Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/7cMqhLV_JtbsvnyG1YCauiTbU8g.roa
File: 7cMqhLV_JtbsvnyG1YCauiTbU8g.roa (raw, json)
Hash identifier: hFd+MmL13d2hMajCDHiHBYX3zaCFJSSBdhx7JbnJw+E=
Subject key identifier: ED:C3:2A:84:B5:7F:26:D6:EC:BE:7C:86:D5:80:9A:BA:24:DB:53:C8
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018CCA2A4EACF1E2A8C000581FB7A1E32A3B
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/7cMqhLV_JtbsvnyG1YCauiTbU8g.roa
Signing time: Tue 02 Jan 2024 12:33:39 +0000
ROA not before: Tue 02 Jan 2024 12:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:e881:7700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:4e:ac:f1:e2:a8:c0:00:58:1f:b7:a1:e3:2a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 12:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edc32a84b57f26d6ecbe7c86d5809aba24db53c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b0:03:d1:c9:45:90:0c:83:93:95:75:9b:24:
a9:48:60:c1:32:b2:6d:68:2f:e4:7b:bd:6b:d4:b7:
a9:65:45:9d:5f:d1:5d:12:79:a0:55:32:e1:f1:3b:
32:87:07:7a:85:1c:bb:ef:27:d7:d4:16:5e:dc:5e:
16:6a:4a:42:2c:2f:f8:31:ae:0d:00:82:6a:15:4a:
9b:c5:2e:61:b1:dd:77:8c:ee:03:08:5a:3e:7f:8f:
ca:72:78:a8:fe:ce:0d:b1:54:50:b1:26:6d:26:0f:
60:99:47:95:ed:77:3a:70:a3:8e:bd:2e:a6:65:33:
52:43:45:46:99:0f:52:79:fc:0d:7a:68:61:fc:17:
6e:a0:ff:90:f4:4c:07:02:32:80:97:64:0c:aa:86:
a9:98:55:a1:46:ac:b2:18:7a:51:6c:75:9a:e8:4b:
32:8a:0b:d1:a2:c3:a9:52:1c:3c:a7:0f:fb:78:5a:
b5:f8:37:63:14:30:6a:ba:2d:16:bb:19:e0:aa:6d:
44:7d:8e:90:ae:90:94:61:6c:ed:59:dd:28:de:53:
7d:b2:03:61:1e:ac:31:50:7b:4a:00:f2:25:3e:55:
ab:5b:44:31:e6:55:10:f4:99:45:dd:6a:f7:4c:b1:
7f:18:c3:46:18:c9:3b:5c:03:ad:c9:62:36:b1:02:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C3:2A:84:B5:7F:26:D6:EC:BE:7C:86:D5:80:9A:BA:24:DB:53:C8
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/7cMqhLV_JtbsvnyG1YCauiTbU8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:7700::/40
Signature Algorithm: sha256WithRSAEncryption
17:1e:79:52:21:d0:e1:30:f3:e5:ca:0f:43:a1:c4:96:c2:45:
67:94:b1:2e:e6:2a:85:b4:bd:5e:00:b1:91:8a:ac:b0:e3:4e:
9c:a3:57:6b:75:84:79:fd:d4:1f:3d:3a:e4:58:74:f2:f9:3a:
97:dc:56:e5:3f:5b:3f:d9:f2:13:c6:c6:38:a3:37:47:eb:81:
9c:9a:d5:44:13:b0:01:d1:77:12:cf:f2:01:5b:98:54:7b:fe:
a4:24:de:f6:c9:07:78:ec:ce:b6:b7:8d:39:50:d0:14:03:aa:
7e:90:5d:90:34:a2:c2:63:f4:42:95:a1:6d:94:68:30:74:95:
2e:92:cb:a3:ea:fc:88:9b:23:21:d9:70:8e:e6:1d:da:7e:df:
c5:96:2c:37:7b:72:3b:12:4b:a7:b6:d5:8b:89:b8:7b:99:46:
a2:9c:43:cf:6a:aa:db:69:c5:3c:4e:54:92:8a:e0:f7:a5:05:
90:b5:e4:94:c2:cb:51:49:bd:6b:ab:1a:27:c5:17:74:99:20:
e5:42:ff:c5:7c:6c:00:84:46:04:64:43:85:5a:02:32:4e:c3:
2e:1d:4e:9c:6b:2b:ad:1e:80:d8:71:c2:2a:cf:de:48:86:1d:
09:ac:a3:e5:5f:70:3e:fe:a5:3b:5c:df:26:ff:00:1f:a8:c1:
61:8c:9c:c8
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzKKk6s8eKowABYH7eh4yo7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjQwMTAyMTIzMzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGMzMmE4NGI1N2YyNmQ2ZWNiZTdjODZkNTgwOWFiYTI0ZGI1M2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7AD0clFkAyDk5V1mySpSGDBMrJt
aC/ke71r1LepZUWdX9FdEnmgVTLh8Tsyhwd6hRy77yfX1BZe3F4WakpCLC/4Ma4N
AIJqFUqbxS5hsd13jO4DCFo+f4/Kcnio/s4NsVRQsSZtJg9gmUeV7Xc6cKOOvS6m
ZTNSQ0VGmQ9SefwNemhh/BduoP+Q9EwHAjKAl2QMqoapmFWhRqyyGHpRbHWa6Esy
igvRosOpUhw8pw/7eFq1+DdjFDBqui0Wuxngqm1EfY6QrpCUYWztWd0o3lN9sgNh
HqwxUHtKAPIlPlWrW0Qx5lUQ9JlF3Wr3TLF/GMNGGMk7XAOtyWI2sQLdzQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFO3DKoS1fybW7L58htWAmrok21PIMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvN2NNcWhMVl9KdGJzdm55RzFZQ2F1aVRiVThnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgbogXcw
DQYJKoZIhvcNAQELBQADggEBABceeVIh0OEw8+XKD0OhxJbCRWeUsS7mKoW0vV4A
sZGKrLDjTpyjV2t1hHn91B89OuRYdPL5OpfcVuU/Wz/Z8hPGxjijN0frgZya1UQT
sAHRdxLP8gFbmFR7/qQk3vbJB3jszra3jTlQ0BQDqn6QXZA0osJj9EKVoW2UaDB0
lS6Sy6Pq/IibIyHZcI7mHdp+38WWLDd7cjsSS6e21YuJuHuZRqKcQ89qqttpxTxO
VJKK4PelBZC15JTCy1FJvWurGifFF3SZIOVC/8V8bACERgRkQ4VaAjJOwy4dTpxr
K60egNhxwirP3kiGHQmso+VfcD7+pTtc3yb/AB+owWGMnMg=
-----END CERTIFICATE-----
Generated at Mon May 6 18:25:41 2024 by rpki-client on console-fra.rpki-client.org