Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/MieyOq0dfiT2m0DuS4jee16l8uc.roa
File: MieyOq0dfiT2m0DuS4jee16l8uc.roa (raw, json)
Hash identifier: hrwuGOUhQ4PRV6sEeaf0Td4bkMsJoYLEWocxT/2hnkk=
Subject key identifier: 32:27:B2:3A:AD:1D:7E:24:F6:9B:40:EE:4B:88:DE:7B:5E:A5:F2:E7
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01912432F3D97FC6FDFD53A6C06EBACE1DE9
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/MieyOq0dfiT2m0DuS4jee16l8uc.roa
Signing time: Mon 05 Aug 2024 20:20:04 +0000
ROA not before: Mon 05 Aug 2024 20:20:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 2a05:9080::/48 maxlen: 48
2a05:9080:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:24:32:f3:d9:7f:c6:fd:fd:53:a6:c0:6e:ba:ce:1d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Aug 5 20:20:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3227b23aad1d7e24f69b40ee4b88de7b5ea5f2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:a6:cd:58:84:b9:e1:5e:fe:f0:87:50:7d:
8d:7a:9e:ab:ea:fe:22:37:86:18:0c:10:81:29:04:
a7:76:6c:5c:26:32:78:04:ec:7b:14:5e:56:45:24:
84:b7:55:68:7e:d4:58:79:f2:d8:d3:e4:66:6b:d9:
62:b9:f1:c5:a0:4c:1b:22:f8:7d:20:ea:4b:bd:1e:
1f:f2:77:b2:95:69:44:1e:d3:2f:fe:3f:50:79:53:
ad:e0:86:2d:9b:7f:da:d2:34:e4:20:1b:2c:a0:cf:
d2:33:a2:64:3a:d0:b2:a5:a4:1a:c1:31:f5:c5:ee:
6a:2f:d9:50:37:e2:fc:c9:ea:13:92:cd:68:84:6a:
6d:56:b3:fa:2e:32:d1:fe:e3:6b:c6:1d:98:49:22:
f8:a0:5d:0b:90:4a:02:84:2b:e8:91:8c:05:aa:2b:
12:4d:95:ac:ec:0b:9f:17:b1:26:e1:0b:e5:38:fe:
ab:c6:7d:13:c1:0f:96:b6:43:ee:13:f2:a5:15:cc:
c2:45:8d:4e:c5:b5:73:fd:c4:37:b5:40:9b:29:d4:
52:bb:92:48:2c:96:fc:7e:77:a5:2b:be:f8:b8:bc:
c3:a3:7b:8f:60:80:b9:db:f5:35:d2:52:a5:44:c2:
b2:e9:2c:6e:85:dc:1c:ff:65:5f:7d:15:3d:9c:68:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:27:B2:3A:AD:1D:7E:24:F6:9B:40:EE:4B:88:DE:7B:5E:A5:F2:E7
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/MieyOq0dfiT2m0DuS4jee16l8uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080::/48
2a05:9080:4::/48
Signature Algorithm: sha256WithRSAEncryption
d3:4c:83:95:88:18:b4:b5:3d:22:e1:85:e3:f2:e8:d6:83:e8:
01:0e:7b:44:24:d0:70:9c:d2:b0:ef:43:4f:d4:9a:47:0c:35:
06:e4:c5:7b:f3:f5:fc:15:50:26:10:2d:54:3d:ba:d7:91:c4:
fa:ba:e7:a4:c0:ee:06:37:e0:19:3b:f6:d6:29:10:36:5d:7e:
25:34:d0:cc:47:cb:2d:d5:56:3a:d8:d0:e8:c8:7c:70:92:f8:
66:8b:bf:cf:56:66:6d:08:83:4b:13:24:9e:cd:97:1d:f4:a5:
a4:a9:b2:4b:2d:fe:8c:75:c1:76:fa:22:7d:13:59:c3:a2:95:
3c:a2:5a:12:c6:f3:9a:2e:8f:b3:c0:b6:44:a0:1e:22:68:e3:
47:c2:e1:a7:54:42:58:0b:a7:fd:b0:10:1d:15:de:45:aa:8f:
33:2d:e0:8b:2a:ae:4a:33:b0:e0:5e:ec:5e:a4:27:9d:1e:b0:
b2:2b:92:0b:51:1e:52:3c:d8:87:95:4a:d4:00:a2:84:d5:e0:
4a:1c:ae:60:b2:74:de:e9:65:4e:b8:20:35:83:5e:93:94:cd:
45:04:5d:96:74:9e:45:6c:62:9b:a8:ad:13:81:3a:c9:d4:f9:
8d:c5:92:68:14:be:8a:8d:31:d5:2f:6b:0e:fd:fb:6b:d2:69:
8a:2b:e0:5a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZEkMvPZf8b9/VOmwG66zh3pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjQwODA1MjAyMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjI3YjIzYWFkMWQ3ZTI0ZjY5YjQwZWU0Yjg4ZGU3YjVlYTVmMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBWmzViEueFe/vCHUH2Nep6r6v4i
N4YYDBCBKQSndmxcJjJ4BOx7FF5WRSSEt1VoftRYefLY0+Rma9liufHFoEwbIvh9
IOpLvR4f8neylWlEHtMv/j9QeVOt4IYtm3/a0jTkIBssoM/SM6JkOtCypaQawTH1
xe5qL9lQN+L8yeoTks1ohGptVrP6LjLR/uNrxh2YSSL4oF0LkEoChCvokYwFqisS
TZWs7AufF7Em4QvlOP6rxn0TwQ+WtkPuE/KlFczCRY1OxbVz/cQ3tUCbKdRSu5JI
LJb8fnelK774uLzDo3uPYIC52/U10lKlRMKy6Sxuhdwc/2VffRU9nGhujwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDInsjqtHX4k9ptA7kuI3ntepfLnMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvTWlleU9xMGRmaVQybTBEdVM0amVlMTZsOHVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgWQgAAA
AwcAKgWQgAAEMA0GCSqGSIb3DQEBCwUAA4IBAQDTTIOViBi0tT0i4YXj8ujWg+gB
DntEJNBwnNKw70NP1JpHDDUG5MV78/X8FVAmEC1UPbrXkcT6uuekwO4GN+AZO/bW
KRA2XX4lNNDMR8st1VY62NDoyHxwkvhmi7/PVmZtCINLEySezZcd9KWkqbJLLf6M
dcF2+iJ9E1nDopU8oloSxvOaLo+zwLZEoB4iaONHwuGnVEJYC6f9sBAdFd5Fqo8z
LeCLKq5KM7DgXuxepCedHrCyK5ILUR5SPNiHlUrUAKKE1eBKHK5gsnTe6WVOuCA1
g16TlM1FBF2WdJ5FbGKbqK0TgTrJ1PmNxZJoFL6KjTHVL2sO/ftr0mmKK+Ba
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:09:43 2024 by rpki-client on console-fra.rpki-client.org