Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/4eyImCNQVcCnugxCBKnx9Q70vj0.roa
File: 4eyImCNQVcCnugxCBKnx9Q70vj0.roa (raw, json)
Hash identifier: en5JM/Htg8CpWiyBPoNZdavlsrNMA+zBLQJM8tE4naQ=
Subject key identifier: E1:EC:88:98:23:50:55:C0:A7:BA:0C:42:04:A9:F1:F5:0E:F4:BE:3D
Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial: 018CC2DABC5B404538EC21F533CFEA8C4C00
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/4eyImCNQVcCnugxCBKnx9Q70vj0.roa
Signing time: Mon 01 Jan 2024 02:29:24 +0000
ROA not before: Mon 01 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3097
IP address blocks: 2a02:6a0:ffe::/48 maxlen: 48
2a02:6a0:fff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:bc:5b:40:45:38:ec:21:f5:33:cf:ea:8c:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1ec8898235055c0a7ba0c4204a9f1f50ef4be3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:f3:ef:37:92:87:97:09:b7:46:4a:06:44:
b3:42:65:58:4c:e5:c2:41:5b:ef:d5:55:a0:68:f7:
f8:ee:b2:35:5d:a8:ab:f8:f4:89:86:cd:69:ae:02:
6c:08:47:10:47:78:39:fb:3c:2a:f6:54:7e:35:f6:
ae:77:6b:5d:29:5e:5b:83:5d:ff:12:c6:1b:c1:20:
d8:db:0a:f8:6d:0e:bf:6b:8e:23:9f:3b:14:32:aa:
4f:68:7e:1e:19:a6:c1:c7:83:f5:3c:1f:06:9c:e0:
d5:49:d3:be:3f:2b:28:10:af:16:fe:d7:42:0c:32:
db:f3:78:0c:c9:cb:33:7d:85:0c:62:f1:d7:8d:97:
f8:f6:6f:1e:be:56:fa:0c:34:54:45:de:84:c0:b8:
8a:91:64:e7:ed:59:46:1b:7b:49:cc:39:7b:53:fa:
c1:b8:9f:86:8e:af:78:8e:40:03:78:ca:4d:b6:73:
dc:de:43:c8:83:8b:ea:14:00:98:2d:79:47:52:ff:
16:a5:da:87:e9:73:9c:a0:16:5a:cc:55:1c:de:aa:
ee:5c:a4:b3:17:14:59:7d:91:53:b2:7a:e6:29:f1:
19:32:05:d1:65:b6:c6:36:c5:4c:ee:10:37:11:77:
0a:e5:49:63:8a:88:50:9f:2e:28:f9:f8:11:c9:b6:
dc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EC:88:98:23:50:55:C0:A7:BA:0C:42:04:A9:F1:F5:0E:F4:BE:3D
X509v3 Authority Key Identifier:
keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/4eyImCNQVcCnugxCBKnx9Q70vj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6a0:ffe::/47
Signature Algorithm: sha256WithRSAEncryption
09:44:71:2a:ce:57:9e:bf:dd:e9:45:f7:6a:94:fc:2c:1c:34:
25:94:35:ad:1d:c0:0c:15:01:46:03:ed:4d:e7:74:05:ab:c6:
d7:bd:d5:45:c9:70:0c:1b:97:ec:9d:fc:ba:75:37:a3:7c:9b:
de:bb:74:61:7e:52:39:18:aa:67:69:77:f0:70:8c:ee:a1:58:
f8:6d:27:ec:60:b9:7a:fb:76:d7:91:69:ec:5e:fc:ce:f0:72:
78:30:56:c4:3f:f0:d0:e0:79:c1:38:92:6a:eb:bb:b5:e6:d4:
de:98:6c:f7:e3:76:9f:52:c5:90:df:c0:85:38:06:b1:b0:0d:
42:c1:12:33:1f:1b:c0:a1:6d:b8:76:e8:7b:21:bb:93:69:04:
c1:0a:38:93:68:96:b8:a1:15:1e:92:4b:43:fc:c1:72:bd:14:
d3:26:66:94:75:2a:90:55:dc:e5:d7:5f:11:c3:a7:00:81:58:
ac:16:e7:52:e2:d8:41:fa:bd:63:01:5c:61:80:a6:09:70:2f:
4d:05:fa:d5:8e:d8:36:d0:25:8f:1a:7d:c6:7a:60:af:f4:12:
38:bf:d4:78:40:85:9d:a7:b7:01:74:9f:0b:5d:60:4d:bd:45:
0d:ba:7a:a2:8b:c3:0f:de:ec:8c:bd:ef:34:17:ad:f7:bb:5d:
af:d7:21:84
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzC2rxbQEU47CH1M8/qjEwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYzdlZjJiNzY2NTk0ODkyZDc4OTI4Y2JlNzgxNzc5ZmRj
ZTY3ZDAwHhcNMjQwMTAxMDIyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWVjODg5ODIzNTA1NWMwYTdiYTBjNDIwNGE5ZjFmNTBlZjRiZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9zz7zeSh5cJt0ZKBkSzQmVYTOXC
QVvv1VWgaPf47rI1Xair+PSJhs1prgJsCEcQR3g5+zwq9lR+Nfaud2tdKV5bg13/
EsYbwSDY2wr4bQ6/a44jnzsUMqpPaH4eGabBx4P1PB8GnODVSdO+PysoEK8W/tdC
DDLb83gMycszfYUMYvHXjZf49m8evlb6DDRURd6EwLiKkWTn7VlGG3tJzDl7U/rB
uJ+Gjq94jkADeMpNtnPc3kPIg4vqFACYLXlHUv8WpdqH6XOcoBZazFUc3qruXKSz
FxRZfZFTsnrmKfEZMgXRZbbGNsVM7hA3EXcK5UljiohQny4o+fgRybbclQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOHsiJgjUFXAp7oMQgSp8fUO9L49MB8GA1UdIwQY
MBaAFM/H7yt2ZZSJLXiSjL54F3n9zmfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhmdkszWmxsSWt0ZUpLTXZuZ1hlZjNPWjlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDBiMmMtMjllMi00NzM3LTllYjct
OGNkNTViMDNkMjJkLzEvNGV5SW1DTlFWY0NudWd4Q0JLbng5UTcwdmowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jZDBiMmMtMjllMi00NzM3LTllYjctOGNkNTViMDNkMjJk
LzEvejhmdkszWmxsSWt0ZUpLTXZuZ1hlZjNPWjlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgIGoA/+
MA0GCSqGSIb3DQEBCwUAA4IBAQAJRHEqzleev93pRfdqlPwsHDQllDWtHcAMFQFG
A+1N53QFq8bXvdVFyXAMG5fsnfy6dTejfJveu3RhflI5GKpnaXfwcIzuoVj4bSfs
YLl6+3bXkWnsXvzO8HJ4MFbEP/DQ4HnBOJJq67u15tTemGz343afUsWQ38CFOAax
sA1CwRIzHxvAoW24duh7IbuTaQTBCjiTaJa4oRUekktD/MFyvRTTJmaUdSqQVdzl
118Rw6cAgVisFudS4thB+r1jAVxhgKYJcC9NBfrVjtg20CWPGn3GemCv9BI4v9R4
QIWdp7cBdJ8LXWBNvUUNunqii8MP3uyMve80F633u12v1yGE
-----END CERTIFICATE-----
Generated at Sat Jun 8 07:16:33 2024 by rpki-client on console-ams.rpki-client.org