Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/f6FzuuzW6-Dk1m4sbMpjsVS08Js.roa
File: f6FzuuzW6-Dk1m4sbMpjsVS08Js.roa (raw, json)
Hash identifier: VogZeDtaNHRud0II7YntFWq73+pQRu1UbRmLA7O/qlw=
Subject key identifier: 7F:A1:73:BA:EC:D6:EB:E0:E4:D6:6E:2C:6C:CA:63:B1:54:B4:F0:9B
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 018CC801D8CD0D9BF951317E19D7DAB9BAD5
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/f6FzuuzW6-Dk1m4sbMpjsVS08Js.roa
Signing time: Tue 02 Jan 2024 02:30:13 +0000
ROA not before: Tue 02 Jan 2024 02:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34019
IP address blocks: 2001:7a8:810::/44 maxlen: 44
2001:7a8:800::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d8:cd:0d:9b:f9:51:31:7e:19:d7:da:b9:ba:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Jan 2 02:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fa173baecd6ebe0e4d66e2c6cca63b154b4f09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:d5:be:27:c3:96:bc:fc:ef:dc:35:78:de:
8c:97:28:bd:46:a3:ac:1e:65:e2:12:20:45:8b:31:
f0:ec:7e:3b:a9:2a:b3:c4:56:45:3a:ad:77:ba:64:
e9:33:4e:d3:84:31:58:99:be:ec:2d:eb:5e:36:bc:
93:81:d5:92:0d:14:f8:b3:1e:5d:ff:c8:62:ff:d1:
4e:80:83:6d:7f:e1:7d:8a:32:0b:b1:b2:2b:fb:f7:
3d:f6:36:c0:bc:7d:df:4b:b2:64:22:f1:57:6f:02:
9a:d8:13:05:ad:97:c2:dd:f6:45:6c:0f:29:0c:a7:
82:bc:d0:c1:6a:f9:85:bf:85:18:4d:be:40:5b:af:
dd:e5:a0:8c:23:8d:04:62:74:7a:ad:28:d8:d9:25:
20:f5:66:d2:29:eb:12:25:00:bd:47:b5:ff:3c:62:
b2:95:4b:7c:65:ac:27:e8:fc:a5:6c:7d:4f:bb:bd:
cc:bf:cc:7e:1f:12:9b:f9:c7:c0:7b:a7:85:05:3a:
53:50:46:82:68:c1:b9:31:30:75:32:14:40:7e:38:
09:e0:66:c1:f5:cb:67:70:e7:1a:79:d7:59:6b:7d:
15:a5:98:94:c0:03:bd:77:04:74:3f:2f:40:c5:f6:
21:73:0b:5a:e1:3a:73:59:c4:81:f8:9c:7e:b6:e5:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A1:73:BA:EC:D6:EB:E0:E4:D6:6E:2C:6C:CA:63:B1:54:B4:F0:9B
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/f6FzuuzW6-Dk1m4sbMpjsVS08Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:7a8:800::/47
2001:7a8:810::/44
Signature Algorithm: sha256WithRSAEncryption
98:a2:82:5e:82:6f:d1:30:8d:f3:b2:b8:fa:2c:2d:55:f3:a6:
9d:56:08:e2:0a:09:0a:e5:b7:1b:02:4a:ab:8e:da:c7:53:5c:
48:18:c9:38:34:bf:cc:87:12:24:cd:ab:35:3c:b6:24:3f:44:
4a:22:32:1d:96:d6:10:a2:98:e6:10:79:10:14:39:3d:34:47:
b9:db:a1:f0:3c:ea:49:b6:73:e2:ee:ff:1d:53:ee:83:81:b8:
03:1a:72:02:fd:43:c3:de:e6:0b:af:27:90:32:f8:02:66:ef:
b7:ca:5a:1a:21:12:8e:af:98:b6:49:cf:e0:9e:d2:99:5b:30:
0b:6a:7a:84:95:d1:54:c5:c3:0e:a6:bb:0f:fd:40:d0:78:29:
e9:db:c9:14:06:00:80:d6:fb:e5:de:bb:07:8a:ab:91:11:b2:
38:5e:2d:9f:14:6b:9f:a2:02:76:f0:79:e6:d7:a9:a8:20:07:
30:07:2e:3a:df:83:5a:26:f3:45:04:32:e4:9f:0a:3a:07:94:
fc:71:96:75:06:dd:98:a3:a4:99:f2:3b:00:c8:ce:1f:46:11:
d1:49:75:b2:03:57:32:d4:9a:ba:33:32:99:6a:cc:92:24:35:
8c:0e:e8:7d:bf:e9:a9:75:d6:2a:68:0a:eb:7d:d8:2d:a8:a2:
4d:16:4a:27
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzIAdjNDZv5UTF+GdfaubrVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZTJjZTMxMDk0ODBhZWU3YjNmZDI4NDZlYzhmODY0Njg4
NWNkYmEwHhcNMjQwMTAyMDIzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmExNzNiYWVjZDZlYmUwZTRkNjZlMmM2Y2NhNjNiMTU0YjRmMDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWnVvifDlrz879w1eN6Mlyi9RqOs
HmXiEiBFizHw7H47qSqzxFZFOq13umTpM07ThDFYmb7sLeteNryTgdWSDRT4sx5d
/8hi/9FOgINtf+F9ijILsbIr+/c99jbAvH3fS7JkIvFXbwKa2BMFrZfC3fZFbA8p
DKeCvNDBavmFv4UYTb5AW6/d5aCMI40EYnR6rSjY2SUg9WbSKesSJQC9R7X/PGKy
lUt8Zawn6PylbH1Pu73Mv8x+HxKb+cfAe6eFBTpTUEaCaMG5MTB1MhRAfjgJ4GbB
9ctncOcaeddZa30VpZiUwAO9dwR0Py9AxfYhcwta4TpzWcSB+Jx+tuXgJQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH+hc7rs1uvg5NZuLGzKY7FUtPCbMB8GA1UdIwQY
MBaAFKfizjEJSAruez/ShG7I+GRohc26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEt
NzgxOGE4OTQ1NmNiLzEvZjZGenV1elc2LURrMW00c2JNcGpzVlMwOEpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEtNzgxOGE4OTQ1NmNi
LzEvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcBIAEHqAgA
AwcEIAEHqAgQMA0GCSqGSIb3DQEBCwUAA4IBAQCYooJegm/RMI3zsrj6LC1V86ad
VgjiCgkK5bcbAkqrjtrHU1xIGMk4NL/MhxIkzas1PLYkP0RKIjIdltYQopjmEHkQ
FDk9NEe526HwPOpJtnPi7v8dU+6DgbgDGnIC/UPD3uYLryeQMvgCZu+3yloaIRKO
r5i2Sc/gntKZWzALanqEldFUxcMOprsP/UDQeCnp28kUBgCA1vvl3rsHiquREbI4
Xi2fFGufogJ28Hnm16moIAcwBy4634NaJvNFBDLknwo6B5T8cZZ1Bt2Yo6SZ8jsA
yM4fRhHRSXWyA1cy1Jq6MzKZasySJDWMDuh9v+mpddYqaArrfdgtqKJNFkon
-----END CERTIFICATE-----
Generated at Fri Sep 20 21:25:36 2024 by rpki-client on console-ams.rpki-client.org