Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/KKwyYMQy2AppzAWy5stlzrtSL4I.roa
File: KKwyYMQy2AppzAWy5stlzrtSL4I.roa (raw, json)
Hash identifier: 1VXtTA7GEYSGNEtCwo91EQ5SdQBCfCUFYFjtcwZAeZc=
Subject key identifier: 28:AC:32:60:C4:32:D8:0A:69:CC:05:B2:E6:CB:65:CE:BB:52:2F:82
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018CC348FC2D3BDB40835A8D8E05E7BFBB1B
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/KKwyYMQy2AppzAWy5stlzrtSL4I.roa
Signing time: Mon 01 Jan 2024 04:29:49 +0000
ROA not before: Mon 01 Jan 2024 04:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203348
IP address blocks: 2001:648:25e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:fc:2d:3b:db:40:83:5a:8d:8e:05:e7:bf:bb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 04:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28ac3260c432d80a69cc05b2e6cb65cebb522f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:75:e3:86:8b:50:a4:77:17:ef:09:66:97:ae:
44:88:72:55:41:e0:bd:38:18:a2:5e:68:43:87:1e:
7b:40:a4:48:02:60:e4:0e:1e:2d:32:5f:52:0b:8c:
c9:da:0e:45:f6:69:30:30:87:15:0c:9e:27:6c:ba:
e8:76:fc:69:4c:cd:7e:3c:4d:76:1c:9a:2f:15:5c:
ec:3c:6c:f5:9e:51:99:f9:94:8d:03:37:39:20:4e:
a7:25:88:ba:1b:0f:ff:56:13:a2:23:39:49:a3:23:
a0:0e:5e:58:6e:48:25:77:a2:a1:a2:8d:38:1d:ec:
34:81:2d:a3:a6:85:58:11:40:fd:32:1f:fb:a3:93:
4b:c1:6b:7e:91:28:a9:a3:57:bd:67:9d:1b:fa:8c:
51:e8:49:2c:e3:85:b4:c9:de:bf:1b:36:f4:33:24:
5d:4d:7d:c7:b6:92:db:fe:bc:25:2b:10:f4:13:ae:
f1:0d:5a:c8:af:ab:0d:69:21:32:c9:0a:e7:94:1d:
2b:6b:20:3d:3d:8a:d6:22:54:36:9f:8d:2b:ab:0f:
f6:64:ce:87:93:c1:b0:6d:d3:c6:18:ed:35:29:68:
40:c6:06:86:79:87:89:d2:85:f8:5d:4a:0e:73:2e:
c8:96:76:bf:dd:e5:9f:64:17:19:04:4b:51:2d:11:
45:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AC:32:60:C4:32:D8:0A:69:CC:05:B2:E6:CB:65:CE:BB:52:2F:82
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/KKwyYMQy2AppzAWy5stlzrtSL4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:648:25e0::/48
Signature Algorithm: sha256WithRSAEncryption
34:49:dd:43:35:07:f3:eb:be:13:f1:26:2a:0f:13:dd:18:b4:
0b:9e:80:e3:c1:85:f3:c7:bf:87:2d:e0:a2:69:62:ab:4c:1b:
50:f5:2d:53:3a:cb:64:fa:0b:71:c8:c0:da:32:e9:cf:f9:eb:
89:b2:84:41:c5:2e:b6:db:71:af:f6:e7:09:18:79:43:78:83:
6c:bd:a7:0d:fd:b0:03:ae:7b:d0:1f:9c:40:77:27:36:90:1e:
84:dd:ec:1b:4a:ef:09:de:1f:eb:14:44:5e:71:46:a9:e8:9d:
f5:4f:87:eb:79:5c:e8:40:77:f9:b3:30:11:9d:96:24:bc:7a:
96:0b:2a:9b:ab:a3:a8:dc:53:06:85:48:4f:11:ae:a3:07:63:
93:e4:24:da:cc:d3:3b:ef:3a:90:fe:35:61:0b:1d:4f:68:f0:
e2:07:73:10:ed:3a:d3:8d:b1:1a:c5:e4:9a:3c:90:32:e3:0e:
25:e6:5e:aa:76:2c:89:66:99:20:9d:58:97:43:f1:31:4b:44:
de:97:4f:7a:c4:fc:cb:ef:d4:70:fd:27:20:b8:45:90:5e:5d:
98:8a:5b:71:25:c1:07:79:c6:56:23:70:7e:6c:77:4a:33:15:
49:b5:02:30:3d:02:29:d4:2e:48:95:f6:4d:11:bb:9d:f8:85:
5c:6f:8f:47
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzDSPwtO9tAg1qNjgXnv7sbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1
MjlkYzMwHhcNMjQwMTAxMDQyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGFjMzI2MGM0MzJkODBhNjljYzA1YjJlNmNiNjVjZWJiNTIyZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXXjhotQpHcX7wlml65EiHJVQeC9
OBiiXmhDhx57QKRIAmDkDh4tMl9SC4zJ2g5F9mkwMIcVDJ4nbLrodvxpTM1+PE12
HJovFVzsPGz1nlGZ+ZSNAzc5IE6nJYi6Gw//VhOiIzlJoyOgDl5Ybkgld6Khoo04
Hew0gS2jpoVYEUD9Mh/7o5NLwWt+kSipo1e9Z50b+oxR6Eks44W0yd6/Gzb0MyRd
TX3HtpLb/rwlKxD0E67xDVrIr6sNaSEyyQrnlB0rayA9PYrWIlQ2n40rqw/2ZM6H
k8GwbdPGGO01KWhAxgaGeYeJ0oX4XUoOcy7Ilna/3eWfZBcZBEtRLRFF7QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCisMmDEMtgKacwFsubLZc67Ui+CMB8GA1UdIwQY
MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut
YWFhNDU1M2QyYWJkLzEvS0t3eVlNUXkyQXBwekFXeTVzdGx6cnRTTDRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk
LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGSCXg
MA0GCSqGSIb3DQEBCwUAA4IBAQA0Sd1DNQfz674T8SYqDxPdGLQLnoDjwYXzx7+H
LeCiaWKrTBtQ9S1TOstk+gtxyMDaMunP+euJsoRBxS6223Gv9ucJGHlDeINsvacN
/bADrnvQH5xAdyc2kB6E3ewbSu8J3h/rFERecUap6J31T4freVzoQHf5szARnZYk
vHqWCyqbq6Oo3FMGhUhPEa6jB2OT5CTazNM77zqQ/jVhCx1PaPDiB3MQ7TrTjbEa
xeSaPJAy4w4l5l6qdiyJZpkgnViXQ/ExS0Tel096xPzL79Rw/ScguEWQXl2Yiltx
JcEHecZWI3B+bHdKMxVJtQIwPQIp1C5IlfZNEbud+IVcb49H
-----END CERTIFICATE-----
Generated at Mon Jul 1 12:33:31 2024 by rpki-client on console-ams.rpki-client.org