Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/w9iNegddcvPxYsx80gtarztASzI.roa
File: w9iNegddcvPxYsx80gtarztASzI.roa (raw, json)
Hash identifier: x3w1IwpKKkFB7ayGpzDqtSXB9eNisMv+LufyJVKNnmA=
Subject key identifier: C3:D8:8D:7A:07:5D:72:F3:F1:62:CC:7C:D2:0B:5A:AF:3B:40:4B:32
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018F0789976979C9D276FBB8D80BC34C7A04
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/w9iNegddcvPxYsx80gtarztASzI.roa
Signing time: Mon 22 Apr 2024 20:40:08 +0000
ROA not before: Mon 22 Apr 2024 20:40:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216311
IP address blocks: 2a12:bec0:500::/46 maxlen: 48
2a12:bec0:500::/48 maxlen: 48
2a12:bec0:501::/48 maxlen: 48
2a12:bec0:502::/48 maxlen: 48
2a12:bec0:503::/48 maxlen: 48
2a12:bec0:504::/48 maxlen: 48
2a12:bec0:505::/48 maxlen: 48
2a12:bec0:506::/48 maxlen: 48
2a12:bec0:507::/48 maxlen: 48
2a12:bec0:50a::/48 maxlen: 48
2a12:bec0:50b::/48 maxlen: 48
2a12:bec0:50f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:07:89:97:69:79:c9:d2:76:fb:b8:d8:0b:c3:4c:7a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Apr 22 20:40:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3d88d7a075d72f3f162cc7cd20b5aaf3b404b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bc:ba:4f:6c:63:fa:d6:ef:e4:84:74:2c:04:
86:81:b8:db:1f:90:52:44:6f:3b:87:19:19:ae:8f:
2d:35:ee:65:9e:65:6e:29:69:90:62:69:c8:04:db:
4d:21:78:7d:8c:a1:87:3d:70:f9:0d:a6:9f:94:f2:
0b:63:d2:75:d7:1c:bd:10:0a:07:37:df:8d:41:a0:
2d:8e:0e:97:46:64:e3:bb:a5:42:97:f8:a6:d2:bd:
e7:2b:e1:58:b3:89:42:02:83:4b:b0:32:90:3b:39:
f7:49:b5:99:6c:d5:05:3e:30:31:60:43:ec:b6:2e:
e5:04:5f:ba:51:53:e1:7f:1b:14:9d:ee:df:5d:27:
83:06:5c:48:e0:7b:40:78:8c:38:6c:71:c9:c5:b0:
fd:71:1c:5d:32:0c:03:51:58:f0:45:43:7e:01:b3:
df:6e:e1:83:a8:c8:99:e4:b1:a9:82:96:ff:89:70:
87:85:14:a6:72:3c:2a:04:87:55:38:0f:29:80:8f:
82:32:b9:a1:6e:0f:62:53:19:52:47:13:04:3f:d2:
0f:0e:fc:13:6d:b7:56:48:27:34:bd:03:99:24:d6:
51:ce:7c:95:c4:85:ce:69:9e:54:aa:4e:af:33:d7:
29:7b:c9:c1:df:0f:73:7f:bc:b7:17:88:5a:4a:a4:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D8:8D:7A:07:5D:72:F3:F1:62:CC:7C:D2:0B:5A:AF:3B:40:4B:32
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/w9iNegddcvPxYsx80gtarztASzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:500::/45
2a12:bec0:50a::/47
2a12:bec0:50f::/48
Signature Algorithm: sha256WithRSAEncryption
41:d1:ea:02:d5:fc:34:19:27:80:41:2b:49:eb:e9:4b:76:33:
80:db:0c:6b:b8:a1:11:bb:30:a0:b5:47:6a:d3:a9:22:21:11:
26:9a:07:32:a3:37:ee:82:d5:05:70:b9:aa:15:ca:a5:cd:7c:
4f:2e:67:74:18:22:f6:d4:50:a8:4a:88:df:58:f0:62:11:49:
9a:d6:de:11:66:62:a7:a0:6d:7e:19:a0:0d:db:4b:1e:cf:70:
0c:6b:53:af:81:e6:29:4d:bc:3f:f5:d7:6a:e7:90:e2:47:55:
31:20:c3:e8:c1:82:38:71:bf:c2:cb:c6:4a:93:84:9e:d5:63:
a5:59:b9:8c:f6:45:83:0d:61:0e:26:f5:e4:a1:03:73:0b:c4:
f4:cd:86:d1:4f:5c:82:7a:ef:08:d3:56:19:c2:b6:a9:77:ed:
96:91:ac:f6:46:37:bb:a4:bf:ec:e4:08:28:01:3f:b8:34:f5:
59:4b:5c:66:26:1d:5c:7f:33:17:dc:90:fe:e1:b6:20:22:c7:
5f:c0:34:60:e1:18:47:5d:06:35:50:c7:e9:9d:be:a6:03:23:
4a:6c:39:c3:f4:85:27:ba:bb:a5:73:5c:70:a6:f2:b7:53:4b:
6f:b4:ac:39:dd:9a:a6:30:30:97:bb:3e:48:c4:de:69:68:41:
4e:1a:3a:e2
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAY8HiZdpecnSdvu42AvDTHoEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjQwNDIyMjA0MDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2Q4OGQ3YTA3NWQ3MmYzZjE2MmNjN2NkMjBiNWFhZjNiNDA0YjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgby6T2xj+tbv5IR0LASGgbjbH5BS
RG87hxkZro8tNe5lnmVuKWmQYmnIBNtNIXh9jKGHPXD5DaaflPILY9J11xy9EAoH
N9+NQaAtjg6XRmTju6VCl/im0r3nK+FYs4lCAoNLsDKQOzn3SbWZbNUFPjAxYEPs
ti7lBF+6UVPhfxsUne7fXSeDBlxI4HtAeIw4bHHJxbD9cRxdMgwDUVjwRUN+AbPf
buGDqMiZ5LGpgpb/iXCHhRSmcjwqBIdVOA8pgI+CMrmhbg9iUxlSRxMEP9IPDvwT
bbdWSCc0vQOZJNZRznyVxIXOaZ5Uqk6vM9cpe8nB3w9zf7y3F4haSqQ7wQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFMPYjXoHXXLz8WLMfNILWq87QEsyMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvdzlpTmVnZGRjdlB4WXN4ODBndGFyenRBU3pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcDKhK+wAUA
AwcBKhK+wAUKAwcAKhK+wAUPMA0GCSqGSIb3DQEBCwUAA4IBAQBB0eoC1fw0GSeA
QStJ6+lLdjOA2wxruKERuzCgtUdq06kiIREmmgcyozfugtUFcLmqFcqlzXxPLmd0
GCL21FCoSojfWPBiEUma1t4RZmKnoG1+GaAN20sez3AMa1OvgeYpTbw/9ddq55Di
R1UxIMPowYI4cb/Cy8ZKk4Se1WOlWbmM9kWDDWEOJvXkoQNzC8T0zYbRT1yCeu8I
01YZwrapd+2Wkaz2Rje7pL/s5AgoAT+4NPVZS1xmJh1cfzMX3JD+4bYgIsdfwDRg
4RhHXQY1UMfpnb6mAyNKbDnD9IUnurulc1xwpvK3U0tvtKw53ZqmMDCXuz5IxN5p
aEFOGjri
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:06:52 2024 by rpki-client on console-ams.rpki-client.org