Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/3fCPYsZRO4920I7J3fiL7m3QYMA.roa
File: 3fCPYsZRO4920I7J3fiL7m3QYMA.roa (raw, json)
Hash identifier: 22Tcanln/YyWYPAdVKqHcBbg+HRmZ4L+xgloOhYJJ3s=
Subject key identifier: DD:F0:8F:62:C6:51:3B:8F:76:D0:8E:C9:DD:F8:8B:EE:6D:D0:60:C0
Certificate issuer: /CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Certificate serial: 018CC725D366778E8C55E602C753DD65E961
Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/3fCPYsZRO4920I7J3fiL7m3QYMA.roa
Signing time: Mon 01 Jan 2024 22:29:54 +0000
ROA not before: Mon 01 Jan 2024 22:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216233
IP address blocks: 2001:67c:d3c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:d3:66:77:8e:8c:55:e6:02:c7:53:dd:65:e9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Validity
Not Before: Jan 1 22:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddf08f62c6513b8f76d08ec9ddf88bee6dd060c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:65:a0:74:e7:de:49:7a:1c:1e:13:5a:d3:
48:1a:9f:a4:ff:f8:73:87:eb:0c:6d:45:de:cf:65:
fd:aa:cf:13:73:2a:44:bb:24:44:ce:29:79:71:78:
ae:66:63:e4:a0:c2:e8:40:d9:4b:36:5d:f6:e4:ed:
0a:f3:eb:00:1a:cd:c0:7c:ec:1b:bc:df:ec:c6:12:
74:0b:8b:c3:29:fb:40:db:b1:2c:fa:57:75:f8:29:
f3:7e:7b:43:23:46:a3:89:29:9c:94:67:7e:43:4e:
04:0c:f7:98:92:42:cc:8b:95:c2:5e:4f:3c:8a:fd:
7b:d9:4f:69:14:6c:8d:12:78:7b:ae:4f:2c:21:9f:
9b:f0:05:64:93:94:79:1f:95:07:69:4d:7c:4c:fc:
e1:98:ad:54:c9:f4:33:df:bd:cc:d1:ee:69:64:84:
6e:ec:9d:d8:c4:d9:7c:ee:56:82:f1:99:17:ba:a4:
df:96:84:8f:70:21:f9:d1:75:dc:8e:41:44:15:85:
cd:d6:da:40:be:72:d9:3c:1c:c7:11:c4:0d:32:16:
57:0d:dd:af:26:15:bd:52:14:2d:c7:00:e4:06:8d:
46:21:46:a9:7b:5d:8c:31:5f:51:d7:20:84:22:cb:
8e:15:dd:ec:44:07:f8:3e:e0:d3:cf:01:c2:4c:5d:
b7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F0:8F:62:C6:51:3B:8F:76:D0:8E:C9:DD:F8:8B:EE:6D:D0:60:C0
X509v3 Authority Key Identifier:
keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/3fCPYsZRO4920I7J3fiL7m3QYMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d3c::/48
Signature Algorithm: sha256WithRSAEncryption
49:61:f7:55:85:e4:2e:6a:50:d5:4d:84:d0:6d:cf:d4:13:7f:
4e:fe:4d:4a:45:da:91:08:a0:d1:c6:83:10:e4:e3:6e:0b:26:
d7:42:cf:3b:96:80:34:b8:23:59:d1:e6:83:c8:35:e1:25:41:
24:63:56:83:c4:25:b4:d2:9d:e7:8b:d2:4e:b6:cc:fd:dd:cc:
ce:28:68:e3:3c:ef:25:34:eb:52:ad:b1:eb:39:7c:9e:55:fb:
4d:f7:66:f0:44:32:25:93:96:27:99:21:dc:20:e8:e9:a6:78:
38:9f:a8:8d:8f:e0:ba:77:89:25:38:0b:63:42:16:b8:e5:e9:
e4:32:f1:5e:36:f8:ec:30:de:e1:55:a1:4e:13:86:51:1c:ad:
3b:9b:cc:2b:4b:d4:02:81:f3:52:43:68:3b:d4:e8:80:37:2d:
3a:bc:d3:fb:44:45:99:23:69:fb:aa:3c:d9:aa:28:08:67:0e:
cc:ef:5c:b2:8c:23:72:05:dc:58:ff:0a:15:6a:6f:4b:3c:a9:
8a:d0:b5:8f:a5:a0:02:b8:13:0a:e5:2f:a5:58:38:9a:fe:31:
64:1d:8a:2b:9a:07:f5:5f:99:70:43:8d:e9:27:7a:7a:06:b2:
c1:d6:e8:77:49:2a:04:ca:6b:a5:a5:cc:9e:fb:1f:a6:aa:87:
43:23:b5:42
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzHJdNmd46MVeYCx1PdZelhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDg0YjVmMTliNjIwNDhiMjJhNjEwM2QwOWY4NGQ4MTUz
Yzc1NTYwHhcNMjQwMTAxMjIyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGYwOGY2MmM2NTEzYjhmNzZkMDhlYzlkZGY4OGJlZTZkZDA2MGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYploHTn3kl6HB4TWtNIGp+k//hz
h+sMbUXez2X9qs8TcypEuyREzil5cXiuZmPkoMLoQNlLNl325O0K8+sAGs3AfOwb
vN/sxhJ0C4vDKftA27Es+ld1+CnzfntDI0ajiSmclGd+Q04EDPeYkkLMi5XCXk88
iv172U9pFGyNEnh7rk8sIZ+b8AVkk5R5H5UHaU18TPzhmK1UyfQz373M0e5pZIRu
7J3YxNl87laC8ZkXuqTfloSPcCH50XXcjkFEFYXN1tpAvnLZPBzHEcQNMhZXDd2v
JhW9UhQtxwDkBo1GIUape12MMV9R1yCEIsuOFd3sRAf4PuDTzwHCTF23PwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFN3wj2LGUTuPdtCOyd34i+5t0GDAMB8GA1UdIwQY
MBaAFGTYS18ZtiBIsiphA9CfhNgVPHVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEt
NWRiNjNiYWI5NDYwLzEvM2ZDUFlzWlJPNDkyMEk3SjNmaUw3bTNRWU1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEtNWRiNjNiYWI5NDYw
LzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA08
MA0GCSqGSIb3DQEBCwUAA4IBAQBJYfdVheQualDVTYTQbc/UE39O/k1KRdqRCKDR
xoMQ5ONuCybXQs87loA0uCNZ0eaDyDXhJUEkY1aDxCW00p3ni9JOtsz93czOKGjj
PO8lNOtSrbHrOXyeVftN92bwRDIlk5YnmSHcIOjppng4n6iNj+C6d4klOAtjQha4
5enkMvFeNvjsMN7hVaFOE4ZRHK07m8wrS9QCgfNSQ2g71OiANy06vNP7REWZI2n7
qjzZqigIZw7M71yyjCNyBdxY/woVam9LPKmK0LWPpaACuBMK5S+lWDia/jFkHYor
mgf1X5lwQ43pJ3p6BrLB1uh3SSoEymulpcye+x+mqodDI7VC
-----END CERTIFICATE-----
Generated at Sat Jun 8 10:16:18 2024 by rpki-client on console-fra.rpki-client.org