:
3c:67:1b:ec:82:21:84:5f:b6:a8:5c:c8:87:77:f5:76:aa:a8:
da:f4:f8:64:12:41:1e:89:04:14:e0:68:17:19:0a:fc:eb:cd:
ab:34:c8:26:30:81:c7:61:d3:c8:4a:b0:c3:26:d9:7f:47:b2:
00:45:db:76:7d:fb:a7:45:5f:1c:be:42:ce:61:75:4b:47:04:
5a:e9:d2:2b:a8:58:9f:d4:b7:71:38:7b:92:bb:8c:c3:d0:a8:
98:0a:e0:43:f5:e7:cf:77:fd:2c:3a:22:85:2e:0e:f5:07:20:
8c:54:d5:4e:2f:b1:b1:c0:42:d4:7f:e0:77:96:1e:13:8a:66:
71:87:bd:68:3c:87:2d:54:f2:a3:95:7d:84:8e:a5:86:ca:11:
c4:9a:2d:0c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIAeBsm6dVHES/GMKYdYXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjQwMTAyMDIzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjA2YzYwYWU1YjYyY2M2NzFhNzUxOWYyNDQxMzk3MTFlMWEwZWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIXd0qwhaSdwRgHmkrCi7hVr4tCE
c0NUqFzwhiJ21Goy+KnPO2gBpiZndivI3eRxOaEoXflcrPtuppFxvb7hqEkbDLUe
nLAxvfVBZIbd2qXJEN9UpZ3PYCByenO34fZs9Q94HwTFfs5sbqfgtWB0cIV+6D8K
Sxn1Dy592NncJlFLHfyKMpyK56zBVu4DDqp3/dXTunOJ8iiHLA0zMbQhMwmo/WSM
CuEv9o4AqT/KFrKb2NjKsAttzBPQ4sNSrfak8jRRPfmGEcyiK+MQBkZHzJVdmVPN
Tnc305m79JtxhuLPvNJSxfESsYYT/dTv/xOATBWlqeyfjHNfOK4/VpPrTQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKIGxgrltizGcadRnyRBOXEeGg69MB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvb2diR0N1VzJMTVp4cDFHZkpFRTVjUjRhRHIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgkAByAJ
MA0GCSqGSIb3DQEBCwUAA4IBAQBghX/8rhRGhczu9jpVuuXLkIoD8X5DoT15cgrv
dp3gHoe39R/UjT0vC/p2zpKQqZ1jkirJD943iJm9kdqcQWzRIPQHjqV42fJpTRmU
CGpWv2zAXRnzgNmzN1vuNuySJsa4HXCBSq5SIeLhh6g8ZxvsgiGEX7aoXMiHd/V2
qqja9PhkEkEeiQQU4GgXGQr8682rNMgmMIHHYdPISrDDJtl/R7IARdt2ffunRV8c
vkLOYXVLRwRa6dIrqFif1LdxOHuSu4zD0KiYCuBD9efPd/0sOiKFLg71ByCMVNVO
L7GxwELUf+B3lh4TimZxh71oPIctVPKjlX2EjqWGyhHEmi0M
-----END CERTIFICATE-----
Generated at Sat May 18 22:54:06 2024 by rpki-client on console-ams.rpki-client.org