Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/0NgdPkiURW6YRlZpP-wrDxj34Fs.roa
File: 0NgdPkiURW6YRlZpP-wrDxj34Fs.roa (raw, json)
Hash identifier: HokShX5pm/PzJ5nIVVmBlcDfjabxCK3zFT3uOyWHJ0U=
Subject key identifier: D0:D8:1D:3E:48:94:45:6E:98:46:56:69:3F:EC:2B:0F:18:F7:E0:5B
Certificate issuer: /CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Certificate serial: 018CC6B79FBE38176A28A342AE435C4DDC0B
Authority key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/0NgdPkiURW6YRlZpP-wrDxj34Fs.roa
Signing time: Mon 01 Jan 2024 20:29:31 +0000
ROA not before: Mon 01 Jan 2024 20:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12695
IP address blocks: 2a00:f940::/49 maxlen: 49
2a00:f940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:9f:be:38:17:6a:28:a3:42:ae:43:5c:4d:dc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Validity
Not Before: Jan 1 20:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0d81d3e4894456e984656693fec2b0f18f7e05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:8f:a8:3b:1d:0b:cf:32:2a:72:82:13:fc:
12:fe:01:cd:bb:41:64:da:a1:39:b5:47:a6:8c:de:
45:31:0e:d9:27:46:2c:ab:83:0c:31:f0:16:f0:89:
30:d5:0f:2f:b8:03:5e:3a:7c:2a:58:10:8f:24:98:
05:b7:2a:b9:a0:d9:c5:68:7a:3f:80:0c:5e:24:ce:
c3:af:3b:cf:c9:83:f3:49:54:c6:82:b4:e7:39:c9:
7b:a3:e4:73:7b:18:76:77:44:e4:24:ae:59:fe:8c:
07:1e:f0:2e:0d:28:8c:79:c9:97:16:e4:3e:e2:c9:
a5:cd:25:d6:9c:a4:25:5a:61:41:70:0a:8d:b2:f4:
1b:8d:2d:ce:7f:d3:e1:06:ce:7d:9f:c8:e7:42:c5:
bc:0d:e4:63:5c:8c:56:c7:47:dc:96:21:10:cb:e0:
13:6d:38:b8:62:ca:d8:2f:a7:92:fa:4c:17:3d:cd:
f2:c8:bc:0c:f1:b6:66:9b:39:6d:53:13:00:19:a9:
4c:07:35:52:79:93:3f:a5:59:ce:04:2c:b1:2e:cc:
34:98:d5:66:be:00:e5:85:fb:f4:7b:f3:3e:04:4f:
2c:da:0d:bb:7e:0f:1c:91:fd:8a:db:a0:ec:da:ca:
8f:01:39:ad:9a:54:73:5d:12:4d:0f:2a:f3:eb:d0:
85:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D8:1D:3E:48:94:45:6E:98:46:56:69:3F:EC:2B:0F:18:F7:E0:5B
X509v3 Authority Key Identifier:
keyid:58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/0NgdPkiURW6YRlZpP-wrDxj34Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:f940::/48
Signature Algorithm: sha256WithRSAEncryption
03:ce:9e:87:38:b0:e4:b9:52:d1:a4:1a:06:ba:67:b5:07:3b:
44:da:44:6e:ca:b9:09:c5:83:c2:ab:5c:67:2b:e3:cf:59:29:
0d:7a:e0:bc:75:9a:52:ab:17:3f:f7:7e:9b:f7:86:0c:57:da:
bb:70:af:63:c6:4a:22:27:55:83:72:c3:43:25:f4:a0:6f:3f:
ef:61:34:e9:b6:7b:e5:b1:f9:b7:47:e8:c9:87:aa:d3:fe:fb:
1c:36:7b:87:6d:5c:53:74:27:31:f9:0e:88:bc:50:47:eb:9a:
01:ce:c7:2f:e8:c4:8c:f0:15:14:a7:60:a0:97:31:19:19:f6:
4a:c0:fb:56:fc:a6:be:95:83:5a:d4:c0:46:44:6c:ac:f2:97:
7d:5f:f2:42:2e:61:7f:42:1d:f2:a5:aa:bf:ea:7e:64:5c:34:
29:18:c2:90:7d:74:92:99:a6:7a:df:c8:0d:d5:2b:d8:a4:35:
3b:ed:95:fa:d1:d2:b8:44:a3:c5:37:e6:24:ae:64:53:df:e5:
56:c2:be:20:fb:e1:e5:39:63:a2:aa:6a:ca:6b:ff:04:23:3b:
a8:ab:4c:c8:cb:d2:e3:56:4f:07:ba:7f:05:44:f1:eb:06:c1:
7b:02:32:a1:94:ad:f4:70:07:d6:12:39:df:c9:8f:0c:92:21:
d8:56:a5:87
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzGt5++OBdqKKNCrkNcTdwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MzMyOTRhMWNkYzEzNThhZmM0MzljMGE3MjczM2IwNjVh
ODZmOGIwHhcNMjQwMTAxMjAyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGQ4MWQzZTQ4OTQ0NTZlOTg0NjU2NjkzZmVjMmIwZjE4ZjdlMDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi+PqDsdC88yKnKCE/wS/gHNu0Fk
2qE5tUemjN5FMQ7ZJ0Ysq4MMMfAW8Ikw1Q8vuANeOnwqWBCPJJgFtyq5oNnFaHo/
gAxeJM7DrzvPyYPzSVTGgrTnOcl7o+Rzexh2d0TkJK5Z/owHHvAuDSiMecmXFuQ+
4smlzSXWnKQlWmFBcAqNsvQbjS3Of9PhBs59n8jnQsW8DeRjXIxWx0fcliEQy+AT
bTi4YsrYL6eS+kwXPc3yyLwM8bZmmzltUxMAGalMBzVSeZM/pVnOBCyxLsw0mNVm
vgDlhfv0e/M+BE8s2g27fg8ckf2K26Ds2sqPATmtmlRzXRJNDyrz69CFVwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNDYHT5IlEVumEZWaT/sKw8Y9+BbMB8GA1UdIwQY
MBaAFFgzKUoc3BNYr8Q5wKcnM7BlqG+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0RNcFNoemNFMWl2eERuQXB5Y3pzR1dvYjRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80YjQxOWMtY2Y4Zi00YzlhLTk0ZDct
YmI0YjY1YjZhMGQxLzEvME5nZFBraVVSVzZZUmxacFAtd3JEeGozNEZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80YjQxOWMtY2Y4Zi00YzlhLTk0ZDctYmI0YjY1YjZhMGQx
LzEvV0RNcFNoemNFMWl2eERuQXB5Y3pzR1dvYjRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgD5QAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQADzp6HOLDkuVLRpBoGume1BztE2kRuyrkJxYPC
q1xnK+PPWSkNeuC8dZpSqxc/936b94YMV9q7cK9jxkoiJ1WDcsNDJfSgbz/vYTTp
tnvlsfm3R+jJh6rT/vscNnuHbVxTdCcx+Q6IvFBH65oBzscv6MSM8BUUp2CglzEZ
GfZKwPtW/Ka+lYNa1MBGRGys8pd9X/JCLmF/Qh3ypaq/6n5kXDQpGMKQfXSSmaZ6
38gN1SvYpDU77ZX60dK4RKPFN+YkrmRT3+VWwr4g++HlOWOiqmrKa/8EIzuoq0zI
y9LjVk8Hun8FRPHrBsF7AjKhlK30cAfWEjnfyY8MkiHYVqWH
-----END CERTIFICATE-----
Generated at Sun May 19 16:02:46 2024 by rpki-client on console-fra.rpki-client.org