Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/iF7w3vACaPCBsB91DnnaQPoRIhw.roa
File: iF7w3vACaPCBsB91DnnaQPoRIhw.roa (raw, json)
Hash identifier: XQ0hTOPZw7QJppxwNS+4AkyRCJ5sU51TugdCQp1lO0A=
Subject key identifier: 88:5E:F0:DE:F0:02:68:F0:81:B0:1F:75:0E:79:DA:40:FA:11:22:1C
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 018CC2DAD6CED2848A4CE29C8CCEC790DD07
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/iF7w3vACaPCBsB91DnnaQPoRIhw.roa
Signing time: Mon 01 Jan 2024 02:29:30 +0000
ROA not before: Mon 01 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204630
IP address blocks: 2a0d:4280::/48 maxlen: 48
2a0d:4280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 20:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d6:ce:d2:84:8a:4c:e2:9c:8c:ce:c7:90:dd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: Jan 1 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=885ef0def00268f081b01f750e79da40fa11221c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:be:c1:d3:f1:cf:cd:40:27:48:af:71:5f:
8e:1e:50:9b:0a:3e:02:75:22:49:a1:cd:01:ef:27:
82:b3:75:10:d9:57:33:e2:84:a4:73:53:b6:52:f1:
fd:2c:47:37:5b:31:53:66:5d:95:f9:b6:da:28:89:
3a:78:75:24:c1:56:ec:3e:0a:e6:62:cc:18:5f:8f:
11:dc:f6:25:40:c5:68:d1:90:17:0a:47:51:d0:1d:
30:07:a8:30:f1:25:2d:4c:06:6f:94:27:7e:57:e0:
ed:f6:ed:8c:db:a7:a9:2f:e8:d7:53:b9:56:dd:e1:
9c:f9:7a:66:0a:2f:5f:57:dd:3c:86:68:55:f5:2f:
c5:e0:46:a4:41:8f:60:97:d4:a5:96:e3:48:e6:72:
ab:39:05:2c:3a:7c:83:91:08:ed:2d:e3:fa:45:ae:
98:52:61:8d:e1:f8:a1:5f:70:cc:b1:40:89:27:5b:
44:7a:9a:c1:63:1e:d2:6b:0c:01:e4:25:f9:f7:cd:
74:04:a8:35:9c:40:9a:2c:38:14:1e:f5:e3:ce:e7:
6d:b9:4f:a3:e4:c8:a5:90:36:88:c5:18:74:f6:77:
5c:6a:0a:0b:d0:97:76:73:59:1e:88:53:40:c7:01:
f5:58:08:88:ca:f4:de:f4:ef:1c:a8:4f:4f:b1:38:
c9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5E:F0:DE:F0:02:68:F0:81:B0:1F:75:0E:79:DA:40:FA:11:22:1C
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/iF7w3vACaPCBsB91DnnaQPoRIhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:4280::/29
Signature Algorithm: sha256WithRSAEncryption
15:9b:74:af:b2:52:57:ce:e9:fb:f6:b8:b2:24:0b:db:5d:5c:
0b:af:d2:de:6a:1c:7d:41:43:d5:18:b9:80:09:9f:e4:a6:02:
55:85:e4:19:17:2d:07:45:4a:b3:03:b4:db:e7:0c:4e:dd:8c:
06:5b:ef:d1:16:7f:b0:56:74:45:95:e2:65:2e:ce:01:31:ef:
46:43:64:3c:8e:41:71:30:d6:5b:99:97:ce:62:27:a3:65:94:
25:c1:82:bd:e8:91:18:9d:d6:b0:b0:d2:a1:bb:25:8a:1a:d2:
2c:3c:d7:90:2e:4c:ab:c0:aa:08:a4:39:ea:36:42:c9:10:d1:
6e:92:2c:58:60:4f:22:70:70:02:bf:aa:ed:09:39:c5:87:56:
47:9c:e6:40:13:44:6e:87:83:4e:00:29:c6:8c:6e:c9:ad:4f:
11:65:66:65:90:a0:41:36:0d:e8:74:71:b9:02:f5:5c:01:0e:
63:18:60:cc:44:27:04:60:b1:7c:96:99:cc:80:ff:f1:5d:50:
54:2e:fe:c4:5b:66:2f:28:3b:e6:28:32:a4:cc:03:19:3c:4f:
17:23:a7:00:3b:5d:d7:19:3d:70:68:39:51:0d:29:18:b3:fd:
69:7f:3d:34:fa:e0:45:dc:ef:56:45:10:0e:66:93:98:ce:11:
2e:6a:71:45
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzC2tbO0oSKTOKcjM7HkN0HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOGNiNGExMWNhYmFjMjA0YWRmYjhhNWI1ODdlMzJmZWU0
YTFiNTUwHhcNMjQwMTAxMDIyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODVlZjBkZWYwMDI2OGYwODFiMDFmNzUwZTc5ZGE0MGZhMTEyMjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJu+wdPxz81AJ0ivcV+OHlCbCj4C
dSJJoc0B7yeCs3UQ2Vcz4oSkc1O2UvH9LEc3WzFTZl2V+bbaKIk6eHUkwVbsPgrm
YswYX48R3PYlQMVo0ZAXCkdR0B0wB6gw8SUtTAZvlCd+V+Dt9u2M26epL+jXU7lW
3eGc+XpmCi9fV908hmhV9S/F4EakQY9gl9SlluNI5nKrOQUsOnyDkQjtLeP6Ra6Y
UmGN4fihX3DMsUCJJ1tEeprBYx7SawwB5CX59810BKg1nECaLDgUHvXjzudtuU+j
5MilkDaIxRh09ndcagoL0Jd2c1keiFNAxwH1WAiIyvTe9O8cqE9PsTjJlwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIhe8N7wAmjwgbAfdQ552kD6ESIcMB8GA1UdIwQY
MBaAFNyMtKEcq6wgSt+4pbWH4y/uShtVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wZDkxOWYtYzBlNi00NzM1LTk4MDIt
OTlkNWUwN2JhZTc2LzEvaUY3dzN2QUNhUENCc0I5MURubmFRUG9SSWh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wZDkxOWYtYzBlNi00NzM1LTk4MDItOTlkNWUwN2JhZTc2
LzEvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg1CgDAN
BgkqhkiG9w0BAQsFAAOCAQEAFZt0r7JSV87p+/a4siQL211cC6/S3mocfUFD1Ri5
gAmf5KYCVYXkGRctB0VKswO02+cMTt2MBlvv0RZ/sFZ0RZXiZS7OATHvRkNkPI5B
cTDWW5mXzmIno2WUJcGCveiRGJ3WsLDSobslihrSLDzXkC5Mq8CqCKQ56jZCyRDR
bpIsWGBPInBwAr+q7Qk5xYdWR5zmQBNEboeDTgApxoxuya1PEWVmZZCgQTYN6HRx
uQL1XAEOYxhgzEQnBGCxfJaZzID/8V1QVC7+xFtmLyg75igypMwDGTxPFyOnADtd
1xk9cGg5UQ0pGLP9aX89NPrgRdzvVkUQDmaTmM4RLmpxRQ==
-----END CERTIFICATE-----
Generated at Wed Jun 26 03:01:03 2024 by rpki-client on console-ams.rpki-client.org