Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/alf8-bqMfizk3Cqw0l9Ys1pRffI.roa
File: alf8-bqMfizk3Cqw0l9Ys1pRffI.roa (raw, json)
Hash identifier: eoeLTsf7nq0nJLstELsXme1PUCsqsTvmIQFyHL+1WpQ=
Subject key identifier: 6A:57:FC:F9:BA:8C:7E:2C:E4:DC:2A:B0:D2:5F:58:B3:5A:51:7D:F2
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 018CC5DC1FEE5F2604D2E4623C2DE46223DD
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/alf8-bqMfizk3Cqw0l9Ys1pRffI.roa
Signing time: Mon 01 Jan 2024 16:29:46 +0000
ROA not before: Mon 01 Jan 2024 16:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61120
IP address blocks: 2a10:fa81:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:1f:ee:5f:26:04:d2:e4:62:3c:2d:e4:62:23:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jan 1 16:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a57fcf9ba8c7e2ce4dc2ab0d25f58b35a517df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c8:06:bb:2e:9d:58:87:51:eb:c0:24:eb:60:
fb:63:69:30:5e:fb:4c:a9:66:57:cd:a9:92:af:f2:
1b:6a:4d:8c:24:d9:d5:24:08:75:2a:a3:c8:ef:fb:
9e:03:3f:d4:b6:5f:89:0a:74:30:dd:72:3c:c9:3b:
45:dd:67:44:a5:e7:53:cd:93:21:71:62:aa:33:a3:
ad:b0:11:85:81:28:48:4d:d7:95:49:c8:d3:0c:72:
fe:33:b6:c1:41:03:b6:73:cb:09:b9:06:70:0c:c1:
0e:4d:77:36:fa:23:d0:cf:d4:8e:79:4c:12:df:68:
84:32:4e:24:94:e4:43:8d:8c:b5:db:2c:5f:c0:65:
20:7e:d6:df:d2:17:c8:58:9b:c9:ad:1d:82:dc:b9:
cd:1f:38:65:78:8c:06:11:98:38:0c:db:37:e1:5f:
46:ab:4e:ad:df:b7:80:74:e6:65:ea:e6:e4:f8:ab:
b9:39:01:9f:5b:03:63:ff:e5:24:8b:f3:18:53:fd:
e2:d7:7b:53:33:10:49:c8:48:3f:99:34:4a:d7:c8:
c0:f2:15:72:95:c3:a2:a8:29:0a:e9:84:31:69:4d:
2c:31:8f:d3:94:04:09:5f:81:38:9a:2e:1a:c4:e0:
e2:8b:98:e4:53:b3:62:7d:cc:5b:d9:0d:3c:ac:fc:
99:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:57:FC:F9:BA:8C:7E:2C:E4:DC:2A:B0:D2:5F:58:B3:5A:51:7D:F2
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/alf8-bqMfizk3Cqw0l9Ys1pRffI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:2::/48
Signature Algorithm: sha256WithRSAEncryption
33:b8:9b:a7:0c:7b:50:cb:9d:6e:e1:54:5f:b4:0d:92:91:d0:
c4:41:96:34:be:41:ef:c8:aa:59:f0:15:2b:8f:bf:9d:30:20:
90:92:ff:21:0d:c2:b7:12:9c:82:cb:32:5e:52:79:65:05:05:
09:03:41:b2:49:29:a3:a2:70:7b:a9:53:71:35:83:9a:ac:08:
c6:3d:f1:4a:fd:6a:72:6e:c2:e9:cd:ee:c1:92:44:66:38:6b:
64:b5:74:cb:68:4a:63:ff:8c:8e:95:65:5f:61:ac:86:49:2a:
0d:70:3d:60:cf:e1:c9:37:cb:9a:48:3c:79:e7:0f:58:d0:d1:
a2:75:8d:73:f6:f7:39:a9:79:2e:99:04:35:51:5e:91:fa:79:
e0:0c:84:26:cc:0b:5e:6a:66:f8:58:ce:b9:30:bc:3e:ef:b1:
d9:ee:19:af:51:dc:f2:37:37:1d:36:f3:ea:8d:bc:3c:11:90:
06:fc:1f:66:50:4b:97:1a:35:51:a8:b4:d4:bf:51:6a:81:e0:
f2:00:2d:3d:9f:88:ce:36:9d:96:79:bd:32:ec:d5:18:33:b7:
a1:3e:80:97:1d:1b:54:9e:d1:27:ef:a5:fc:9c:1c:51:e3:9c:
97:5c:d7:1a:5f:c1:dd:07:98:f6:40:fa:8e:5c:55:6c:37:ff:
43:19:aa:33
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzF3B/uXyYE0uRiPC3kYiPdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj
NjA0NmMwHhcNMjQwMTAxMTYyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTU3ZmNmOWJhOGM3ZTJjZTRkYzJhYjBkMjVmNThiMzVhNTE3ZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMgGuy6dWIdR68Ak62D7Y2kwXvtM
qWZXzamSr/Ibak2MJNnVJAh1KqPI7/ueAz/Utl+JCnQw3XI8yTtF3WdEpedTzZMh
cWKqM6OtsBGFgShITdeVScjTDHL+M7bBQQO2c8sJuQZwDMEOTXc2+iPQz9SOeUwS
32iEMk4klORDjYy12yxfwGUgftbf0hfIWJvJrR2C3LnNHzhleIwGEZg4DNs34V9G
q06t37eAdOZl6ubk+Ku5OQGfWwNj/+Uki/MYU/3i13tTMxBJyEg/mTRK18jA8hVy
lcOiqCkK6YQxaU0sMY/TlAQJX4E4mi4axODii5jkU7Nifcxb2Q08rPyZWwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGpX/Pm6jH4s5NwqsNJfWLNaUX3yMB8GA1UdIwQY
MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt
MjM5NGM2NjAwMDIyLzEvYWxmOC1icU1maXprM0NxdzBsOVlzMXBSZmZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy
LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhD6gQAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAzuJunDHtQy51u4VRftA2SkdDEQZY0vkHvyKpZ
8BUrj7+dMCCQkv8hDcK3EpyCyzJeUnllBQUJA0GySSmjonB7qVNxNYOarAjGPfFK
/WpybsLpze7BkkRmOGtktXTLaEpj/4yOlWVfYayGSSoNcD1gz+HJN8uaSDx55w9Y
0NGidY1z9vc5qXkumQQ1UV6R+nngDIQmzAteamb4WM65MLw+77HZ7hmvUdzyNzcd
NvPqjbw8EZAG/B9mUEuXGjVRqLTUv1FqgeDyAC09n4jONp2Web0y7NUYM7ehPoCX
HRtUntEn76X8nBxR45yXXNcaX8HdB5j2QPqOXFVsN/9DGaoz
-----END CERTIFICATE-----
Generated at Fri May 31 22:35:31 2024 by rpki-client on console-ams.rpki-client.org