Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/JydOd4wk1zXNeFy_99X9NS3KHQw.roa
File: JydOd4wk1zXNeFy_99X9NS3KHQw.roa (raw, json)
Hash identifier: rXmbyQyvh4rFpGUCM9Gx89wHOW56et4//kh4+kQDYhs=
Subject key identifier: 27:27:4E:77:8C:24:D7:35:CD:78:5C:BF:F7:D5:FD:35:2D:CA:1D:0C
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 018CC794660487DEE59BD9437C24AA0C9C83
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/JydOd4wk1zXNeFy_99X9NS3KHQw.roa
Signing time: Tue 02 Jan 2024 00:30:40 +0000
ROA not before: Tue 02 Jan 2024 00:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21221
IP address blocks: 2a04:d9c0::/32 maxlen: 48
2a05:a640::/29 maxlen: 48
2a03:7e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:66:04:87:de:e5:9b:d9:43:7c:24:aa:0c:9c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Jan 2 00:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27274e778c24d735cd785cbff7d5fd352dca1d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c0:ca:26:b3:9e:9c:51:62:c0:75:ce:b6:cf:
da:90:17:e9:54:61:18:94:f1:77:9e:29:f8:28:52:
3d:c2:f5:58:08:f9:3d:ed:63:dd:b0:eb:73:a5:fe:
5b:38:a3:7d:6a:9b:2c:68:18:7e:40:dc:77:f0:45:
30:29:17:9e:d8:08:5d:14:45:e9:74:21:17:fe:b9:
fa:32:71:1b:99:31:ab:82:ea:92:16:6a:50:67:6e:
e5:9e:9a:28:a6:0d:8e:66:36:7c:0f:49:57:a4:47:
e6:d1:48:e9:f7:17:79:fb:40:79:6f:e1:2d:a5:a2:
de:66:f4:f2:7d:b2:4d:d9:41:2c:fd:39:9f:f0:3d:
79:3c:d0:16:f4:c0:98:1f:be:f7:b5:a3:45:90:71:
16:2c:a2:ad:52:5c:bc:39:61:68:a4:5b:2f:9e:91:
e5:b0:f5:96:34:de:b8:f2:22:2a:56:49:3e:98:b5:
6b:7b:2d:72:5a:41:42:79:a1:f9:d0:74:fe:69:e0:
76:f1:a4:ca:8b:0d:e9:5c:8a:f3:2d:e3:20:a4:51:
5b:06:be:e0:a8:b0:f7:12:ba:80:3d:3a:23:63:46:
4a:58:36:48:5e:2f:19:05:cd:c3:c2:b6:a4:23:9a:
03:5b:28:51:11:85:c5:82:c6:45:3f:36:bf:f7:12:
32:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:27:4E:77:8C:24:D7:35:CD:78:5C:BF:F7:D5:FD:35:2D:CA:1D:0C
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/JydOd4wk1zXNeFy_99X9NS3KHQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:7e0::/32
2a04:d9c0::/32
2a05:a640::/29
Signature Algorithm: sha256WithRSAEncryption
40:ec:73:72:b7:c2:d9:2b:6d:32:ba:f4:e5:10:de:e3:83:97:
e7:8b:18:8c:a9:75:6c:f8:9a:17:a3:c7:f5:f2:88:34:14:ef:
cd:58:42:6d:c9:99:9e:39:ed:85:84:f1:02:27:85:21:24:5b:
4a:8e:48:c8:1b:79:3e:59:7a:3f:7c:1b:17:f8:e4:72:0d:39:
3c:6a:4a:80:b7:50:0d:22:65:96:6d:0c:d9:0b:ae:89:06:f4:
64:95:8b:fe:ad:db:ae:20:af:65:c4:ac:2d:74:a9:50:05:87:
d8:53:c4:35:3a:26:d5:04:4c:4a:46:9a:0b:c8:58:db:30:54:
b7:f9:02:a3:60:e7:12:cb:ef:39:be:3b:24:b8:81:f1:f8:da:
3f:c4:de:dd:4d:ad:23:11:fe:2f:3f:2d:42:4a:61:da:ad:99:
e1:5e:61:b0:d5:eb:cd:ab:05:93:b2:cd:41:ed:6f:b7:82:34:
02:56:5c:4a:0d:80:03:b1:16:f6:99:08:16:57:2e:9f:5a:0e:
e1:d5:61:d4:de:d5:56:5e:73:06:b6:ca:cd:72:a6:7a:7c:bd:
74:a7:3e:14:04:04:01:be:7b:4f:cf:d6:13:fc:65:67:da:66:
6c:70:3e:f5:1e:0e:0b:e0:9f:e9:3b:7f:43:6b:3e:d5:05:8b:
25:bb:ba:71
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzHlGYEh97lm9lDfCSqDJyDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMWQyYTU2MmM3ZGIyMTE1MWI0YTA5MjZiOGQ2ZmVlYWNl
Zjg4NTcwHhcNMjQwMTAyMDAzMDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzI3NGU3NzhjMjRkNzM1Y2Q3ODVjYmZmN2Q1ZmQzNTJkY2ExZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMDKJrOenFFiwHXOts/akBfpVGEY
lPF3nin4KFI9wvVYCPk97WPdsOtzpf5bOKN9apssaBh+QNx38EUwKRee2AhdFEXp
dCEX/rn6MnEbmTGrguqSFmpQZ27lnpoopg2OZjZ8D0lXpEfm0Ujp9xd5+0B5b+Et
paLeZvTyfbJN2UEs/Tmf8D15PNAW9MCYH773taNFkHEWLKKtUly8OWFopFsvnpHl
sPWWNN648iIqVkk+mLVrey1yWkFCeaH50HT+aeB28aTKiw3pXIrzLeMgpFFbBr7g
qLD3ErqAPTojY0ZKWDZIXi8ZBc3DwrakI5oDWyhREYXFgsZFPza/9xIyVwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCcnTneMJNc1zXhcv/fV/TUtyh0MMB8GA1UdIwQY
MBaAFK0dKlYsfbIRUbSgkmuNb+6s74hXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84M2FjZDctNWUxYS00OWY5LWI0MDkt
MzI5MzZjM2E0YTlkLzEvSnlkT2Q0d2sxelhOZUZ5Xzk5WDlOUzNLSFF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS84M2FjZDctNWUxYS00OWY5LWI0MDktMzI5MzZjM2E0YTlk
LzEvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAKgMH4AMF
ACoE2cADBQMqBaZAMA0GCSqGSIb3DQEBCwUAA4IBAQBA7HNyt8LZK20yuvTlEN7j
g5fnixiMqXVs+JoXo8f18og0FO/NWEJtyZmeOe2FhPECJ4UhJFtKjkjIG3k+WXo/
fBsX+ORyDTk8akqAt1ANImWWbQzZC66JBvRklYv+rduuIK9lxKwtdKlQBYfYU8Q1
OibVBExKRpoLyFjbMFS3+QKjYOcSy+85vjskuIHx+No/xN7dTa0jEf4vPy1CSmHa
rZnhXmGw1evNqwWTss1B7W+3gjQCVlxKDYADsRb2mQgWVy6fWg7h1WHU3tVWXnMG
tsrNcqZ6fL10pz4UBAQBvntPz9YT/GVn2mZscD71Hg4L4J/pO39Daz7VBYslu7px
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:24:09 2024 by rpki-client on console-ams.rpki-client.org