Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/a8RGwXdWoP6oFOEljBLA8oMBxmw.roa
File: a8RGwXdWoP6oFOEljBLA8oMBxmw.roa (raw, json)
Hash identifier: YLAaWYEMgueerdKKKNTs1ygUFG+W5J2pHFlfkNW6UAc=
Subject key identifier: 6B:C4:46:C1:77:56:A0:FE:A8:14:E1:25:8C:12:C0:F2:83:01:C6:6C
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 018CC94CDF91EA3EB88D6F7687EA7CBFDB26
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/a8RGwXdWoP6oFOEljBLA8oMBxmw.roa
Signing time: Tue 02 Jan 2024 08:31:47 +0000
ROA not before: Tue 02 Jan 2024 08:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207158
IP address blocks: 2a0b:1c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:df:91:ea:3e:b8:8d:6f:76:87:ea:7c:bf:db:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 2 08:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6bc446c17756a0fea814e1258c12c0f28301c66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:14:71:9d:1a:17:5e:75:54:d0:3a:31:61:
53:d9:35:35:40:98:c1:55:fb:29:80:6e:df:a6:8e:
05:24:c4:87:49:7c:83:fb:3a:6a:7f:92:be:d8:f7:
94:76:76:d7:50:ab:2c:9f:db:c8:dd:98:e6:50:4f:
da:aa:71:2e:0f:d6:6d:98:34:1b:41:4f:08:d1:e2:
69:3e:b3:35:16:be:dd:6f:e7:12:86:9d:5a:38:68:
a0:7a:08:c4:cd:19:5d:f0:f4:3c:67:80:fd:85:b9:
8a:8a:c5:e1:64:4b:e8:af:31:8b:66:b8:4e:2a:9a:
d1:7e:b4:9c:27:5e:3f:f1:a6:f3:a3:1e:17:c5:4a:
8f:fa:dc:b3:9d:d5:13:ed:1f:aa:72:1d:04:b7:56:
35:27:93:47:43:36:4b:64:5e:0b:ea:90:fe:73:ac:
f0:7a:16:c3:43:16:75:90:f6:ee:f9:dd:14:8d:18:
88:fb:cb:b7:e4:95:de:7a:96:89:7e:a8:47:86:3a:
35:d8:44:e5:09:2c:7b:37:50:e6:af:a6:81:de:e2:
04:b3:83:62:e9:c9:0f:1b:dd:9d:a4:15:56:18:30:
5a:dd:b3:32:95:6e:cd:e2:f0:27:f2:fd:3a:eb:23:
d3:60:f6:da:0b:98:ff:98:e0:bb:21:45:22:df:0e:
7a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C4:46:C1:77:56:A0:FE:A8:14:E1:25:8C:12:C0:F2:83:01:C6:6C
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/a8RGwXdWoP6oFOEljBLA8oMBxmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1c00::/29
Signature Algorithm: sha256WithRSAEncryption
a0:b8:47:6c:2b:1e:47:0a:63:bf:0c:1b:b6:d5:2c:2f:38:fc:
65:fb:c8:f0:fc:71:82:52:e0:69:10:7d:6c:7c:3b:4a:e2:30:
ff:80:b9:72:0d:a6:eb:28:0f:3d:ed:ce:69:f8:6d:d9:df:50:
ba:09:13:d1:0d:c9:37:f4:e6:af:c0:5c:4d:4b:f2:d6:a6:79:
00:94:e6:65:14:79:d2:8c:3f:b6:23:15:67:4c:37:96:f9:db:
4e:cd:6f:ed:dd:34:44:1f:02:5d:89:6e:03:1a:5d:f9:61:45:
07:65:d4:e1:1b:fb:3a:29:60:aa:9f:1b:4c:9f:6b:62:f4:65:
bf:2c:6d:b3:e1:e3:0d:fd:ca:dd:9f:ab:3e:4f:d2:65:99:64:
f9:4d:ed:ed:46:77:e6:78:bc:ce:f2:ed:82:8d:96:51:c1:cc:
49:b7:9f:50:8d:81:25:94:6c:82:d9:3a:ff:d9:85:8b:19:00:
b7:17:76:9d:67:8b:be:15:e9:7e:7e:cd:5b:a4:39:37:8c:a9:
5f:56:85:d4:10:60:d3:fb:f7:0c:5d:59:67:0b:d5:e6:6e:e7:
8d:d4:d2:b2:89:02:26:99:e7:3c:45:97:bd:77:f2:a2:ad:90:
5e:79:cf:71:97:63:2d:98:d1:9a:57:28:bb:71:83:b9:9d:ad:
52:24:8c:01
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzJTN+R6j64jW92h+p8v9smMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4
YmUxYmQwHhcNMjQwMTAyMDgzMTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmM0NDZjMTc3NTZhMGZlYTgxNGUxMjU4YzEyYzBmMjgzMDFjNjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOEUcZ0aF151VNA6MWFT2TU1QJjB
VfspgG7fpo4FJMSHSXyD+zpqf5K+2PeUdnbXUKssn9vI3ZjmUE/aqnEuD9ZtmDQb
QU8I0eJpPrM1Fr7db+cShp1aOGigegjEzRld8PQ8Z4D9hbmKisXhZEvorzGLZrhO
KprRfrScJ14/8abzox4XxUqP+tyzndUT7R+qch0Et1Y1J5NHQzZLZF4L6pD+c6zw
ehbDQxZ1kPbu+d0UjRiI+8u35JXeepaJfqhHhjo12ETlCSx7N1Dmr6aB3uIEs4Ni
6ckPG92dpBVWGDBa3bMylW7N4vAn8v066yPTYPbaC5j/mOC7IUUi3w56TwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGvERsF3VqD+qBThJYwSwPKDAcZsMB8GA1UdIwQY
MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt
N2U4YzZkNGQ5YmVmLzEvYThSR3dYZFdvUDZvRk9FbGpCTEE4b01CeG13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm
LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgscADAN
BgkqhkiG9w0BAQsFAAOCAQEAoLhHbCseRwpjvwwbttUsLzj8ZfvI8PxxglLgaRB9
bHw7SuIw/4C5cg2m6ygPPe3Oafht2d9QugkT0Q3JN/Tmr8BcTUvy1qZ5AJTmZRR5
0ow/tiMVZ0w3lvnbTs1v7d00RB8CXYluAxpd+WFFB2XU4Rv7Oilgqp8bTJ9rYvRl
vyxts+HjDf3K3Z+rPk/SZZlk+U3t7UZ35ni8zvLtgo2WUcHMSbefUI2BJZRsgtk6
/9mFixkAtxd2nWeLvhXpfn7NW6Q5N4ypX1aF1BBg0/v3DF1ZZwvV5m7njdTSsokC
JpnnPEWXvXfyoq2QXnnPcZdjLZjRmlcou3GDuZ2tUiSMAQ==
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:50:55 2024 by rpki-client on console-ams.rpki-client.org