Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/R1IKbD8qNAXTnZFQk4Of2QbsMck.roa
File: R1IKbD8qNAXTnZFQk4Of2QbsMck.roa (raw, json)
Hash identifier: Uyipa1uQKDAQIMNIubZcAXH8BZ34IaI7hgUcKHS/UDg=
Subject key identifier: 47:52:0A:6C:3F:2A:34:05:D3:9D:91:50:93:83:9F:D9:06:EC:31:C9
Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial: 018CC26D86341900B08884AA20CAF7CB8E7F
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/R1IKbD8qNAXTnZFQk4Of2QbsMck.roa
Signing time: Mon 01 Jan 2024 00:30:06 +0000
ROA not before: Mon 01 Jan 2024 00:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2a0b:4581::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:86:34:19:00:b0:88:84:aa:20:ca:f7:cb:8e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Validity
Not Before: Jan 1 00:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47520a6c3f2a3405d39d915093839fd906ec31c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:50:4c:49:4c:f3:36:e0:21:12:24:54:fa:c2:
a7:c6:5f:e0:f1:81:38:f5:fb:25:96:54:81:55:70:
07:6e:ff:5e:9d:3a:68:56:1a:98:40:53:d9:91:bf:
6b:00:14:12:e4:f4:c2:cd:e2:78:10:80:2b:5f:4d:
f7:2b:b4:c3:d9:69:aa:be:6c:1a:c7:b5:0a:13:5f:
01:c9:02:b6:e3:b4:67:01:fa:2b:c8:54:27:52:b0:
f6:e2:e8:f6:b7:b1:54:40:65:6a:cf:87:fe:b2:3b:
e8:e2:90:9d:07:f5:00:11:94:65:97:d5:d9:de:72:
c5:f6:70:86:c7:ae:dc:7a:75:0c:fe:74:8a:6d:d5:
1b:5f:99:23:5c:a4:77:85:eb:3d:81:52:30:43:d5:
d6:77:27:41:9a:77:b9:d0:f4:d3:4e:2a:e9:39:4a:
13:ba:87:fb:bd:f0:e3:5e:68:b8:19:3e:95:24:c6:
fa:c0:90:6f:1f:6f:e2:c2:21:b7:43:ff:55:1e:96:
85:68:78:e1:4e:62:ed:97:83:98:b0:9d:8c:b8:ab:
da:aa:6a:f8:78:71:1d:74:3b:94:7f:6f:2e:34:b6:
4d:c9:4a:e2:31:e9:26:34:0e:59:ac:dc:66:48:47:
52:0c:29:b2:79:0c:4b:63:57:ad:dd:f5:6a:c8:40:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:52:0A:6C:3F:2A:34:05:D3:9D:91:50:93:83:9F:D9:06:EC:31:C9
X509v3 Authority Key Identifier:
keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/R1IKbD8qNAXTnZFQk4Of2QbsMck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4581::/48
Signature Algorithm: sha256WithRSAEncryption
89:c5:4b:d8:20:0c:91:bc:fd:93:3e:86:3d:45:b0:ed:ba:74:
0b:34:0f:f1:69:fa:fa:a2:97:c6:8e:01:d0:c3:88:de:32:17:
87:5d:d7:a8:eb:da:11:11:e9:63:78:82:39:07:2f:d9:a4:49:
64:0a:6c:81:f1:07:49:77:c7:e9:69:d8:79:af:5b:db:b0:16:
ca:8b:13:06:7f:10:a4:6c:65:13:e8:6b:e1:9c:87:7f:cb:7c:
78:a6:3a:5a:a1:ac:b2:4b:dd:da:e0:6e:5e:be:36:4e:6d:87:
16:7f:a6:5b:a1:90:c0:db:2c:5f:9e:aa:6c:ff:8f:fb:ae:50:
36:cf:b3:bd:05:09:6e:4c:8a:82:47:82:2e:1c:89:fe:90:e4:
b7:ea:5e:a1:f5:35:90:a1:8d:b1:e9:d8:04:09:d7:7c:37:dc:
e0:35:91:2c:3c:3f:35:c3:4d:f4:8f:33:5b:d5:9f:1c:2d:11:
05:9c:b6:39:dc:f5:9d:3c:4c:92:65:a0:8b:ee:e2:ae:0a:1e:
2e:3a:d5:3f:98:dd:21:1a:e7:f2:4d:9c:1b:ae:be:95:90:5d:
8b:d0:4f:6e:28:0c:77:4a:89:39:78:db:5e:03:98:13:27:5f:
7f:6b:03:51:b7:d2:1b:e0:e2:eb:8b:43:83:1d:d7:a2:60:99:
50:39:97:74
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzCbYY0GQCwiISqIMr3y45/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTk3YjQwYzZkNDQ2OWY5YjkxNGE3OGRjOGVjNDM5MzIz
YjBmYjgwHhcNMjQwMTAxMDAzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzUyMGE2YzNmMmEzNDA1ZDM5ZDkxNTA5MzgzOWZkOTA2ZWMzMWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVBMSUzzNuAhEiRU+sKnxl/g8YE4
9fslllSBVXAHbv9enTpoVhqYQFPZkb9rABQS5PTCzeJ4EIArX033K7TD2Wmqvmwa
x7UKE18ByQK247RnAforyFQnUrD24uj2t7FUQGVqz4f+sjvo4pCdB/UAEZRll9XZ
3nLF9nCGx67cenUM/nSKbdUbX5kjXKR3hes9gVIwQ9XWdydBmne50PTTTirpOUoT
uof7vfDjXmi4GT6VJMb6wJBvH2/iwiG3Q/9VHpaFaHjhTmLtl4OYsJ2MuKvaqmr4
eHEddDuUf28uNLZNyUriMekmNA5ZrNxmSEdSDCmyeQxLY1et3fVqyEDAOQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEdSCmw/KjQF052RUJODn9kG7DHJMB8GA1UdIwQY
MBaAFP9Ze0DG1Eafm5FKeNyOxDkyOw+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMt
ZmZiMmVmNGJmZTI1LzEvUjFJS2JEOHFOQVhUblpGUWs0T2YyUWJzTWNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMtZmZiMmVmNGJmZTI1
LzEvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgtFgQAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCJxUvYIAyRvP2TPoY9RbDtunQLNA/xafr6opfG
jgHQw4jeMheHXdeo69oREeljeII5By/ZpElkCmyB8QdJd8fpadh5r1vbsBbKixMG
fxCkbGUT6GvhnId/y3x4pjpaoayyS93a4G5evjZObYcWf6ZboZDA2yxfnqps/4/7
rlA2z7O9BQluTIqCR4IuHIn+kOS36l6h9TWQoY2x6dgECdd8N9zgNZEsPD81w030
jzNb1Z8cLREFnLY53PWdPEySZaCL7uKuCh4uOtU/mN0hGufyTZwbrr6VkF2L0E9u
KAx3Sok5eNteA5gTJ19/awNRt9Ib4OLri0ODHdeiYJlQOZd0
-----END CERTIFICATE-----
Generated at Thu May 2 20:52:07 2024 by rpki-client on console-ams.rpki-client.org