Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/4ni_zOrgKW-ZSk3C8gARNAmkf5g.roa
File: 4ni_zOrgKW-ZSk3C8gARNAmkf5g.roa (raw, json)
Hash identifier: P8qHKjktwY0LMJk2kNSxIkV5VZfMxq6978hedImOnLo=
Subject key identifier: E2:78:BF:CC:EA:E0:29:6F:99:4A:4D:C2:F2:00:11:34:09:A4:7F:98
Certificate issuer: /CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Certificate serial: 018CC802A40DDAA548858AE3932521884C80
Authority key identifier: 17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/4ni_zOrgKW-ZSk3C8gARNAmkf5g.roa
Signing time: Tue 02 Jan 2024 02:31:05 +0000
ROA not before: Tue 02 Jan 2024 02:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208562
IP address blocks: 2001:678:ad8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:a4:0d:da:a5:48:85:8a:e3:93:25:21:88:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Validity
Not Before: Jan 2 02:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e278bfcceae0296f994a4dc2f200113409a47f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:2a:1d:73:b2:ce:42:cc:62:c9:79:d4:00:
29:16:59:7a:e3:dc:ca:21:fc:cd:ad:3c:68:77:27:
e7:c2:4b:15:0a:74:a0:a8:7c:16:4a:c1:20:24:80:
c0:1b:04:72:3f:d9:d4:56:a5:bd:02:cb:9d:ed:81:
31:69:e6:f5:e2:46:82:6f:2e:b3:57:52:e2:e2:e5:
f9:bc:ca:dd:8b:75:e1:12:02:fc:ee:4d:44:47:fe:
9d:4e:ba:1c:fc:1f:40:aa:f8:f3:fd:a6:bf:ca:11:
c5:8d:fd:01:28:40:c4:aa:3e:b8:8e:54:24:92:7e:
f7:88:48:98:1c:86:2f:01:35:a0:48:34:13:c9:64:
34:1c:3e:ff:82:12:d5:1f:5c:64:62:7d:60:8c:a4:
dc:ce:43:dc:d0:fc:ad:37:5c:7c:62:41:2d:e5:9d:
eb:74:80:bb:4b:b0:3a:4f:b8:45:8d:95:c9:a9:87:
3e:ec:21:ca:21:1e:b2:7a:9f:a1:13:8e:1b:0e:db:
16:bf:43:06:2c:24:9f:0e:4d:10:43:22:e6:61:25:
b7:ba:0e:ce:f9:16:52:f1:83:96:4e:8f:dc:47:1b:
6c:8c:fe:67:f9:0b:4d:88:43:f2:94:c7:03:10:fd:
a3:2c:3d:ca:e6:e5:d9:ed:77:00:18:15:c0:32:db:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:78:BF:CC:EA:E0:29:6F:99:4A:4D:C2:F2:00:11:34:09:A4:7F:98
X509v3 Authority Key Identifier:
keyid:17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/4ni_zOrgKW-ZSk3C8gARNAmkf5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:ad8::/48
Signature Algorithm: sha256WithRSAEncryption
3d:23:10:ed:2e:db:60:ac:3e:80:ec:3c:e5:68:ee:c5:15:b8:
72:cf:66:c0:02:4e:69:d6:3d:37:ea:f5:f4:54:5b:23:fd:4c:
f7:60:85:1a:2b:9b:88:4e:85:9a:96:95:95:30:4e:8b:2e:d2:
95:51:55:10:ab:bf:22:ac:17:a6:58:58:b7:02:4f:b1:46:85:
49:e1:7e:df:c0:f1:43:87:5e:06:71:fe:f7:f2:92:33:8d:70:
a1:4c:7a:bc:6f:37:c1:43:0d:3a:37:5a:13:35:74:37:22:17:
03:44:45:de:69:ff:e6:2c:3d:1d:47:a8:df:46:0a:80:4c:dd:
6a:b3:5b:e4:ad:70:b5:e0:fd:60:29:90:3a:6e:f3:42:d6:f6:
63:6a:09:32:1b:3b:b6:e4:6a:f3:9b:49:98:c1:4f:8f:8d:be:
59:d1:6f:65:60:58:26:16:b4:a4:b4:52:e7:57:34:c2:4e:d4:
72:0b:5f:36:b5:2f:69:f0:e1:47:c4:88:a2:ec:df:7f:41:84:
4f:20:36:84:be:a8:47:20:d8:e1:b0:81:c3:ae:b7:a6:9f:1d:
35:2c:83:53:37:eb:88:f6:66:c9:30:00:57:43:f6:d4:f6:ee:
f9:67:c5:78:96:8e:96:ec:14:e6:a0:53:f4:7b:6b:c3:0c:5a:
95:dd:e3:32
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIAqQN2qVIhYrjkyUhiEyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTlkMGJjMDQ0Y2RhYTIzNDE4MDlkMDAwZjBmYzRlMWRl
ZGIzNDUwHhcNMjQwMTAyMDIzMTA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjc4YmZjY2VhZTAyOTZmOTk0YTRkYzJmMjAwMTEzNDA5YTQ3Zjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAIqHXOyzkLMYsl51AApFll649zK
IfzNrTxodyfnwksVCnSgqHwWSsEgJIDAGwRyP9nUVqW9Asud7YExaeb14kaCby6z
V1Li4uX5vMrdi3XhEgL87k1ER/6dTroc/B9Aqvjz/aa/yhHFjf0BKEDEqj64jlQk
kn73iEiYHIYvATWgSDQTyWQ0HD7/ghLVH1xkYn1gjKTczkPc0PytN1x8YkEt5Z3r
dIC7S7A6T7hFjZXJqYc+7CHKIR6yep+hE44bDtsWv0MGLCSfDk0QQyLmYSW3ug7O
+RZS8YOWTo/cRxtsjP5n+QtNiEPylMcDEP2jLD3K5uXZ7XcAGBXAMttBSQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOJ4v8zq4ClvmUpNwvIAETQJpH+YMB8GA1UdIwQY
MBaAFBcZ0LwETNqiNBgJ0ADw/E4d7bNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhuUXZBUk0ycUkwR0FuUUFQRDhUaDN0czBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jMDNlYWUtMzlhZS00MDAyLWI2NmUt
MDRhYzBhNWU4MTQzLzEvNG5pX3pPcmdLVy1aU2szQzhnQVJOQW1rZjVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9jMDNlYWUtMzlhZS00MDAyLWI2NmUtMDRhYzBhNWU4MTQz
LzEvRnhuUXZBUk0ycUkwR0FuUUFQRDhUaDN0czBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeArY
MA0GCSqGSIb3DQEBCwUAA4IBAQA9IxDtLttgrD6A7DzlaO7FFbhyz2bAAk5p1j03
6vX0VFsj/Uz3YIUaK5uIToWalpWVME6LLtKVUVUQq78irBemWFi3Ak+xRoVJ4X7f
wPFDh14Gcf738pIzjXChTHq8bzfBQw06N1oTNXQ3IhcDREXeaf/mLD0dR6jfRgqA
TN1qs1vkrXC14P1gKZA6bvNC1vZjagkyGzu25Grzm0mYwU+Pjb5Z0W9lYFgmFrSk
tFLnVzTCTtRyC182tS9p8OFHxIii7N9/QYRPIDaEvqhHINjhsIHDrremnx01LINT
N+uI9mbJMABXQ/bU9u75Z8V4lo6W7BTmoFP0e2vDDFqV3eMy
-----END CERTIFICATE-----
Generated at Thu May 30 17:17:05 2024 by rpki-client on console-ams.rpki-client.org