Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/1B7mTKFD5t7Y9Qy2XYKxfIDApBs.roa
File: 1B7mTKFD5t7Y9Qy2XYKxfIDApBs.roa (raw, json)
Hash identifier: fmr44mLV8peoXkxNspse+DPdd4ROEvAvHJbzC4hYLh0=
Subject key identifier: D4:1E:E6:4C:A1:43:E6:DE:D8:F5:0C:B6:5D:82:B1:7C:80:C0:A4:1B
Certificate issuer: /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial: 018CC26CFDA6FFD54B4E377FF62C3F05F39A
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/1B7mTKFD5t7Y9Qy2XYKxfIDApBs.roa
Signing time: Mon 01 Jan 2024 00:29:31 +0000
ROA not before: Mon 01 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208394
IP address blocks: 2a09:3a00:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fd:a6:ff:d5:4b:4e:37:7f:f6:2c:3f:05:f3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
Validity
Not Before: Jan 1 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d41ee64ca143e6ded8f50cb65d82b17c80c0a41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b3:08:fa:11:62:b1:cc:0c:77:5a:c1:24:18:
22:f3:5e:77:1e:d3:6f:7d:a1:9f:13:09:4f:d8:88:
8e:81:6c:01:e1:14:3a:ed:a3:8a:c6:e8:f5:c8:8c:
c0:99:7a:fb:02:2c:f7:93:c4:8e:00:51:58:6b:42:
a0:b8:4d:16:d2:01:9e:7f:2c:c6:ce:01:4e:08:54:
9e:64:f4:d9:2a:db:88:b2:7f:09:40:09:9a:bb:41:
f7:a2:26:da:94:2f:08:d5:f5:cb:5e:31:99:8f:f2:
6a:f3:bf:60:00:dc:de:78:68:b5:ce:ac:7b:92:cf:
f7:24:99:f3:0b:f8:95:42:cf:82:78:dc:58:8a:55:
c6:03:e3:6c:08:22:74:36:d3:e7:21:f9:b0:81:bc:
42:a5:c6:f4:ec:39:05:8d:b8:85:94:f5:ab:95:bf:
f9:da:e6:67:7a:a0:7a:0e:37:2a:5f:e1:94:b7:5d:
f6:82:20:7c:a6:00:79:6b:11:b5:70:3b:2b:39:e2:
8e:f1:b9:6a:89:f2:f1:33:ea:d3:f8:a9:45:40:82:
e0:f6:b1:9e:c0:52:89:3a:0e:a9:43:6b:00:1f:52:
26:fa:fb:d0:01:de:c7:49:96:fd:b8:e3:be:01:41:
fd:d2:bf:3d:f0:cf:e8:4b:f3:96:63:c7:d9:a7:fe:
07:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1E:E6:4C:A1:43:E6:DE:D8:F5:0C:B6:5D:82:B1:7C:80:C0:A4:1B
X509v3 Authority Key Identifier:
keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/1B7mTKFD5t7Y9Qy2XYKxfIDApBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3a00:6000::/48
Signature Algorithm: sha256WithRSAEncryption
09:9a:96:58:ff:4a:c8:5f:05:af:4d:ed:90:86:00:b5:7e:32:
77:d5:39:79:80:78:9c:91:68:19:d1:2f:6b:44:f4:0a:27:25:
10:e0:cd:9f:8b:ea:96:e0:ae:f6:c3:e9:39:0f:b4:44:00:dc:
f7:e2:94:7c:81:67:6f:f6:fb:32:f9:69:7c:a6:ac:cd:99:b1:
2b:9a:38:6d:37:c6:be:18:58:a3:22:79:da:8d:33:00:14:f8:
4c:ed:c8:0a:0b:24:72:f6:f3:27:64:ae:b2:30:87:1b:8e:c8:
1c:cd:5d:5c:c2:87:dd:26:95:43:ae:33:5b:32:8b:ae:2c:1a:
2b:a0:db:73:24:81:08:d7:d3:95:a5:31:34:1c:34:3d:1b:e5:
87:af:bf:b7:17:db:7e:0c:76:5f:1a:0a:f3:66:f3:22:29:e9:
a0:d8:0b:1d:c8:33:e3:35:dc:00:2f:31:55:0c:d6:77:bf:f2:
b1:bf:63:27:92:28:58:0b:64:35:cd:fa:4d:5f:29:92:30:2a:
9f:95:a9:79:e4:7c:39:02:41:52:a7:5c:46:df:83:93:51:19:
e5:8f:57:fb:f0:e7:49:60:be:30:dc:d7:82:7b:b1:f4:29:f8:
fd:07:ee:5e:a8:9d:fb:55:92:b3:1d:a5:91:67:e2:20:f5:b1:
4c:15:5f:79
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzCbP2m/9VLTjd/9iw/BfOaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MWJhZDk1Mjc2OTQ3YzdiZTUzNmFmNGM4NzBhMzcyMWYw
Yjc3NjEwHhcNMjQwMTAxMDAyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDFlZTY0Y2ExNDNlNmRlZDhmNTBjYjY1ZDgyYjE3YzgwYzBhNDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7MI+hFiscwMd1rBJBgi8153HtNv
faGfEwlP2IiOgWwB4RQ67aOKxuj1yIzAmXr7Aiz3k8SOAFFYa0KguE0W0gGefyzG
zgFOCFSeZPTZKtuIsn8JQAmau0H3oibalC8I1fXLXjGZj/Jq879gANzeeGi1zqx7
ks/3JJnzC/iVQs+CeNxYilXGA+NsCCJ0NtPnIfmwgbxCpcb07DkFjbiFlPWrlb/5
2uZneqB6DjcqX+GUt132giB8pgB5axG1cDsrOeKO8blqifLxM+rT+KlFQILg9rGe
wFKJOg6pQ2sAH1Im+vvQAd7HSZb9uOO+AUH90r898M/oS/OWY8fZp/4HawIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNQe5kyhQ+be2PUMtl2CsXyAwKQbMB8GA1UdIwQY
MBaAFGUbrZUnaUfHvlNq9Mhwo3IfC3dhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJ1dGxTZHBSOGUtVTJyMHlIQ2pjaDhMZDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xZGJkNmItMzVjYy00ZjA5LWI5MmUt
MTk4YjZhNjFjZTg1LzEvMUI3bVRLRkQ1dDdZOVF5MlhZS3hmSURBcEJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xZGJkNmItMzVjYy00ZjA5LWI5MmUtMTk4YjZhNjFjZTg1
LzEvWlJ1dGxTZHBSOGUtVTJyMHlIQ2pjaDhMZDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgk6AGAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAJmpZY/0rIXwWvTe2QhgC1fjJ31Tl5gHickWgZ
0S9rRPQKJyUQ4M2fi+qW4K72w+k5D7REANz34pR8gWdv9vsy+Wl8pqzNmbErmjht
N8a+GFijInnajTMAFPhM7cgKCyRy9vMnZK6yMIcbjsgczV1cwofdJpVDrjNbMouu
LBoroNtzJIEI19OVpTE0HDQ9G+WHr7+3F9t+DHZfGgrzZvMiKemg2AsdyDPjNdwA
LzFVDNZ3v/Kxv2MnkihYC2Q1zfpNXymSMCqflal55Hw5AkFSp1xG34OTURnlj1f7
8OdJYL4w3NeCe7H0Kfj9B+5eqJ37VZKzHaWRZ+Ig9bFMFV95
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:51:10 2024 by rpki-client on console-fra.rpki-client.org