Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/FebS1h220mdyqTabQEyHTQqPBQA.roa
File: FebS1h220mdyqTabQEyHTQqPBQA.roa (raw, json)
Hash identifier: nmNk1qLxckoBfqZaZzrzORUpQIgvU/gQzpmo/Xe5Tg8=
Subject key identifier: 15:E6:D2:D6:1D:B6:D2:67:72:A9:36:9B:40:4C:87:4D:0A:8F:05:00
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 01934DF3B6971F1738650B1EAB6A30EEAD54
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/FebS1h220mdyqTabQEyHTQqPBQA.roa
Signing time: Thu 21 Nov 2024 09:00:37 +0000
ROA not before: Thu 21 Nov 2024 09:00:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208421
IP address blocks: 2a01:e901:106::/48 maxlen: 48
2a01:e901:116::/48 maxlen: 48
2a01:e901:126::/48 maxlen: 48
2a01:e901:136::/48 maxlen: 48
2a01:e901:146::/48 maxlen: 48
2a01:e901:156::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4d:f3:b6:97:1f:17:38:65:0b:1e:ab:6a:30:ee:ad:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Nov 21 09:00:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15e6d2d61db6d26772a9369b404c874d0a8f0500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:99:30:39:e5:1a:44:6c:9d:9c:01:38:dc:
c6:f7:f6:06:bf:c3:25:fa:e3:e6:dc:5e:5b:6e:65:
44:80:38:c6:00:29:30:c6:2c:81:93:2e:8e:42:09:
68:81:1c:a0:8b:5a:19:de:0d:36:96:2f:d6:2a:2d:
1a:f8:2b:96:b7:9c:70:96:20:46:9d:12:f4:67:de:
d3:34:49:9b:0b:9c:48:04:80:4d:01:47:48:7c:3d:
52:2f:53:07:7a:0e:0d:cb:0b:44:f1:4c:2f:be:e2:
2b:14:09:51:d7:35:0b:4a:81:25:78:1a:e9:2a:e5:
12:b3:68:69:d2:20:8d:64:78:b2:87:43:fb:a4:b7:
05:f5:7f:96:70:35:e6:44:57:bb:d0:e1:51:94:d7:
09:f6:c5:03:67:fe:ad:e2:33:ed:9c:12:d1:27:92:
71:c4:9c:a5:47:e1:3b:47:78:0b:ba:d0:53:8a:1a:
5b:ed:53:5a:37:5e:41:fa:85:5a:a1:ab:9b:6b:43:
6c:3e:23:78:e6:df:19:99:75:71:9d:d8:31:83:ca:
39:7d:c9:54:c7:ef:8a:2e:0f:6c:1a:39:3c:ef:37:
1d:7f:43:3a:3b:56:9f:91:78:74:ca:1a:a8:d1:36:
dc:a2:41:d3:ec:9d:24:2c:54:73:9a:eb:33:d8:6f:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E6:D2:D6:1D:B6:D2:67:72:A9:36:9B:40:4C:87:4D:0A:8F:05:00
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/FebS1h220mdyqTabQEyHTQqPBQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:106::/48
2a01:e901:116::/48
2a01:e901:126::/48
2a01:e901:136::/48
2a01:e901:146::/48
2a01:e901:156::/48
Signature Algorithm: sha256WithRSAEncryption
68:67:95:af:c8:63:e3:3d:3b:45:33:a1:4a:c4:48:78:64:df:
57:65:b9:91:ee:57:01:4e:b9:73:62:a4:41:12:bf:63:19:0f:
47:94:0e:98:ad:27:14:61:c9:9c:41:ec:d3:cf:9b:74:58:8f:
a4:44:94:16:2b:e4:6a:21:c3:14:9b:dc:50:5b:11:be:f3:c4:
7c:70:09:ff:81:c8:46:b5:f8:5d:81:53:b0:2c:e4:4a:5c:be:
e2:44:49:bb:d2:27:96:f6:f3:bb:47:23:85:b6:c2:84:be:49:
02:63:f7:f0:e2:1e:79:40:4c:5f:8d:e2:cb:e5:a7:62:38:81:
60:3e:1b:7a:fe:d2:ec:2c:ed:e7:ef:3d:fc:c4:5b:ce:45:56:
45:aa:53:98:6d:71:94:be:21:b9:dd:64:ee:2c:90:28:f4:d5:
10:92:5e:c9:ac:44:22:e0:f5:de:3f:d3:62:ca:e1:b0:68:55:
2c:ad:1c:9d:eb:c0:92:ec:df:18:48:7c:39:94:75:93:ab:89:
b3:25:01:ae:a1:e4:d0:2e:03:d9:c9:84:9c:9e:06:6c:0e:14:
80:fa:50:84:70:91:28:e5:a2:1a:42:f2:f2:87:55:f1:72:ea:
45:65:d8:1b:c0:44:bb:d8:6e:5c:28:cd:cf:1c:10:a7:df:8f:
ec:46:8c:f1
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZNN87aXHxc4ZQseq2ow7q1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi
NzgzYzIwHhcNMjQxMTIxMDkwMDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWU2ZDJkNjFkYjZkMjY3NzJhOTM2OWI0MDRjODc0ZDBhOGYwNTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouOZMDnlGkRsnZwBONzG9/YGv8Ml
+uPm3F5bbmVEgDjGACkwxiyBky6OQglogRygi1oZ3g02li/WKi0a+CuWt5xwliBG
nRL0Z97TNEmbC5xIBIBNAUdIfD1SL1MHeg4NywtE8UwvvuIrFAlR1zULSoEleBrp
KuUSs2hp0iCNZHiyh0P7pLcF9X+WcDXmRFe70OFRlNcJ9sUDZ/6t4jPtnBLRJ5Jx
xJylR+E7R3gLutBTihpb7VNaN15B+oVaoauba0NsPiN45t8ZmXVxndgxg8o5fclU
x++KLg9sGjk87zcdf0M6O1afkXh0yhqo0TbcokHT7J0kLFRzmusz2G+PcwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFBXm0tYdttJncqk2m0BMh00KjwUAMB8GA1UdIwQY
MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt
NDRmOGVkNWQ2MWQ3LzEvRmViUzFoMjIwbWR5cVRhYlFFeUhUUXFQQlFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3
LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAKgHpAQEG
AwcAKgHpAQEWAwcAKgHpAQEmAwcAKgHpAQE2AwcAKgHpAQFGAwcAKgHpAQFWMA0G
CSqGSIb3DQEBCwUAA4IBAQBoZ5WvyGPjPTtFM6FKxEh4ZN9XZbmR7lcBTrlzYqRB
Er9jGQ9HlA6YrScUYcmcQezTz5t0WI+kRJQWK+RqIcMUm9xQWxG+88R8cAn/gchG
tfhdgVOwLORKXL7iREm70ieW9vO7RyOFtsKEvkkCY/fw4h55QExfjeLL5adiOIFg
Pht6/tLsLO3n7z38xFvORVZFqlOYbXGUviG53WTuLJAo9NUQkl7JrEQi4PXeP9Ni
yuGwaFUsrRyd68CS7N8YSHw5lHWTq4mzJQGuoeTQLgPZyYScngZsDhSA+lCEcJEo
5aIaQvLyh1XxcupFZdgbwES72G5cKM3PHBCn34/sRozx
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:45:50 2024 by rpki-client on console-ams.rpki-client.org