Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/pdhivkohYWfXr-9TXrpkKjcH4mM.roa
File: pdhivkohYWfXr-9TXrpkKjcH4mM.roa (raw, json)
Hash identifier: uwE26pkhYOQz0Wgfp+Nym/Jit4JmguACahwil3ZaTKU=
Subject key identifier: A5:D8:62:BE:4A:21:61:67:D7:AF:EF:53:5E:BA:64:2A:37:07:E2:63
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018CCA2A50B9B1BBA63825E8B1CF038DFECD
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/pdhivkohYWfXr-9TXrpkKjcH4mM.roa
Signing time: Tue 02 Jan 2024 12:33:39 +0000
ROA not before: Tue 02 Jan 2024 12:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134666
IP address blocks: 2a06:e881:480f::/48 maxlen: 48
2a06:e881:4800::/48 maxlen: 48
2a06:e881:4801::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:50:b9:b1:bb:a6:38:25:e8:b1:cf:03:8d:fe:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 12:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5d862be4a216167d7afef535eba642a3707e263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a9:5a:af:5e:cc:12:73:1b:ed:18:00:9a:25:
45:54:54:30:1f:12:f6:e5:f3:33:6d:42:83:e3:b2:
93:d9:a2:fe:4c:d6:31:bd:9a:91:d8:f2:a2:d0:f3:
3b:ec:c7:8f:80:c7:fe:8c:69:53:61:25:d4:b7:52:
fc:9d:f5:9b:18:57:a9:c6:98:2c:25:49:f3:ee:11:
98:c3:4c:3f:ac:41:ff:30:cc:b8:45:92:43:d5:d1:
a8:e8:46:57:0a:1d:5e:2e:c6:8c:8a:17:95:ad:59:
61:b9:07:81:c0:62:c9:a5:4b:ac:54:4c:66:94:45:
54:c3:99:7f:04:55:96:17:4c:e3:a1:fe:8b:de:d9:
b5:3f:4d:42:7e:b4:2d:6d:a5:6d:ea:ac:7b:da:cf:
d5:99:bc:5b:28:85:11:4d:cf:08:71:b1:51:7c:8d:
a2:f8:7b:b1:8b:85:33:52:78:76:13:41:64:7e:22:
b1:a5:bf:13:a8:5b:61:60:7f:9a:55:ef:ad:56:80:
56:c3:f8:72:53:3e:e8:de:64:c5:b1:1a:fb:cd:e1:
93:03:e0:ee:dc:a9:e5:43:ad:84:76:93:32:5d:9b:
8e:84:26:e5:97:4b:30:2b:08:76:25:a4:4e:7a:9b:
63:71:a1:04:13:72:e5:23:bd:2a:b8:b3:58:25:8a:
12:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D8:62:BE:4A:21:61:67:D7:AF:EF:53:5E:BA:64:2A:37:07:E2:63
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/pdhivkohYWfXr-9TXrpkKjcH4mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:4800::/47
2a06:e881:480f::/48
Signature Algorithm: sha256WithRSAEncryption
90:c0:38:74:a8:bb:c8:28:5f:2c:b2:9e:8f:f7:06:f6:dd:76:
09:f5:e8:87:14:f3:a9:6a:31:12:d7:30:6e:7d:99:e7:2e:4a:
a1:81:68:02:d3:f7:1d:9e:5e:f9:92:db:89:b1:11:d3:06:bf:
b1:7e:06:c5:07:36:a5:71:2c:86:26:dd:d9:dd:f3:aa:b5:e8:
4f:9b:5e:86:33:1f:53:ec:7d:3d:d9:69:84:4f:b4:eb:b0:68:
3c:c1:51:5b:65:ba:27:ea:25:a2:2b:03:0b:9a:fb:f5:1a:1c:
d6:a5:5e:0e:d6:c9:20:a2:dd:99:0d:f4:94:44:5a:e0:f4:16:
e0:0e:0d:f1:16:4f:88:d5:eb:09:f9:58:f6:1f:88:2b:82:f1:
75:27:89:ca:9b:3a:30:5e:4d:d6:96:2f:9c:a9:5e:11:5b:87:
f4:8a:08:e9:b5:8b:bd:a3:da:29:a2:ba:74:c1:2a:a9:16:9d:
7d:ff:92:e3:61:ae:00:94:19:07:c9:ac:6f:65:f2:e6:9a:1f:
21:63:63:90:99:29:f8:9c:08:22:57:ee:a3:25:24:3b:eb:0d:
79:f6:af:c0:fc:93:51:4b:47:92:98:e5:a2:22:12:87:3c:70:
14:44:1c:d1:5a:47:86:59:7e:e4:3a:3d:7f:4c:17:80:a7:92:
cd:1e:13:70
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzKKlC5sbumOCXosc8Djf7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjQwMTAyMTIzMzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWQ4NjJiZTRhMjE2MTY3ZDdhZmVmNTM1ZWJhNjQyYTM3MDdlMjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmalar17MEnMb7RgAmiVFVFQwHxL2
5fMzbUKD47KT2aL+TNYxvZqR2PKi0PM77MePgMf+jGlTYSXUt1L8nfWbGFepxpgs
JUnz7hGYw0w/rEH/MMy4RZJD1dGo6EZXCh1eLsaMiheVrVlhuQeBwGLJpUusVExm
lEVUw5l/BFWWF0zjof6L3tm1P01CfrQtbaVt6qx72s/VmbxbKIURTc8IcbFRfI2i
+Huxi4UzUnh2E0FkfiKxpb8TqFthYH+aVe+tVoBWw/hyUz7o3mTFsRr7zeGTA+Du
3KnlQ62EdpMyXZuOhCbll0swKwh2JaROeptjcaEEE3LlI70quLNYJYoSAQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKXYYr5KIWFn16/vU166ZCo3B+JjMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvcGRoaXZrb2hZV2ZYci05VFhycGtLamNING1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcBKgbogUgA
AwcAKgbogUgPMA0GCSqGSIb3DQEBCwUAA4IBAQCQwDh0qLvIKF8ssp6P9wb23XYJ
9eiHFPOpajES1zBufZnnLkqhgWgC0/cdnl75ktuJsRHTBr+xfgbFBzalcSyGJt3Z
3fOqtehPm16GMx9T7H092WmET7TrsGg8wVFbZbon6iWiKwMLmvv1GhzWpV4O1skg
ot2ZDfSURFrg9BbgDg3xFk+I1esJ+Vj2H4grgvF1J4nKmzowXk3Wli+cqV4RW4f0
igjptYu9o9oporp0wSqpFp19/5LjYa4AlBkHyaxvZfLmmh8hY2OQmSn4nAgiV+6j
JSQ76w159q/A/JNRS0eSmOWiIhKHPHAURBzRWkeGWX7kOj1/TBeAp5LNHhNw
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:56:01 2024 by rpki-client on console-ams.rpki-client.org