Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/XLfaZoR-9t2KtGJhzABTrdiOdos.roa
File: XLfaZoR-9t2KtGJhzABTrdiOdos.roa (raw, json)
Hash identifier: RFyTj3o4ZOFjRvvmEVLHf8KmO/w7/t5mRsY9fTzMdDA=
Subject key identifier: 5C:B7:DA:66:84:7E:F6:DD:8A:B4:62:61:CC:00:53:AD:D8:8E:76:8B
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018E0063DD2441496DC8F51D054F833826EF
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/XLfaZoR-9t2KtGJhzABTrdiOdos.roa
Signing time: Sat 02 Mar 2024 18:18:48 +0000
ROA not before: Sat 02 Mar 2024 18:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197071
IP address blocks: 2a00:f826:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:00:63:dd:24:41:49:6d:c8:f5:1d:05:4f:83:38:26:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Mar 2 18:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cb7da66847ef6dd8ab46261cc0053add88e768b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:5b:b8:57:9c:e9:27:24:84:ad:c4:c3:59:
a0:78:bf:e8:0b:9a:50:92:8c:03:3c:51:ed:77:51:
f4:65:c3:9c:42:98:6f:75:ab:40:cc:d6:7c:b9:47:
83:f2:37:68:a5:f0:7c:93:4a:73:c3:19:b5:3e:ae:
43:07:10:da:26:4c:19:34:4a:a1:a8:9d:13:a9:07:
d4:5b:10:47:07:68:75:a9:b9:2c:87:b3:95:c0:40:
41:a1:12:eb:24:fe:5b:42:25:b9:15:af:f9:0a:e7:
e7:b4:18:2c:33:81:ba:e5:da:3f:f3:da:dd:60:2a:
55:75:d1:03:45:f6:c4:e7:c9:d5:9a:c7:aa:e5:53:
f1:66:c4:0a:12:2c:be:0b:b5:ff:e0:87:03:ff:cc:
f2:c5:09:07:6d:99:5d:6f:af:5d:72:9f:b5:3c:d4:
5a:89:5d:1c:97:a9:02:44:27:79:ab:f4:07:28:c6:
08:c5:68:23:87:4b:3f:37:fe:59:94:c9:c6:97:da:
36:95:7a:14:cc:7a:7c:80:01:0b:37:f2:b7:ff:ad:
ce:88:cf:84:c3:85:4f:ba:63:dc:ad:f6:b6:ca:5f:
92:03:2d:fd:65:6e:28:70:ae:d5:e2:64:95:b5:76:
4b:9b:8c:59:1b:ec:c2:f5:5a:58:02:eb:cc:3b:88:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B7:DA:66:84:7E:F6:DD:8A:B4:62:61:CC:00:53:AD:D8:8E:76:8B
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/XLfaZoR-9t2KtGJhzABTrdiOdos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:f826:4::/48
Signature Algorithm: sha256WithRSAEncryption
87:14:32:23:80:87:87:98:9b:d7:00:09:de:0d:b2:6c:11:e5:
57:a8:8f:93:94:9c:65:6b:9e:94:c7:9a:9f:d4:85:b0:05:e8:
4b:de:c3:13:3a:88:f3:03:38:76:b4:1a:56:cc:2f:54:2f:99:
91:14:3d:94:cb:11:57:25:dc:2a:54:49:d7:17:43:21:c0:df:
cc:ba:85:ac:03:16:49:e7:ec:26:65:f1:45:71:a6:cc:69:51:
c0:0f:23:65:2e:59:82:92:5b:27:6a:4c:86:6b:f7:ed:46:6a:
18:52:ea:e9:a8:d1:13:8f:f5:db:71:ff:db:bb:c6:f8:94:ec:
74:a2:3d:d7:59:3e:2e:ec:3e:96:bf:ab:ae:92:b6:54:b2:27:
fe:85:b1:8c:c8:89:0b:16:f7:7a:d9:1a:02:6d:0e:54:15:61:
fb:76:99:63:26:d5:af:3c:1e:50:79:f6:b8:d5:71:8c:3b:3c:
a6:c8:51:b9:c1:33:12:ee:35:a1:4e:e1:ff:f3:0a:0c:62:6e:
b8:2f:8b:ac:fe:b1:8e:0e:c4:42:97:a1:b3:2b:e8:3d:90:2c:
62:76:b5:11:34:f3:d7:7e:a7:93:54:c2:29:63:5a:f8:cc:42:
e2:2f:1f:5c:14:7f:c5:b2:9e:6b:83:de:c6:dc:30:55:c5:56:
d6:db:78:9a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY4AY90kQUltyPUdBU+DOCbvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjQwMzAyMTgxODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2I3ZGE2Njg0N2VmNmRkOGFiNDYyNjFjYzAwNTNhZGQ4OGU3NjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUVbuFec6SckhK3Ew1mgeL/oC5pQ
kowDPFHtd1H0ZcOcQphvdatAzNZ8uUeD8jdopfB8k0pzwxm1Pq5DBxDaJkwZNEqh
qJ0TqQfUWxBHB2h1qbksh7OVwEBBoRLrJP5bQiW5Fa/5CufntBgsM4G65do/89rd
YCpVddEDRfbE58nVmseq5VPxZsQKEiy+C7X/4IcD/8zyxQkHbZldb69dcp+1PNRa
iV0cl6kCRCd5q/QHKMYIxWgjh0s/N/5ZlMnGl9o2lXoUzHp8gAELN/K3/63OiM+E
w4VPumPcrfa2yl+SAy39ZW4ocK7V4mSVtXZLm4xZG+zC9VpYAuvMO4g3fwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFy32maEfvbdirRiYcwAU63YjnaLMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvWExmYVpvUi05dDJLdEdKaHpBQlRyZGlPZG9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgD4JgAE
MA0GCSqGSIb3DQEBCwUAA4IBAQCHFDIjgIeHmJvXAAneDbJsEeVXqI+TlJxla56U
x5qf1IWwBehL3sMTOojzAzh2tBpWzC9UL5mRFD2UyxFXJdwqVEnXF0MhwN/MuoWs
AxZJ5+wmZfFFcabMaVHADyNlLlmCklsnakyGa/ftRmoYUurpqNETj/Xbcf/bu8b4
lOx0oj3XWT4u7D6Wv6uukrZUsif+hbGMyIkLFvd62RoCbQ5UFWH7dpljJtWvPB5Q
efa41XGMOzymyFG5wTMS7jWhTuH/8woMYm64L4us/rGODsRCl6GzK+g9kCxidrUR
NPPXfqeTVMIpY1r4zELiLx9cFH/Fsp5rg97G3DBVxVbW23ia
-----END CERTIFICATE-----
Generated at Tue May 7 19:37:05 2024 by rpki-client on console-fra.rpki-client.org