Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/_aS8PNBkqMkute49c_MqK_6qVC8.roa
File: _aS8PNBkqMkute49c_MqK_6qVC8.roa (raw, json)
Hash identifier: KoQHGerrGHYsK1GlQrvPf9Yy2oetZnJoZOLIynxX/4Q=
Subject key identifier: FD:A4:BC:3C:D0:64:A8:C9:2E:B5:EE:3D:73:F3:2A:2B:FE:AA:54:2F
Certificate issuer: /CN=763d457e5d3cc0acd8a74f8b10e2686bfbc496cb
Certificate serial: 01925357633F66E33739811C20837FCCA211
Authority key identifier: 76:3D:45:7E:5D:3C:C0:AC:D8:A7:4F:8B:10:E2:68:6B:FB:C4:96:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/_aS8PNBkqMkute49c_MqK_6qVC8.roa
Signing time: Thu 03 Oct 2024 17:04:48 +0000
ROA not before: Thu 03 Oct 2024 17:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29182
IP address blocks: 2a11:7687::/32 maxlen: 32
2a11:8303::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/dj1Ffl08wKzYp0-LEOJoa_vElss.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/dj1Ffl08wKzYp0-LEOJoa_vElss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:53:57:63:3f:66:e3:37:39:81:1c:20:83:7f:cc:a2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=763d457e5d3cc0acd8a74f8b10e2686bfbc496cb
Validity
Not Before: Oct 3 17:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fda4bc3cd064a8c92eb5ee3d73f32a2bfeaa542f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:0b:8d:56:f0:cb:3a:0c:22:36:d7:c7:c2:
0f:c0:b9:5a:09:e6:32:a4:cc:85:2b:60:22:b5:3b:
0a:96:7d:30:1f:c4:1f:f8:34:f1:ae:94:7e:6e:e3:
98:c3:04:b7:6b:9e:fc:bd:fb:0a:e0:3e:62:ef:8c:
26:72:23:42:9f:5f:34:3c:21:d1:8e:6e:b3:d0:5a:
6b:4e:fb:0e:ee:69:cb:c9:97:cd:55:67:98:99:2e:
8f:2b:ad:8e:5d:bc:2f:4d:7e:d1:f3:9e:17:f9:f2:
ef:2f:60:6a:f8:1e:a6:cc:b3:fa:c1:87:b5:aa:65:
44:d9:35:e0:0f:23:e5:2b:a5:8b:a9:18:ac:59:7e:
8f:29:dc:0e:17:01:ad:09:63:09:2a:ff:2f:65:34:
5c:fc:5a:20:f9:35:36:3e:1c:8b:5c:a6:99:2f:c0:
8f:77:b9:5a:21:5d:43:0a:76:53:0a:80:7c:41:e3:
55:96:eb:5a:9d:f9:49:89:19:60:b3:da:6a:dd:3c:
c4:a2:ff:7d:c1:2d:0e:e1:d6:a9:80:84:16:c6:08:
4a:37:18:15:11:e7:30:d2:d2:b2:e0:6d:a6:5b:f5:
c8:2f:55:b0:92:20:2b:bb:7a:24:bd:70:c0:e7:05:
9a:36:46:17:86:2f:aa:9c:87:f3:a8:bd:c9:fa:57:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A4:BC:3C:D0:64:A8:C9:2E:B5:EE:3D:73:F3:2A:2B:FE:AA:54:2F
X509v3 Authority Key Identifier:
keyid:76:3D:45:7E:5D:3C:C0:AC:D8:A7:4F:8B:10:E2:68:6B:FB:C4:96:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/_aS8PNBkqMkute49c_MqK_6qVC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/dj1Ffl08wKzYp0-LEOJoa_vElss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7687::/32
2a11:8303::/32
Signature Algorithm: sha256WithRSAEncryption
68:16:a2:0b:2e:58:cd:67:32:3e:1c:34:c9:b0:87:66:30:be:
1b:54:b0:d9:b3:55:ec:b0:7a:30:8a:21:67:d3:22:87:c5:9d:
9c:ec:e5:31:3c:f7:99:3b:84:67:47:7a:d3:ec:e5:21:f5:5d:
23:c8:66:d2:b8:e7:9c:69:0a:5c:68:b9:6e:22:55:5c:b1:85:
87:ff:84:de:18:37:68:18:4b:6b:9a:e8:4e:6b:7e:fb:ba:fd:
ef:12:48:fa:cb:ba:6b:d1:a6:80:43:46:d2:2e:1c:13:14:aa:
00:7e:46:5d:f0:e0:4f:b7:59:2a:6e:bf:81:c9:de:1a:88:21:
d5:4b:ec:98:12:10:0b:6f:0a:08:81:b5:5f:5f:5f:11:87:a9:
0e:4d:a9:5a:e8:d8:b0:68:17:0d:13:e7:26:d7:5c:c7:e9:d5:
ff:90:6b:08:57:81:7e:08:b2:50:08:f7:aa:2b:38:43:9c:e8:
6a:7f:6c:1b:07:a8:28:5d:50:4d:52:90:87:a0:6c:2a:3d:b5:
fc:54:80:c9:e0:6a:2c:3d:b5:2f:14:f1:83:9e:48:e6:94:31:
3b:62:62:4d:c9:33:d4:a9:df:1e:17:b9:b3:78:b1:e7:7f:10:
3e:c2:4a:67:7f:d7:73:8c:31:18:57:2e:8e:c6:a4:35:83:30:
a0:e9:64:0e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZJTV2M/ZuM3OYEcIIN/zKIRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2M2Q0NTdlNWQzY2MwYWNkOGE3NGY4YjEwZTI2ODZiZmJj
NDk2Y2IwHhcNMjQxMDAzMTcwNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGE0YmMzY2QwNjRhOGM5MmViNWVlM2Q3M2YzMmEyYmZlYWE1NDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiwLjVbwyzoMIjbXx8IPwLlaCeYy
pMyFK2AitTsKln0wH8Qf+DTxrpR+buOYwwS3a578vfsK4D5i74wmciNCn180PCHR
jm6z0FprTvsO7mnLyZfNVWeYmS6PK62OXbwvTX7R854X+fLvL2Bq+B6mzLP6wYe1
qmVE2TXgDyPlK6WLqRisWX6PKdwOFwGtCWMJKv8vZTRc/Fog+TU2PhyLXKaZL8CP
d7laIV1DCnZTCoB8QeNVlutanflJiRlgs9pq3TzEov99wS0O4dapgIQWxghKNxgV
Eecw0tKy4G2mW/XIL1WwkiAru3okvXDA5wWaNkYXhi+qnIfzqL3J+lfcgQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFP2kvDzQZKjJLrXuPXPzKiv+qlQvMB8GA1UdIwQY
MBaAFHY9RX5dPMCs2KdPixDiaGv7xJbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGoxRmZsMDh3S3pZcDAtTEVPSm9hX3ZFbHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jY2M5NGItYzI4Ny00ZTVmLTg2MDQt
N2U1OTRmMjQ5NGNjLzEvX2FTOFBOQmtxTWt1dGU0OWNfTXFLXzZxVkM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jY2M5NGItYzI4Ny00ZTVmLTg2MDQtN2U1OTRmMjQ5NGNj
LzEvZGoxRmZsMDh3S3pZcDAtTEVPSm9hX3ZFbHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhF2hwMF
ACoRgwMwDQYJKoZIhvcNAQELBQADggEBAGgWogsuWM1nMj4cNMmwh2YwvhtUsNmz
VeywejCKIWfTIofFnZzs5TE895k7hGdHetPs5SH1XSPIZtK455xpClxouW4iVVyx
hYf/hN4YN2gYS2ua6E5rfvu6/e8SSPrLumvRpoBDRtIuHBMUqgB+Rl3w4E+3WSpu
v4HJ3hqIIdVL7JgSEAtvCgiBtV9fXxGHqQ5NqVro2LBoFw0T5ybXXMfp1f+QawhX
gX4IslAI96orOEOc6Gp/bBsHqChdUE1SkIegbCo9tfxUgMngaiw9tS8U8YOeSOaU
MTtiYk3JM9Sp3x4XubN4sed/ED7CSmd/13OMMRhXLo7GpDWDMKDpZA4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:25:35 2024 by rpki-client on console-fra.rpki-client.org