Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EXTXc0rwszoHkDNfxJjyx0n-C90.roa
File: EXTXc0rwszoHkDNfxJjyx0n-C90.roa (raw, json)
Hash identifier: 9vKVDSrovP5O/UrDSRXcWesNOtAVTXLP9ijZxj3ZMto=
Subject key identifier: 11:74:D7:73:4A:F0:B3:3A:07:90:33:5F:C4:98:F2:C7:49:FE:0B:DD
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC649F9D0736B42C491CBC3C8D1AE65CB
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EXTXc0rwszoHkDNfxJjyx0n-C90.roa
Signing time: Mon 01 Jan 2024 18:29:45 +0000
ROA not before: Mon 01 Jan 2024 18:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41108
IP address blocks: 2a12:bec0:240::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:f9:d0:73:6b:42:c4:91:cb:c3:c8:d1:ae:65:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1174d7734af0b33a0790335fc498f2c749fe0bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:dd:c8:0b:a7:fc:6e:6b:a4:4b:f4:68:50:
a9:ba:c6:7e:22:b6:11:c9:08:e7:60:6c:90:9e:90:
cb:fd:bc:61:0a:21:08:e4:16:62:cb:39:21:8a:32:
50:dd:dd:42:ea:c8:19:a7:f1:e4:1f:bd:97:7c:dd:
51:7d:7f:41:de:b2:64:b1:f2:78:d8:e3:81:92:a2:
23:19:73:86:6d:1d:6a:e8:79:31:42:13:79:8b:9b:
b2:ec:54:3a:39:b5:36:3a:7d:e6:2d:38:f8:3e:45:
d5:21:38:be:79:1a:7c:5e:f3:9f:2c:5b:b6:77:f6:
36:ca:e9:33:49:ca:8d:31:15:40:3f:da:2c:83:66:
0c:07:a2:d7:7a:51:63:d6:13:f2:44:4b:1c:4e:26:
22:04:cf:81:cf:d3:79:e2:2b:c5:23:c6:ee:5e:6d:
33:f6:6a:80:aa:c3:75:b2:e3:52:42:bf:32:e1:8c:
ee:db:8b:a2:89:9d:33:61:0e:40:61:46:96:e5:6b:
5e:ff:82:b6:e9:65:39:f3:00:59:a3:d1:4f:6a:a3:
e6:a0:ce:7b:23:84:43:e2:2f:fd:a6:b5:c3:59:1c:
75:c0:f9:1d:77:c9:1f:5e:1a:26:be:90:78:4d:5a:
99:fd:cc:63:e7:36:0b:1b:c8:18:47:4e:3f:c0:92:
39:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:74:D7:73:4A:F0:B3:3A:07:90:33:5F:C4:98:F2:C7:49:FE:0B:DD
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EXTXc0rwszoHkDNfxJjyx0n-C90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:240::/44
Signature Algorithm: sha256WithRSAEncryption
49:39:53:d0:9e:d2:34:9a:40:c0:1f:90:c7:f3:2e:1d:50:30:
b5:5a:28:04:54:6b:a4:3a:da:3c:60:03:3a:4a:80:d9:c1:d6:
d7:e2:94:35:99:30:70:94:db:ea:3c:90:69:b5:0a:9b:ba:b8:
58:b9:55:b8:eb:cf:2e:e9:48:54:1f:0c:b0:31:22:52:08:c7:
d1:be:c0:51:a7:52:69:5d:c9:96:e3:c9:bb:3a:6c:8b:7d:86:
2a:f4:8f:8b:35:ce:87:12:14:c3:fd:e9:db:48:f2:c8:f7:e9:
aa:86:12:c3:32:25:60:48:8e:96:93:9d:b8:cb:aa:81:07:f0:
bf:ca:de:72:00:ea:ca:81:f5:e1:92:19:5e:02:a5:b2:d0:c6:
da:ef:70:24:a0:32:c6:8f:bf:9f:bc:ec:bf:d5:5b:a3:3a:8c:
11:0c:73:ca:27:c2:ca:7c:57:c8:8a:0e:b4:14:9d:9e:41:89:
ba:87:07:2f:2c:45:da:cd:5f:da:c4:99:9c:67:92:7d:9c:4a:
a4:18:1f:c1:b2:ce:ff:9d:2f:53:6c:02:78:ad:95:9a:2a:93:
92:d0:e2:2c:7e:23:c7:73:49:c0:b2:e5:92:61:88:eb:3d:b9:
86:ef:0d:4e:10:fd:c2:34:3e:8c:d6:31:9f:3c:9f:5f:dd:7a:
2d:11:0b:41
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzGSfnQc2tCxJHLw8jRrmXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjQwMTAxMTgyOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTc0ZDc3MzRhZjBiMzNhMDc5MDMzNWZjNDk4ZjJjNzQ5ZmUwYmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5HdyAun/G5rpEv0aFCpusZ+IrYR
yQjnYGyQnpDL/bxhCiEI5BZiyzkhijJQ3d1C6sgZp/HkH72XfN1RfX9B3rJksfJ4
2OOBkqIjGXOGbR1q6HkxQhN5i5uy7FQ6ObU2On3mLTj4PkXVITi+eRp8XvOfLFu2
d/Y2yukzScqNMRVAP9osg2YMB6LXelFj1hPyREscTiYiBM+Bz9N54ivFI8buXm0z
9mqAqsN1suNSQr8y4Yzu24uiiZ0zYQ5AYUaW5Wte/4K26WU58wBZo9FPaqPmoM57
I4RD4i/9prXDWRx1wPkdd8kfXhomvpB4TVqZ/cxj5zYLG8gYR04/wJI52QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBF013NK8LM6B5AzX8SY8sdJ/gvdMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvRVhUWGMwcndzem9Ia0ROZnhKanl4MG4tQzkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAJA
MA0GCSqGSIb3DQEBCwUAA4IBAQBJOVPQntI0mkDAH5DH8y4dUDC1WigEVGukOto8
YAM6SoDZwdbX4pQ1mTBwlNvqPJBptQqburhYuVW4688u6UhUHwywMSJSCMfRvsBR
p1JpXcmW48m7OmyLfYYq9I+LNc6HEhTD/enbSPLI9+mqhhLDMiVgSI6Wk524y6qB
B/C/yt5yAOrKgfXhkhleAqWy0Mba73AkoDLGj7+fvOy/1VujOowRDHPKJ8LKfFfI
ig60FJ2eQYm6hwcvLEXazV/axJmcZ5J9nEqkGB/Bss7/nS9TbAJ4rZWaKpOS0OIs
fiPHc0nAsuWSYYjrPbmG7w1OEP3CND6M1jGfPJ9f3XotEQtB
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:13:26 2024 by rpki-client on console-ams.rpki-client.org