Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/f6SiqamugJhTsyrqSeMx_UbCSTE.roa
File: f6SiqamugJhTsyrqSeMx_UbCSTE.roa (raw, json)
Hash identifier: o32il2ZcwHWOhtG8xBQrP9qPmZ0rqYnIJZklgUOQJiI=
Subject key identifier: 7F:A4:A2:A9:A9:AE:80:98:53:B3:2A:EA:49:E3:31:FD:46:C2:49:31
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018EE177C6002F1CB6E74CC8174C11B085FE
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/f6SiqamugJhTsyrqSeMx_UbCSTE.roa
Signing time: Mon 15 Apr 2024 11:15:06 +0000
ROA not before: Mon 15 Apr 2024 11:15:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1136
IP address blocks: 2a04:9a00:1200::/48 maxlen: 48
2a07:3500:1020::/48 maxlen: 48
2a07:3500:11a0::/48 maxlen: 48
2a07:3500:1ac0::/48 maxlen: 48
2a07:3500:1b30::/48 maxlen: 48
2a07:3500:1b48::/48 maxlen: 48
2a07:3500:1bc0::/48 maxlen: 48
2a07:3500:1c00::/48 maxlen: 48
2a07:3500:1da8::/48 maxlen: 48
2a07:3501:1010::/48 maxlen: 48
2a07:3502:10e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:77:c6:00:2f:1c:b6:e7:4c:c8:17:4c:11:b0:85:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Apr 15 11:15:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fa4a2a9a9ae809853b32aea49e331fd46c24931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:23:c4:0b:2d:72:00:31:e1:dd:14:7c:58:
47:b7:a4:d1:0a:2f:ab:f2:70:11:4b:ab:f7:1b:95:
dd:f1:02:0d:59:00:21:34:4c:39:1f:05:91:a6:14:
0a:cc:24:ff:55:06:14:1a:f1:ea:d1:a2:4f:29:13:
02:00:cb:6d:aa:17:5a:d0:87:e6:ec:c1:1d:e3:bd:
4f:e9:28:dd:8c:f7:4f:52:a5:e9:59:e1:60:de:da:
bc:2d:d5:e1:dc:e3:c6:e1:b5:31:3f:f3:38:6a:9d:
5b:e1:f8:bc:b6:09:a6:76:37:f7:0c:44:ce:cf:db:
ac:25:00:0d:4c:27:2c:59:06:92:52:0a:9f:fd:f6:
4f:57:f5:e2:7a:d0:06:cf:1e:62:96:30:54:d7:fc:
fc:84:c2:ff:67:16:48:ed:fc:2d:2f:b7:86:ea:6d:
8b:cd:a7:51:94:27:0b:0f:51:ae:9f:18:f9:2e:d4:
44:06:50:5a:8f:b9:85:c7:01:99:26:20:eb:03:c2:
23:39:f4:fa:14:c6:80:63:ad:bd:c5:e9:80:e2:a9:
4a:d6:c8:ad:a1:86:06:7e:1e:47:b6:dc:d7:3f:42:
39:39:b1:0e:d1:bd:5b:43:c8:05:14:cd:fa:0c:4c:
30:3a:e7:76:43:c5:11:c0:eb:21:a2:49:68:17:ba:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A4:A2:A9:A9:AE:80:98:53:B3:2A:EA:49:E3:31:FD:46:C2:49:31
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/f6SiqamugJhTsyrqSeMx_UbCSTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a00:1200::/48
2a07:3500:1020::/48
2a07:3500:11a0::/48
2a07:3500:1ac0::/48
2a07:3500:1b30::/48
2a07:3500:1b48::/48
2a07:3500:1bc0::/48
2a07:3500:1c00::/48
2a07:3500:1da8::/48
2a07:3501:1010::/48
2a07:3502:10e0::/48
Signature Algorithm: sha256WithRSAEncryption
9a:46:42:cc:45:3b:ad:2e:b2:25:58:56:8e:33:17:aa:53:16:
04:b8:05:53:31:82:7b:87:75:a7:d3:9b:bd:30:74:27:40:03:
3b:f6:c5:49:29:ed:18:95:4d:1d:e1:df:8d:ef:57:e7:90:16:
d1:42:6c:20:6a:99:7f:ad:87:60:c8:76:0c:66:95:88:f4:92:
4b:99:ff:c5:ef:ca:24:13:59:d9:35:dd:ce:04:61:7a:30:4b:
15:96:f1:ba:f1:b8:f1:70:01:59:4d:43:1e:66:3f:77:63:ab:
eb:f2:ae:a6:6b:7b:e2:0f:88:e3:f8:35:1c:40:83:7a:40:cc:
46:49:e3:73:4f:38:9d:4c:d1:22:d7:24:d3:a8:71:b5:54:7d:
e2:c9:73:1c:00:06:be:f0:08:2a:39:df:d2:7d:ee:8b:e7:ab:
12:c7:ea:8d:c5:96:92:11:e6:61:50:05:c4:3c:b7:fd:cc:29:
b7:3e:6c:c6:ad:34:6d:6d:eb:f4:f4:ca:46:4b:a5:21:65:15:
72:05:b6:fc:7c:69:f3:36:21:b8:3e:92:67:17:2b:13:2c:b4:
37:10:eb:b0:6d:b6:30:42:35:af:16:eb:08:57:87:63:8b:77:
7e:fb:31:fb:46:07:ce:ec:e6:09:8a:4d:69:a6:26:89:ad:32:
88:61:c6:99
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgISAY7hd8YALxy250zIF0wRsIX+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl
MTQwNzEwHhcNMjQwNDE1MTExNTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmE0YTJhOWE5YWU4MDk4NTNiMzJhZWE0OWUzMzFmZDQ2YzI0OTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJgjxAstcgAx4d0UfFhHt6TRCi+r
8nARS6v3G5Xd8QINWQAhNEw5HwWRphQKzCT/VQYUGvHq0aJPKRMCAMttqhda0Ifm
7MEd471P6SjdjPdPUqXpWeFg3tq8LdXh3OPG4bUxP/M4ap1b4fi8tgmmdjf3DETO
z9usJQANTCcsWQaSUgqf/fZPV/XietAGzx5iljBU1/z8hML/ZxZI7fwtL7eG6m2L
zadRlCcLD1Gunxj5LtREBlBaj7mFxwGZJiDrA8IjOfT6FMaAY629xemA4qlK1sit
oYYGfh5HttzXP0I5ObEO0b1bQ8gFFM36DEwwOud2Q8URwOshokloF7omaQIDAQAB
o4ICZjCCAmIwHQYDVR0OBBYEFH+koqmproCYU7Mq6knjMf1GwkkxMB8GA1UdIwQY
MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt
YWQ1NzU1MjJiMzY1LzEvZjZTaXFhbXVnSmhUc3lycVNlTXhfVWJDU1RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1
LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBpBAIAAjBjAwcAKgSaABIA
AwcAKgc1ABAgAwcAKgc1ABGgAwcAKgc1ABrAAwcAKgc1ABswAwcAKgc1ABtIAwcA
Kgc1ABvAAwcAKgc1ABwAAwcAKgc1AB2oAwcAKgc1ARAQAwcAKgc1AhDgMA0GCSqG
SIb3DQEBCwUAA4IBAQCaRkLMRTutLrIlWFaOMxeqUxYEuAVTMYJ7h3Wn05u9MHQn
QAM79sVJKe0YlU0d4d+N71fnkBbRQmwgapl/rYdgyHYMZpWI9JJLmf/F78okE1nZ
Nd3OBGF6MEsVlvG68bjxcAFZTUMeZj93Y6vr8q6ma3viD4jj+DUcQIN6QMxGSeNz
TzidTNEi1yTTqHG1VH3iyXMcAAa+8AgqOd/Sfe6L56sSx+qNxZaSEeZhUAXEPLf9
zCm3PmzGrTRtbev09MpGS6UhZRVyBbb8fGnzNiG4PpJnFysTLLQ3EOuwbbYwQjWv
FusIV4dji3d++zH7RgfO7OYJik1ppiaJrTKIYcaZ
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:41:44 2024 by rpki-client on console-fra.rpki-client.org