Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/tJ5VpsLXByfieS_5QSgO8HDUgys.roa
File: tJ5VpsLXByfieS_5QSgO8HDUgys.roa (raw, json)
Hash identifier: gxHgQpbS2ThI39xCXmHPh+CO7uQ0bDrX+YtpACBNXgk=
Subject key identifier: B4:9E:55:A6:C2:D7:07:27:E2:79:2F:F9:41:28:0E:F0:70:D4:83:2B
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 018CC64B6211FF2E42A117B31A7AFC6B5273
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/tJ5VpsLXByfieS_5QSgO8HDUgys.roa
Signing time: Mon 01 Jan 2024 18:31:18 +0000
ROA not before: Mon 01 Jan 2024 18:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48314
IP address blocks: 2a0e:46c4:1447::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:62:11:ff:2e:42:a1:17:b3:1a:7a:fc:6b:52:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 18:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b49e55a6c2d70727e2792ff941280ef070d4832b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:05:49:a9:1a:a9:69:08:86:57:f6:d1:8d:17:
51:4b:b1:ce:b6:83:3b:51:a4:4f:f9:88:48:75:cf:
2b:56:c5:eb:e7:9e:03:9a:2a:2b:18:fa:6b:52:ec:
ea:b8:39:f1:7f:84:7f:85:12:5e:c5:7b:11:ef:a3:
98:b5:1f:64:31:75:2a:ef:87:d2:da:73:27:5e:66:
cf:b4:28:b3:b9:4e:bb:1c:ee:52:c2:60:b9:4b:4b:
a4:2f:ea:28:e7:f1:3a:23:d2:7c:71:9b:79:53:56:
0b:00:47:6a:75:77:01:cf:d3:35:1d:48:9d:13:5e:
06:c5:0f:0f:24:4a:50:c5:35:f9:d7:89:f5:59:95:
d6:ff:6f:75:79:dc:ab:b3:e5:0a:dd:b2:3e:90:d9:
08:73:42:b8:a7:e8:99:90:9d:d4:96:62:72:68:9f:
52:9b:19:15:2d:fe:9f:b7:61:3f:37:a2:41:cd:ed:
23:36:48:36:90:92:f5:d8:77:06:5b:04:16:96:45:
27:c3:a4:0a:68:bc:be:b0:3f:84:02:e4:ac:52:8e:
b5:cc:10:e6:27:60:11:6e:e3:12:c4:67:76:2c:4b:
eb:c1:ef:e8:a1:d5:43:45:cf:9d:10:d1:61:2e:bb:
c8:70:37:c6:33:8b:59:e6:66:62:40:e4:e1:3a:14:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9E:55:A6:C2:D7:07:27:E2:79:2F:F9:41:28:0E:F0:70:D4:83:2B
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/tJ5VpsLXByfieS_5QSgO8HDUgys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:1447::/48
Signature Algorithm: sha256WithRSAEncryption
2b:a5:0c:b9:a8:3f:f2:de:ee:ae:94:d1:6b:40:22:77:5b:c6:
0e:b8:28:7f:44:c4:bb:4a:82:f6:1e:d5:9c:cc:e8:8f:9f:46:
1a:f9:a4:54:1e:3b:0f:93:97:b4:cb:5e:30:17:37:dd:09:07:
17:e8:38:84:e5:da:84:e4:ac:2f:e6:ee:ac:e1:a1:95:c1:e9:
e1:8d:b8:ae:d3:01:08:6c:ab:f7:2e:c7:d4:26:59:b4:1e:3a:
67:d1:b8:e8:27:1f:1b:f1:50:48:0c:3c:62:94:d7:88:dd:37:
fb:93:a8:b4:2d:77:41:22:08:c2:c6:e0:7f:41:b8:54:6e:fb:
a6:25:05:e6:48:d5:b5:62:f6:69:f8:5a:c5:ac:03:19:d9:e5:
3d:64:61:8a:6c:3f:a8:26:f8:d9:e4:c0:81:a7:74:a6:47:d9:
5e:9e:3b:88:65:aa:27:49:c1:f8:99:d0:c5:56:3f:d5:24:ed:
a9:42:f8:be:f8:e0:03:07:99:bb:9b:00:e4:64:49:53:0a:31:
70:d7:4d:66:ad:a4:e3:d8:07:e6:67:0e:a1:ef:94:2f:06:e4:
ec:c2:2f:8a:ff:71:2f:ce:23:16:40:9a:0f:b5:f4:b7:b5:70:
de:ce:ed:56:b0:cb:ed:50:47:7c:8c:d1:c5:a5:17:ba:fb:f3:
75:2b:7b:32
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzGS2IR/y5CoRezGnr8a1JzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm
MGI0ZjcwHhcNMjQwMTAxMTgzMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDllNTVhNmMyZDcwNzI3ZTI3OTJmZjk0MTI4MGVmMDcwZDQ4MzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwVJqRqpaQiGV/bRjRdRS7HOtoM7
UaRP+YhIdc8rVsXr554DmiorGPprUuzquDnxf4R/hRJexXsR76OYtR9kMXUq74fS
2nMnXmbPtCizuU67HO5SwmC5S0ukL+oo5/E6I9J8cZt5U1YLAEdqdXcBz9M1HUid
E14GxQ8PJEpQxTX514n1WZXW/291edyrs+UK3bI+kNkIc0K4p+iZkJ3UlmJyaJ9S
mxkVLf6ft2E/N6JBze0jNkg2kJL12HcGWwQWlkUnw6QKaLy+sD+EAuSsUo61zBDm
J2ARbuMSxGd2LEvrwe/oodVDRc+dENFhLrvIcDfGM4tZ5mZiQOThOhRYCwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLSeVabC1wcn4nkv+UEoDvBw1IMrMB8GA1UdIwQY
MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt
ODU4ZGNlNTdmY2RiLzEvdEo1VnBzTFhCeWZpZVNfNVFTZ084SERVZ3lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri
LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg5GxBRH
MA0GCSqGSIb3DQEBCwUAA4IBAQArpQy5qD/y3u6ulNFrQCJ3W8YOuCh/RMS7SoL2
HtWczOiPn0Ya+aRUHjsPk5e0y14wFzfdCQcX6DiE5dqE5Kwv5u6s4aGVwenhjbiu
0wEIbKv3LsfUJlm0Hjpn0bjoJx8b8VBIDDxilNeI3Tf7k6i0LXdBIgjCxuB/QbhU
bvumJQXmSNW1YvZp+FrFrAMZ2eU9ZGGKbD+oJvjZ5MCBp3SmR9lenjuIZaonScH4
mdDFVj/VJO2pQvi++OADB5m7mwDkZElTCjFw101mraTj2AfmZw6h75QvBuTswi+K
/3EvziMWQJoPtfS3tXDezu1WsMvtUEd8jNHFpRe6+/N1K3sy
-----END CERTIFICATE-----
Generated at Sun Jun 2 23:42:53 2024 by rpki-client on console-ams.rpki-client.org