Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/t32PQAx_M_CVr0gQB_32VcpGrUw.roa
File: t32PQAx_M_CVr0gQB_32VcpGrUw.roa (raw, json)
Hash identifier: IoL+LgMIoeG0uFpxyLzIQK3K4RSHdGQGa6PDnndFMNI=
Subject key identifier: B7:7D:8F:40:0C:7F:33:F0:95:AF:48:10:07:FD:F6:55:CA:46:AD:4C
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 0190845E6B7DF9F543778E0818482EC6FF5C
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/t32PQAx_M_CVr0gQB_32VcpGrUw.roa
Signing time: Fri 05 Jul 2024 19:28:18 +0000
ROA not before: Fri 05 Jul 2024 19:28:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216369
IP address blocks: 2a04:9307:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:84:5e:6b:7d:f9:f5:43:77:8e:08:18:48:2e:c6:ff:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jul 5 19:28:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b77d8f400c7f33f095af481007fdf655ca46ad4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:a6:6a:85:3c:f9:5e:62:9a:23:00:9b:9b:
78:1e:bf:21:e5:d0:2d:e6:1a:24:bd:05:57:29:78:
07:e6:19:ea:4a:08:19:47:fb:22:f1:fe:e0:e2:a8:
85:01:e9:a7:5b:f5:6d:a7:fc:1e:22:96:8a:6b:7c:
c8:c0:79:7d:45:40:dd:61:af:08:66:90:79:35:6c:
d4:63:ff:40:73:a8:22:dc:26:9d:4b:00:00:db:94:
6d:d6:f4:b2:89:84:7f:05:6c:96:bc:95:93:50:56:
a1:ac:0b:18:50:17:b6:fe:be:c3:15:31:e9:df:d7:
ac:31:98:26:0e:84:39:1b:3d:3c:bd:86:a3:8c:6e:
37:8b:85:29:36:19:2c:c3:86:07:cd:7a:16:2b:50:
54:5f:bd:3d:a5:18:a9:90:2f:b5:fc:4b:a7:7b:ce:
ec:e1:29:8c:42:67:1d:a4:22:c2:64:62:f4:4c:86:
70:ef:00:d4:16:a9:fe:98:5b:d9:b0:53:d8:01:29:
5c:d3:ff:29:d9:3d:7a:98:f7:d6:4c:2b:4a:cc:d2:
51:76:e9:89:07:f1:a0:ab:3b:20:e5:62:bd:af:12:
76:89:ed:34:62:73:35:69:08:89:52:be:16:0a:d8:
2f:03:90:45:39:23:74:27:70:94:64:f5:5d:35:37:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7D:8F:40:0C:7F:33:F0:95:AF:48:10:07:FD:F6:55:CA:46:AD:4C
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/t32PQAx_M_CVr0gQB_32VcpGrUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9307:10::/44
Signature Algorithm: sha256WithRSAEncryption
92:b7:92:e6:9c:99:4a:b0:a0:f1:ed:d3:f1:ac:ec:99:07:0a:
03:e1:93:9a:13:21:10:26:1f:cc:45:b0:95:57:00:4d:f8:68:
c8:03:9c:37:25:4a:92:fb:2c:ed:41:73:c4:63:94:3f:b9:18:
94:e1:3b:93:46:0f:4c:02:b8:e4:bf:60:aa:0c:c9:84:93:21:
af:54:2c:ab:b6:61:40:ed:3a:90:5e:1e:f8:44:cc:77:30:de:
f0:76:cd:50:01:61:0e:52:62:84:80:53:c6:4f:cd:f9:72:06:
a4:d6:7e:a9:35:f1:65:5f:99:8f:62:aa:a5:a6:5c:c5:85:87:
83:2d:bf:bc:de:ae:e3:7a:b7:b5:e7:67:b9:25:ae:ca:ef:a5:
02:5e:bf:5a:39:75:84:ee:67:cf:4b:49:9a:c8:e4:e4:d8:2d:
41:32:be:7d:fe:65:69:93:26:b9:8b:41:c1:69:6e:54:6f:31:
2c:d8:a7:1b:b8:4a:40:f3:98:bd:13:3e:33:af:b0:27:3e:b0:
3f:b1:07:09:57:f2:b5:f4:40:ed:90:58:1d:6c:aa:78:41:11:
d1:7e:61:98:b3:f6:74:ae:9a:a0:a6:dd:7d:14:19:e1:71:5f:
a6:e2:4f:0f:ed:29:03:c6:06:a4:e0:a8:a0:b6:e7:00:09:f8:
92:34:5a:3f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZCEXmt9+fVDd44IGEguxv9cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw
YjQ1MDYwHhcNMjQwNzA1MTkyODE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzdkOGY0MDBjN2YzM2YwOTVhZjQ4MTAwN2ZkZjY1NWNhNDZhZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuWmaoU8+V5imiMAm5t4Hr8h5dAt
5hokvQVXKXgH5hnqSggZR/si8f7g4qiFAemnW/Vtp/weIpaKa3zIwHl9RUDdYa8I
ZpB5NWzUY/9Ac6gi3CadSwAA25Rt1vSyiYR/BWyWvJWTUFahrAsYUBe2/r7DFTHp
39esMZgmDoQ5Gz08vYajjG43i4UpNhksw4YHzXoWK1BUX709pRipkC+1/Eune87s
4SmMQmcdpCLCZGL0TIZw7wDUFqn+mFvZsFPYASlc0/8p2T16mPfWTCtKzNJRdumJ
B/Ggqzsg5WK9rxJ2ie00YnM1aQiJUr4WCtgvA5BFOSN0J3CUZPVdNTdHiQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLd9j0AMfzPwla9IEAf99lXKRq1MMB8GA1UdIwQY
MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt
OGVlYjc1N2NmNTQ1LzEvdDMyUFFBeF9NX0NWcjBnUUJfMzJWY3BHclV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1
LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgSTBwAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCSt5LmnJlKsKDx7dPxrOyZBwoD4ZOaEyEQJh/M
RbCVVwBN+GjIA5w3JUqS+yztQXPEY5Q/uRiU4TuTRg9MArjkv2CqDMmEkyGvVCyr
tmFA7TqQXh74RMx3MN7wds1QAWEOUmKEgFPGT835cgak1n6pNfFlX5mPYqqlplzF
hYeDLb+83q7jere152e5Ja7K76UCXr9aOXWE7mfPS0mayOTk2C1BMr59/mVpkya5
i0HBaW5UbzEs2KcbuEpA85i9Ez4zr7AnPrA/sQcJV/K19EDtkFgdbKp4QRHRfmGY
s/Z0rpqgpt19FBnhcV+m4k8P7SkDxgak4KigtucACfiSNFo/
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:18:51 2024 by rpki-client on console-ams.rpki-client.org