Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/udzcWQCA55GQD2z-LyTr3LvN9OU.roa
File: udzcWQCA55GQD2z-LyTr3LvN9OU.roa (raw, json)
Hash identifier: /YmU1AUx/U3ENKW0L105bqo3RRd6UT9edf25JYsKENc=
Subject key identifier: B9:DC:DC:59:00:80:E7:91:90:0F:6C:FE:2F:24:EB:DC:BB:CD:F4:E5
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC649FAF990C4CD92C672980B060158AA
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/udzcWQCA55GQD2z-LyTr3LvN9OU.roa
Signing time: Mon 01 Jan 2024 18:29:46 +0000
ROA not before: Mon 01 Jan 2024 18:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48297
IP address blocks: 2a12:bec0:410::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:fa:f9:90:c4:cd:92:c6:72:98:0b:06:01:58:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9dcdc590080e791900f6cfe2f24ebdcbbcdf4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d4:b3:e2:2e:cc:e7:95:a7:eb:ab:75:c2:e2:
fe:e9:73:d5:43:1c:d6:c0:68:02:bc:fa:90:b0:fe:
e3:81:ea:c4:63:47:a7:95:0c:94:c4:fa:a3:08:23:
77:50:66:07:5a:69:fd:a4:d0:f4:44:a6:ea:b8:ee:
2a:c3:b2:94:c6:a2:01:f7:bf:b4:6b:11:ae:5d:28:
22:50:a1:3d:d4:93:d8:01:81:7c:61:15:a2:ab:42:
f4:01:cc:9f:ce:a5:bd:8c:82:75:8f:5c:9d:b5:d0:
05:07:43:e3:54:4d:1e:8b:62:0f:b5:24:b7:64:e0:
1e:e6:a6:66:a1:2e:6e:d4:7a:fc:69:2a:e6:a6:63:
8e:a4:0e:63:43:4d:71:5f:f5:f3:29:3c:2f:6a:ae:
97:f8:fc:a1:84:a9:34:be:63:0e:8c:31:37:3f:80:
bd:74:68:87:9f:ad:d8:82:a8:e4:82:29:f4:81:d0:
cb:c4:7d:fb:59:01:92:01:de:b7:ae:96:25:1c:b6:
a0:6e:72:c3:1a:a8:75:95:21:4b:d4:da:50:d4:7d:
e6:a1:f6:90:59:b7:b8:3d:85:47:b6:87:aa:d9:e3:
68:d1:d0:93:2f:9b:be:38:e5:05:2b:b7:32:5f:f0:
69:02:40:8d:1b:f0:0f:bf:7c:74:53:10:6e:c4:51:
e0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DC:DC:59:00:80:E7:91:90:0F:6C:FE:2F:24:EB:DC:BB:CD:F4:E5
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/udzcWQCA55GQD2z-LyTr3LvN9OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:410::/44
Signature Algorithm: sha256WithRSAEncryption
b7:f5:07:54:36:b4:2f:3b:e7:ca:43:44:db:2e:fd:6f:3d:dd:
c6:f6:b9:e6:ef:31:0c:30:62:6e:fa:79:eb:ef:1a:10:88:de:
b6:a3:bb:ac:e4:39:d7:dd:76:43:33:69:73:90:b1:91:7d:f4:
6f:9e:6e:fa:8d:19:bc:10:95:6a:60:3a:e1:0e:39:90:5a:50:
71:aa:51:3f:46:bf:e3:48:74:32:0b:c3:e2:c8:02:db:80:9f:
b0:7b:8f:b3:40:32:c6:0b:71:ca:c2:18:8b:86:c3:03:9b:68:
65:6f:15:c3:db:2d:fd:c8:e5:ba:e8:66:4a:bf:bc:f9:43:44:
d5:36:bb:98:41:f0:e7:78:8b:78:e5:c5:2f:c2:7a:4b:c5:82:
c8:65:f2:d3:70:8e:a2:65:3a:e3:58:23:55:43:d2:c4:33:9e:
d1:6e:8d:06:a5:70:50:ec:4c:ea:c8:8e:0e:3d:ab:71:5f:9b:
de:92:7e:c4:17:69:ed:ac:1d:4d:e7:06:05:97:42:87:21:53:
cb:5d:a4:31:52:3d:eb:82:18:9c:02:c1:7e:f0:ff:4f:6f:59:
b9:a4:6c:a0:15:77:d9:7a:bc:e9:7c:03:18:03:b4:f4:b8:6a:
0a:50:20:71:f0:8b:aa:cc:e8:c1:4a:33:27:30:2e:0f:cf:d4:
84:05:52:1d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzGSfr5kMTNksZymAsGAViqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjQwMTAxMTgyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWRjZGM1OTAwODBlNzkxOTAwZjZjZmUyZjI0ZWJkY2JiY2RmNGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNSz4i7M55Wn66t1wuL+6XPVQxzW
wGgCvPqQsP7jgerEY0enlQyUxPqjCCN3UGYHWmn9pND0RKbquO4qw7KUxqIB97+0
axGuXSgiUKE91JPYAYF8YRWiq0L0AcyfzqW9jIJ1j1ydtdAFB0PjVE0ei2IPtSS3
ZOAe5qZmoS5u1Hr8aSrmpmOOpA5jQ01xX/XzKTwvaq6X+PyhhKk0vmMOjDE3P4C9
dGiHn63Ygqjkgin0gdDLxH37WQGSAd63rpYlHLagbnLDGqh1lSFL1NpQ1H3mofaQ
Wbe4PYVHtoeq2eNo0dCTL5u+OOUFK7cyX/BpAkCNG/APv3x0UxBuxFHgeQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLnc3FkAgOeRkA9s/i8k69y7zfTlMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvdWR6Y1dRQ0E1NUdRRDJ6LUx5VHIzTHZOOU9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAQQ
MA0GCSqGSIb3DQEBCwUAA4IBAQC39QdUNrQvO+fKQ0TbLv1vPd3G9rnm7zEMMGJu
+nnr7xoQiN62o7us5DnX3XZDM2lzkLGRffRvnm76jRm8EJVqYDrhDjmQWlBxqlE/
Rr/jSHQyC8PiyALbgJ+we4+zQDLGC3HKwhiLhsMDm2hlbxXD2y39yOW66GZKv7z5
Q0TVNruYQfDneIt45cUvwnpLxYLIZfLTcI6iZTrjWCNVQ9LEM57Rbo0GpXBQ7Ezq
yI4OPatxX5vekn7EF2ntrB1N5wYFl0KHIVPLXaQxUj3rghicAsF+8P9Pb1m5pGyg
FXfZerzpfAMYA7T0uGoKUCBx8IuqzOjBSjMnMC4Pz9SEBVId
-----END CERTIFICATE-----
Generated at Sat Jun 15 00:27:32 2024 by rpki-client on console-fra.rpki-client.org