Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/b61Qnuos1oHe4z2trND9BWZnL8w.roa
File: b61Qnuos1oHe4z2trND9BWZnL8w.roa (raw, json)
Hash identifier: FeflaZus5nYdE+h3cF9AMlO8uJm5qF7X/7wtpUrgSWQ=
Subject key identifier: 6F:AD:50:9E:EA:2C:D6:81:DE:E3:3D:AD:AC:D0:FD:05:66:67:2F:CC
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 0191618E043A1E49FA18C28F1014ACB5F99F
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/b61Qnuos1oHe4z2trND9BWZnL8w.roa
Signing time: Sat 17 Aug 2024 18:16:22 +0000
ROA not before: Sat 17 Aug 2024 18:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214976
IP address blocks: 2a0a:79c7:f500::/40 maxlen: 48
2a0a:79c7:f600::/40 maxlen: 40
2a0a:79c7:f801::/48 maxlen: 48
2a0a:79c7:f802::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:61:8e:04:3a:1e:49:fa:18:c2:8f:10:14:ac:b5:f9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Aug 17 18:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fad509eea2cd681dee33dadacd0fd0566672fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:fd:17:b4:f9:a7:61:2f:59:64:c9:bc:93:
f4:ab:1a:12:60:94:d7:61:92:77:d2:4b:16:31:eb:
58:72:47:fe:9c:f3:d5:b7:6d:57:9c:c9:72:d5:20:
02:0d:1e:a8:c4:67:73:95:a8:b0:dd:c1:d0:64:96:
43:a2:31:71:25:b8:f7:49:06:f8:9e:a1:ab:90:3d:
a4:ae:2c:b8:29:34:ec:c5:ed:cd:86:71:14:62:62:
1a:d3:34:b7:d9:02:38:86:95:2f:b1:e1:5e:5e:fd:
db:50:6b:99:4a:42:37:a7:73:6f:09:52:36:9e:f2:
ef:ed:ef:48:91:64:a8:0d:63:b6:5a:3c:9d:3a:50:
20:23:a7:3e:e1:7c:6b:48:01:2f:14:57:d0:57:e6:
1c:cb:c6:66:6d:5d:15:43:47:86:4e:cb:bd:c2:5a:
6a:f9:5e:dd:71:94:3e:47:a7:cb:28:d0:5d:43:fa:
77:9c:21:38:b7:53:43:b3:f5:53:fb:88:8c:32:0f:
6f:17:0d:54:c3:5c:9d:cc:c4:fa:4b:33:cc:44:c5:
f5:d4:3c:31:28:50:9d:3e:06:21:9e:e4:12:3c:b9:
97:c1:8a:0d:42:56:16:7e:0b:a6:4a:8b:64:b4:fa:
6d:a6:9a:43:0e:a3:1c:8d:2a:22:10:94:08:02:ef:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AD:50:9E:EA:2C:D6:81:DE:E3:3D:AD:AC:D0:FD:05:66:67:2F:CC
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/b61Qnuos1oHe4z2trND9BWZnL8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c7:f500::-2a0a:79c7:f6ff:ffff:ffff:ffff:ffff:ffff
2a0a:79c7:f801::-2a0a:79c7:f802:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6d:12:3f:c5:28:a9:01:da:7f:6c:73:f3:95:f9:2e:c7:71:fa:
c9:4a:b6:12:f2:9f:ff:d9:79:cc:a9:36:21:ba:13:36:9d:1b:
d0:99:b8:26:b2:8f:ac:41:1b:2a:ac:fb:6d:27:b9:06:d4:f5:
27:9e:2d:85:65:b5:f9:7c:b7:1d:c8:05:1f:7f:1b:70:01:e4:
2a:4f:27:43:1a:45:20:a6:61:54:94:d9:fc:3c:76:93:f8:52:
ee:d6:ad:09:00:82:62:d1:82:60:03:5e:f0:b7:a6:2d:8a:26:
9c:34:7d:27:cd:3b:54:de:18:c4:6a:d3:23:5c:a2:f0:f5:0a:
7a:61:4d:14:4d:3a:fe:8e:04:27:a8:13:29:e5:f6:84:df:1b:
a9:21:9c:22:d0:3d:f3:4d:71:0e:40:29:91:44:18:2b:34:76:
b5:9c:d4:0c:44:47:33:d6:2a:83:0c:5a:22:b7:42:d3:13:dd:
0b:52:b7:a9:0f:73:1d:16:2a:ce:59:42:f0:c5:0b:84:58:7b:
35:30:c9:d7:e8:5b:f5:e5:35:37:8c:78:5e:91:70:e8:e8:c2:
58:4b:3a:d1:60:f8:01:cf:e1:d8:6e:8a:7f:44:06:cf:c0:68:
14:82:19:8b:b7:64:4f:08:35:53:dd:ad:48:ea:8a:0b:01:40:
53:50:de:d5
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZFhjgQ6Hkn6GMKPEBSstfmfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjQwODE3MTgxNjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmFkNTA5ZWVhMmNkNjgxZGVlMzNkYWRhY2QwZmQwNTY2NjcyZmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Mf9F7T5p2EvWWTJvJP0qxoSYJTX
YZJ30ksWMetYckf+nPPVt21XnMly1SACDR6oxGdzlaiw3cHQZJZDojFxJbj3SQb4
nqGrkD2kriy4KTTsxe3NhnEUYmIa0zS32QI4hpUvseFeXv3bUGuZSkI3p3NvCVI2
nvLv7e9IkWSoDWO2WjydOlAgI6c+4XxrSAEvFFfQV+Ycy8ZmbV0VQ0eGTsu9wlpq
+V7dcZQ+R6fLKNBdQ/p3nCE4t1NDs/VT+4iMMg9vFw1Uw1ydzMT6SzPMRMX11Dwx
KFCdPgYhnuQSPLmXwYoNQlYWfgumSotktPptpppDDqMcjSoiEJQIAu8FRQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFG+tUJ7qLNaB3uM9razQ/QVmZy/MMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvYjYxUW51b3Mxb0hlNHoydHJORDlCV1puTDh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmMBADBgAqCnnH
9QMGACoKecf2MBIDBwAqCnnH+AEDBwAqCnnH+AIwDQYJKoZIhvcNAQELBQADggEB
AG0SP8UoqQHaf2xz85X5Lsdx+slKthLyn//ZecypNiG6EzadG9CZuCayj6xBGyqs
+20nuQbU9SeeLYVltfl8tx3IBR9/G3AB5CpPJ0MaRSCmYVSU2fw8dpP4Uu7WrQkA
gmLRgmADXvC3pi2KJpw0fSfNO1TeGMRq0yNcovD1CnphTRRNOv6OBCeoEynl9oTf
G6khnCLQPfNNcQ5AKZFEGCs0drWc1AxERzPWKoMMWiK3QtMT3QtSt6kPcx0WKs5Z
QvDFC4RYezUwydfoW/XlNTeMeF6RcOjowlhLOtFg+AHP4dhuin9EBs/AaBSCGYu3
ZE8INVPdrUjqigsBQFNQ3tU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:58:37 2024 by rpki-client on console-fra.rpki-client.org