Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/w85ZrirDCUjjg6QvXVz7YbEL33o.roa
File: w85ZrirDCUjjg6QvXVz7YbEL33o.roa (raw, json)
Hash identifier: QvHa3n4VUBtjwB9z8ncS44mJtu08egtU7uoDWyGdbu8=
Subject key identifier: C3:CE:59:AE:2A:C3:09:48:E3:83:A4:2F:5D:5C:FB:61:B1:0B:DF:7A
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018CD164B98018CBF5699F8808C3B6998101
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/w85ZrirDCUjjg6QvXVz7YbEL33o.roa
Signing time: Wed 03 Jan 2024 22:14:48 +0000
ROA not before: Wed 03 Jan 2024 22:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2a0f:5707:ba0f::/48 maxlen: 48
2a0f:5707:ba0e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d1:64:b9:80:18:cb:f5:69:9f:88:08:c3:b6:99:81:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 3 22:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3ce59ae2ac30948e383a42f5d5cfb61b10bdf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:34:d0:d8:73:1c:5c:75:1c:6a:95:16:ec:aa:
b5:ce:47:2b:52:e4:52:3b:1f:52:e0:37:4b:19:a3:
47:dd:30:eb:58:52:58:fc:86:6c:69:d5:01:e4:c1:
34:d0:5d:79:20:72:ee:f6:41:49:40:37:8d:37:27:
52:96:e3:4c:bc:6b:79:f6:42:b2:2a:63:4f:18:bf:
55:61:d0:72:e6:31:20:6e:27:a4:0d:b5:56:24:ce:
d6:3a:48:68:6f:c1:d8:41:a5:57:d4:8b:c0:c0:fd:
10:69:2f:a2:39:2f:15:46:0d:dc:6f:33:71:9f:bf:
97:65:64:d7:e8:c8:e8:7b:46:37:7b:21:86:a7:3c:
3e:e0:8b:8f:e1:5b:7b:7f:1b:51:86:02:bc:64:dd:
18:3b:f7:6d:dc:d1:3a:00:fa:ac:0e:ca:36:0f:6d:
ba:c8:95:36:49:e1:1c:df:e3:59:83:19:5f:9a:ba:
a5:5f:6a:34:13:2f:aa:dc:0d:6c:db:41:85:09:b2:
ca:ad:6d:d6:b5:65:86:64:97:fe:01:cb:27:b3:e2:
c8:50:69:30:09:a5:66:cc:55:b9:11:34:2d:35:e4:
72:fe:1a:00:d8:d7:7a:8d:c3:41:e2:27:d5:ae:0a:
fc:e4:63:99:06:10:3c:64:aa:3c:46:89:67:44:de:
85:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CE:59:AE:2A:C3:09:48:E3:83:A4:2F:5D:5C:FB:61:B1:0B:DF:7A
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/w85ZrirDCUjjg6QvXVz7YbEL33o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:ba0e::/47
Signature Algorithm: sha256WithRSAEncryption
be:fe:7a:d2:c5:da:08:94:83:af:2e:63:69:6a:9f:62:9b:68:
d3:8a:4c:a2:8d:9c:05:a6:86:bf:bd:90:7c:7f:ff:99:b8:18:
26:e7:67:a1:c8:cc:e4:fc:42:b5:54:78:07:34:fd:94:76:c7:
ba:d5:98:0a:1b:53:8f:16:e0:be:76:c4:3c:36:50:bf:02:3f:
08:56:3b:9f:71:ba:d4:4b:af:98:f3:e9:c5:3e:e2:41:44:46:
c5:29:53:ec:1a:08:5d:45:ed:7b:07:d1:e9:c2:a0:e1:70:cc:
79:a6:90:31:11:f8:ea:ef:14:6c:9e:a2:cc:bd:15:e9:eb:94:
6b:73:32:c6:3f:12:21:63:1e:f6:ee:64:1a:db:ba:89:67:09:
fa:7b:4b:19:dc:1b:73:36:9d:33:fd:bf:ab:fe:49:76:70:fb:
1e:2e:96:d3:30:66:c3:45:ef:c6:d3:ba:aa:4b:37:d2:fd:a0:
23:f0:fd:d8:d3:9a:1b:f9:0d:6f:42:89:74:68:86:63:9c:01:
b0:d7:e6:0b:19:12:0e:fe:ce:df:84:4e:95:e8:9f:89:54:e4:
08:59:46:0b:27:00:9f:30:22:fb:08:6f:4a:6a:e4:8c:45:45:
a3:4c:27:e1:d4:12:6d:9a:5a:04:78:0f:51:fa:3a:e0:b5:fe:
18:e4:27:e2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzRZLmAGMv1aZ+ICMO2mYEBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk
NWFlZjAwHhcNMjQwMTAzMjIxNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2NlNTlhZTJhYzMwOTQ4ZTM4M2E0MmY1ZDVjZmI2MWIxMGJkZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDTQ2HMcXHUcapUW7Kq1zkcrUuRS
Ox9S4DdLGaNH3TDrWFJY/IZsadUB5ME00F15IHLu9kFJQDeNNydSluNMvGt59kKy
KmNPGL9VYdBy5jEgbiekDbVWJM7WOkhob8HYQaVX1IvAwP0QaS+iOS8VRg3cbzNx
n7+XZWTX6Mjoe0Y3eyGGpzw+4IuP4Vt7fxtRhgK8ZN0YO/dt3NE6APqsDso2D226
yJU2SeEc3+NZgxlfmrqlX2o0Ey+q3A1s20GFCbLKrW3WtWWGZJf+Acsns+LIUGkw
CaVmzFW5ETQtNeRy/hoA2Nd6jcNB4ifVrgr85GOZBhA8ZKo8RolnRN6FAQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMPOWa4qwwlI44OkL11c+2GxC996MB8GA1UdIwQY
MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt
Y2MxYzliNWY2NjQwLzEvdzg1WnJpckRDVWpqZzZRdlhWejdZYkVMMzNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw
LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKg9XB7oO
MA0GCSqGSIb3DQEBCwUAA4IBAQC+/nrSxdoIlIOvLmNpap9im2jTikyijZwFpoa/
vZB8f/+ZuBgm52ehyMzk/EK1VHgHNP2Udse61ZgKG1OPFuC+dsQ8NlC/Aj8IVjuf
cbrUS6+Y8+nFPuJBREbFKVPsGghdRe17B9HpwqDhcMx5ppAxEfjq7xRsnqLMvRXp
65RrczLGPxIhYx727mQa27qJZwn6e0sZ3BtzNp0z/b+r/kl2cPseLpbTMGbDRe/G
07qqSzfS/aAj8P3Y05ob+Q1vQol0aIZjnAGw1+YLGRIO/s7fhE6V6J+JVOQIWUYL
JwCfMCL7CG9KauSMRUWjTCfh1BJtmloEeA9R+jrgtf4Y5Cfi
-----END CERTIFICATE-----
Generated at Thu May 2 23:09:02 2024 by rpki-client on console-fra.rpki-client.org