Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/bc9tAxlzI3wtYgiMHqWBhn2IBxg.roa
File: bc9tAxlzI3wtYgiMHqWBhn2IBxg.roa (raw, json)
Hash identifier: UBDAjC9L9xd/IF3o5Y/+asgYvJg3z9vgnlx0/eaxexE=
Subject key identifier: 6D:CF:6D:03:19:73:23:7C:2D:62:08:8C:1E:A5:81:86:7D:88:07:18
Certificate issuer: /CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
Certificate serial: 018CC6B7BECB2F650FB0E45ECEB46133EE20
Authority key identifier: 51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/bc9tAxlzI3wtYgiMHqWBhn2IBxg.roa
Signing time: Mon 01 Jan 2024 20:29:39 +0000
ROA not before: Mon 01 Jan 2024 20:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208069
IP address blocks: 2001:67c:c38::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:be:cb:2f:65:0f:b0:e4:5e:ce:b4:61:33:ee:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
Validity
Not Before: Jan 1 20:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6dcf6d031973237c2d62088c1ea581867d880718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:94:2a:29:00:29:58:7a:57:56:4e:66:93:e1:
8c:bb:7e:39:c7:24:4d:c5:6a:b1:93:73:52:cd:90:
71:15:1f:97:c0:07:d3:34:f8:80:d5:b1:84:7e:e4:
4c:4b:d9:2f:7b:33:0b:1d:05:d6:c5:5b:67:69:a2:
0f:b8:f7:10:1f:48:ac:9c:23:55:35:90:15:30:44:
2f:92:c8:26:91:f5:f7:f8:56:f1:80:8b:1b:3c:81:
9c:3d:8f:ce:94:8f:68:e6:fc:32:9e:3a:d1:1e:60:
b9:33:79:3d:59:1e:d4:5a:52:70:65:9c:e6:14:e3:
a3:61:77:f6:79:12:34:c6:7d:2d:29:39:fb:c1:59:
9d:c8:c3:95:9c:3f:2c:2b:85:fa:94:65:d6:27:25:
87:41:12:60:5a:35:2b:9e:d7:8f:e9:32:71:9c:12:
b4:81:a1:a1:a3:a1:43:53:75:59:a8:ce:00:ef:f6:
63:ba:10:12:72:ff:ba:e8:7d:a8:36:e4:4e:c2:42:
22:f0:0d:ac:08:69:72:e3:82:3a:c8:2f:18:39:fd:
ef:6a:a3:ac:6c:86:bd:26:21:c8:e9:49:c4:e1:c3:
04:56:d1:3e:20:71:ab:df:76:93:9a:10:c4:0b:17:
59:3c:6a:71:d9:2d:e4:fc:05:68:ff:0e:bb:2f:0a:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CF:6D:03:19:73:23:7C:2D:62:08:8C:1E:A5:81:86:7D:88:07:18
X509v3 Authority Key Identifier:
keyid:51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/bc9tAxlzI3wtYgiMHqWBhn2IBxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c38::/48
Signature Algorithm: sha256WithRSAEncryption
19:30:27:cc:ac:92:a2:4e:17:fb:53:b9:62:9f:61:e5:a1:bf:
36:cd:32:85:0d:25:3e:69:df:b5:69:4e:5d:89:10:65:d8:dc:
50:91:aa:fa:0e:06:40:10:6a:88:a0:64:53:f3:74:00:9a:3a:
f6:ac:d4:52:57:75:22:af:62:d7:12:6c:93:77:95:0e:c2:c6:
df:b1:33:7b:bc:d9:c9:7b:73:2a:2a:7e:fc:ab:f3:91:67:51:
36:5d:60:a3:35:c1:2a:ca:2d:a5:37:40:10:0f:32:b7:62:c5:
45:0d:be:8d:e4:63:b4:d3:09:87:0e:bd:c7:83:ef:e8:e4:20:
fa:39:ab:f3:77:66:4e:14:4f:44:92:ea:e2:41:27:00:1c:69:
42:94:69:dc:55:95:79:bb:f0:0c:dd:4b:63:79:39:08:04:f3:
a1:bc:22:30:9d:7d:eb:c8:22:d4:a3:80:1c:e5:41:f7:7f:7b:
12:82:ce:3e:72:0f:a0:ad:bc:03:9c:ab:c2:ad:3e:82:d1:f9:
5d:e7:15:3b:e1:1e:28:f7:63:14:b4:cb:13:3f:7a:1c:e6:ef:
ff:53:ea:02:39:4d:96:9e:0e:95:df:73:a1:1a:24:a9:1c:80:
e8:27:d7:07:f2:57:a6:c8:92:da:b4:09:54:0c:82:a0:b7:1b:
30:1f:60:ee
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzGt77LL2UPsORezrRhM+4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTMxYjRhZWNjNjViMzEyNWE3YjQ3YWM5MDkwOGIwYTUx
Nzg0ODMwHhcNMjQwMTAxMjAyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGNmNmQwMzE5NzMyMzdjMmQ2MjA4OGMxZWE1ODE4NjdkODgwNzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZQqKQApWHpXVk5mk+GMu345xyRN
xWqxk3NSzZBxFR+XwAfTNPiA1bGEfuRMS9kvezMLHQXWxVtnaaIPuPcQH0isnCNV
NZAVMEQvksgmkfX3+FbxgIsbPIGcPY/OlI9o5vwynjrRHmC5M3k9WR7UWlJwZZzm
FOOjYXf2eRI0xn0tKTn7wVmdyMOVnD8sK4X6lGXWJyWHQRJgWjUrnteP6TJxnBK0
gaGho6FDU3VZqM4A7/ZjuhAScv+66H2oNuROwkIi8A2sCGly44I6yC8YOf3vaqOs
bIa9JiHI6UnE4cMEVtE+IHGr33aTmhDECxdZPGpx2S3k/AVo/w67LwqEOwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFG3PbQMZcyN8LWIIjB6lgYZ9iAcYMB8GA1UdIwQY
MBaAFFHjG0rsxlsxJae0eskJCLClF4SDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVNYlN1ekdXekVscDdSNnlRa0lzS1VYaElNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NzQ0ODEtYzY0Zi00MjljLTk5NjEt
ZmQ0YjJhMmFlZmE1LzEvYmM5dEF4bHpJM3d0WWdpTUhxV0JobjJJQnhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS83NzQ0ODEtYzY0Zi00MjljLTk5NjEtZmQ0YjJhMmFlZmE1
LzEvVWVNYlN1ekdXekVscDdSNnlRa0lzS1VYaElNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAw4
MA0GCSqGSIb3DQEBCwUAA4IBAQAZMCfMrJKiThf7U7lin2Hlob82zTKFDSU+ad+1
aU5diRBl2NxQkar6DgZAEGqIoGRT83QAmjr2rNRSV3Uir2LXEmyTd5UOwsbfsTN7
vNnJe3MqKn78q/ORZ1E2XWCjNcEqyi2lN0AQDzK3YsVFDb6N5GO00wmHDr3Hg+/o
5CD6Oavzd2ZOFE9EkuriQScAHGlClGncVZV5u/AM3UtjeTkIBPOhvCIwnX3ryCLU
o4Ac5UH3f3sSgs4+cg+grbwDnKvCrT6C0fld5xU74R4o92MUtMsTP3oc5u//U+oC
OU2Wng6V33OhGiSpHIDoJ9cH8lemyJLatAlUDIKgtxswH2Du
-----END CERTIFICATE-----
Generated at Sat Sep 28 14:13:59 2024 by rpki-client on console-fra.rpki-client.org