Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/w-LMQr5Px-nIa9_IC4Io2HU4CKY.roa
File: w-LMQr5Px-nIa9_IC4Io2HU4CKY.roa (raw, json)
Hash identifier: FvU4/dxQr/k32XT/+OJoe4sJWfMNZMzdt9Czc+vhVS4=
Subject key identifier: C3:E2:CC:42:BE:4F:C7:E9:C8:6B:DF:C8:0B:82:28:D8:75:38:08:A6
Certificate issuer: /CN=81413f5afc6443e8d2343518ac0b19fd30ba3c12
Certificate serial: 018CC42548A46192A397FCABCD9BFA8C6E77
Authority key identifier: 81:41:3F:5A:FC:64:43:E8:D2:34:35:18:AC:0B:19:FD:30:BA:3C:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/w-LMQr5Px-nIa9_IC4Io2HU4CKY.roa
Signing time: Mon 01 Jan 2024 08:30:26 +0000
ROA not before: Mon 01 Jan 2024 08:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:678:d44:300::/64 maxlen: 64
2001:678:d44:200::/64 maxlen: 64
2001:678:d44::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:48:a4:61:92:a3:97:fc:ab:cd:9b:fa:8c:6e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81413f5afc6443e8d2343518ac0b19fd30ba3c12
Validity
Not Before: Jan 1 08:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3e2cc42be4fc7e9c86bdfc80b8228d8753808a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fc:d5:9a:7f:8d:27:64:2b:80:35:af:57:45:
2d:cc:4f:a7:4a:9a:f6:e3:5c:6a:26:5b:e1:98:ca:
27:84:00:35:5a:fb:b5:0f:c2:de:01:d0:ce:af:82:
e0:ab:88:62:74:01:25:4a:90:86:e1:fa:b9:87:0d:
f7:57:51:26:f6:b9:e9:08:17:b3:9f:d4:4e:88:b9:
58:de:e3:c6:e4:31:0f:b7:12:f8:b0:af:75:58:a2:
bf:87:c1:af:e2:47:77:71:44:ad:ec:67:08:de:ad:
bb:75:9e:95:a5:fd:67:d9:8e:61:ad:83:67:8f:cc:
97:62:cc:74:18:62:40:1d:c0:69:08:61:29:55:a0:
d7:61:43:20:b4:c8:4a:3f:25:71:69:b8:5d:df:be:
be:c7:52:64:ae:c8:8a:80:1d:16:d7:5a:3f:4d:67:
f4:b4:6e:7d:bf:67:75:2a:59:65:9f:ec:5c:0b:0b:
e1:07:c6:d3:57:53:8a:0a:a9:24:dc:be:dd:c7:20:
89:14:ba:ff:a6:a9:7f:5a:37:7a:57:19:ce:ad:c9:
79:f6:1e:97:59:92:a8:9a:55:7a:10:a0:ca:c2:fb:
b1:6b:2d:74:e3:4e:b4:66:3d:c1:57:43:c2:8a:d0:
07:99:a1:6a:26:41:00:50:6d:30:51:79:79:67:61:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E2:CC:42:BE:4F:C7:E9:C8:6B:DF:C8:0B:82:28:D8:75:38:08:A6
X509v3 Authority Key Identifier:
keyid:81:41:3F:5A:FC:64:43:E8:D2:34:35:18:AC:0B:19:FD:30:BA:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/w-LMQr5Px-nIa9_IC4Io2HU4CKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d44::/64
2001:678:d44:200::/64
2001:678:d44:300::/64
Signature Algorithm: sha256WithRSAEncryption
b3:d4:5b:e6:10:5f:d4:b4:d3:90:02:41:e6:7d:83:73:93:20:
f8:36:36:0f:bc:71:78:ec:83:30:6f:3f:c6:ef:11:2d:03:f2:
c1:a2:ff:83:ac:9d:44:8c:3b:e0:ee:ad:6f:95:cb:98:6c:c2:
5f:3b:94:70:92:c5:2e:c2:32:3a:31:db:7a:2a:06:fb:c4:b5:
25:d6:07:26:4d:68:52:0f:d9:b4:b5:10:8a:6a:7d:ab:c8:6a:
48:29:13:4a:8d:9c:8f:83:7f:24:59:cd:4c:27:3d:f9:f2:be:
5d:34:4f:08:ae:0d:23:23:30:73:ff:36:22:84:5b:ac:96:65:
b0:34:3d:3c:21:f3:19:1c:71:55:98:af:50:f3:e4:87:59:85:
6a:84:9a:48:a9:1c:2a:e0:99:0c:3b:94:e8:63:2e:61:06:64:
09:38:c6:ad:73:e2:fa:ad:6c:dd:31:86:2b:c5:4a:1b:96:15:
fb:06:e8:ba:d0:6b:66:26:e2:46:9d:36:ee:c4:78:c8:df:47:
7b:2f:d0:79:43:3b:9b:7c:cc:f1:08:35:bb:44:88:5f:5f:34:
96:4d:43:4c:9f:b8:78:3c:d2:2b:ad:3f:9d:6b:29:ea:78:3f:
a8:8d:ae:a0:3a:e2:f3:84:bf:fa:94:6d:fc:9c:a2:f6:86:6e:
eb:bb:32:37
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzEJUikYZKjl/yrzZv6jG53MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNDEzZjVhZmM2NDQzZThkMjM0MzUxOGFjMGIxOWZkMzBi
YTNjMTIwHhcNMjQwMTAxMDgzMDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2UyY2M0MmJlNGZjN2U5Yzg2YmRmYzgwYjgyMjhkODc1MzgwOGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPzVmn+NJ2QrgDWvV0UtzE+nSpr2
41xqJlvhmMonhAA1Wvu1D8LeAdDOr4Lgq4hidAElSpCG4fq5hw33V1Em9rnpCBez
n9ROiLlY3uPG5DEPtxL4sK91WKK/h8Gv4kd3cUSt7GcI3q27dZ6Vpf1n2Y5hrYNn
j8yXYsx0GGJAHcBpCGEpVaDXYUMgtMhKPyVxabhd376+x1JkrsiKgB0W11o/TWf0
tG59v2d1Kllln+xcCwvhB8bTV1OKCqkk3L7dxyCJFLr/pql/Wjd6VxnOrcl59h6X
WZKomlV6EKDKwvuxay104060Zj3BV0PCitAHmaFqJkEAUG0wUXl5Z2FmBwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFMPizEK+T8fpyGvfyAuCKNh1OAimMB8GA1UdIwQY
MBaAFIFBP1r8ZEPo0jQ1GKwLGf0wujwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1VFX1d2eGtRLWpTTkRVWXJBc1pfVEM2UEJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zMjQ5MWItNGZjNi00MDMzLTliZGEt
MjUxMGFkMzJjMmI0LzEvdy1MTVFyNVB4LW5JYTlfSUM0SW8ySFU0Q0tZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8zMjQ5MWItNGZjNi00MDMzLTliZGEtMjUxMGFkMzJjMmI0
LzEvZ1VFX1d2eGtRLWpTTkRVWXJBc1pfVEM2UEJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAAjAhAwkAIAEGeA1E
AAADCQAgAQZ4DUQCAAMJACABBngNRAMAMA0GCSqGSIb3DQEBCwUAA4IBAQCz1Fvm
EF/UtNOQAkHmfYNzkyD4NjYPvHF47IMwbz/G7xEtA/LBov+DrJ1EjDvg7q1vlcuY
bMJfO5RwksUuwjI6Mdt6Kgb7xLUl1gcmTWhSD9m0tRCKan2ryGpIKRNKjZyPg38k
Wc1MJz358r5dNE8Irg0jIzBz/zYihFuslmWwND08IfMZHHFVmK9Q8+SHWYVqhJpI
qRwq4JkMO5ToYy5hBmQJOMatc+L6rWzdMYYrxUoblhX7Bui60GtmJuJGnTbuxHjI
30d7L9B5QzubfMzxCDW7RIhfXzSWTUNMn7h4PNIrrT+daynqeD+oja6gOuLzhL/6
lG38nKL2hm7ruzI3
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:07:14 2024 by rpki-client on console-ams.rpki-client.org