Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/76vZSYfE3virRiHCto6oGP6c8HA.roa
File: 76vZSYfE3virRiHCto6oGP6c8HA.roa (raw, json)
Hash identifier: JCPCSIw45EDyYpGbE7udaXa7sK6Ig1lYWjznp/ygfJk=
Subject key identifier: EF:AB:D9:49:87:C4:DE:F8:AB:46:21:C2:B6:8E:A8:18:FE:9C:F0:70
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018CC424629AD2B1E837F11B0D5B1EAE4557
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/76vZSYfE3virRiHCto6oGP6c8HA.roa
Signing time: Mon 01 Jan 2024 08:29:28 +0000
ROA not before: Mon 01 Jan 2024 08:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197433
IP address blocks: 2a0f:7803:ff10::/48 maxlen: 48
2a0f:7803:ff11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:62:9a:d2:b1:e8:37:f1:1b:0d:5b:1e:ae:45:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 08:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efabd94987c4def8ab4621c2b68ea818fe9cf070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2e:d7:02:e3:ff:e3:36:41:5e:0b:6a:17:bb:
3e:ce:37:e7:a2:a7:13:4c:2f:3b:ad:cb:f6:f9:e2:
27:25:08:7f:a5:69:c2:12:6a:98:0e:e6:65:41:06:
52:1f:76:96:2a:9d:cb:f9:d4:69:bf:e2:d5:6d:f7:
f1:a4:8e:57:dd:3e:e6:18:b3:8d:81:cf:4b:a0:aa:
3b:26:10:37:fd:7b:c5:96:05:11:cb:43:b2:45:0d:
d2:65:31:c3:fe:3b:c3:bd:6b:bd:9a:08:bc:6e:a3:
86:70:78:89:25:37:3f:32:e5:e7:11:af:dd:39:d3:
34:3f:22:f8:f4:d4:6d:e1:86:53:4b:f3:63:c7:f5:
8c:40:dc:0a:da:78:ab:78:b7:c7:f2:d4:5d:ec:80:
04:48:53:44:b4:d4:34:ec:c8:25:cd:90:06:ff:bb:
06:1d:b9:d5:90:75:f3:b4:33:93:da:c4:14:00:da:
65:38:19:c6:43:b6:e0:66:36:05:96:ca:00:e5:b0:
f5:0b:7d:3a:a7:05:8d:d7:10:40:b1:8f:84:11:b8:
1a:d6:98:35:df:4c:86:c2:3d:20:3c:59:e7:64:d3:
2c:6d:10:f6:cd:cd:0e:8f:82:50:18:cf:a1:dc:c6:
86:94:ef:5a:00:b2:99:6f:a3:60:7d:14:11:c7:68:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AB:D9:49:87:C4:DE:F8:AB:46:21:C2:B6:8E:A8:18:FE:9C:F0:70
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/76vZSYfE3virRiHCto6oGP6c8HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:ff10::/47
Signature Algorithm: sha256WithRSAEncryption
28:3a:e4:47:81:8d:03:70:cb:8d:c7:44:da:b7:d7:46:27:27:
36:f6:4e:11:6c:39:38:44:ea:93:ce:7b:9e:7c:90:03:d7:6e:
b1:e8:a9:d6:e7:e7:02:64:95:26:af:15:3f:98:00:8f:8b:db:
cd:87:05:2b:88:2b:e5:92:dd:0e:cc:f2:4c:c5:0f:37:79:7d:
9f:af:2e:ba:c0:34:b8:13:9b:d9:f6:79:87:f8:89:91:d0:b6:
4e:dc:b8:5a:1e:65:ba:a3:35:94:a5:6f:f7:00:3f:c4:ff:cf:
88:01:4c:f8:d7:8b:91:66:b2:bd:91:31:04:f5:86:e3:22:8d:
f1:40:18:d3:b9:34:a6:37:8c:d1:8b:fb:ed:45:3b:ac:72:21:
0c:e1:a3:06:23:49:03:6f:ed:8e:6b:e3:02:c9:41:2e:8c:55:
7d:f8:be:c0:e8:c5:a9:f5:aa:b4:c5:83:ec:bc:46:bc:a6:48:
b7:64:d5:30:66:f1:60:74:25:0a:52:57:e5:3d:47:ea:1f:88:
67:52:d2:c4:8e:c9:86:13:37:a0:74:f0:a5:35:3d:5c:ba:c5:
a9:ac:12:19:8b:83:2f:5f:43:ac:ba:9d:8e:53:26:8b:00:26:
24:d8:15:cd:7d:d8:37:d9:e3:82:dd:54:3e:05:d7:a6:27:ce:
61:00:da:a6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzEJGKa0rHoN/EbDVserkVXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw
ZDcwZTUwHhcNMjQwMTAxMDgyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmFiZDk0OTg3YzRkZWY4YWI0NjIxYzJiNjhlYTgxOGZlOWNmMDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC7XAuP/4zZBXgtqF7s+zjfnoqcT
TC87rcv2+eInJQh/pWnCEmqYDuZlQQZSH3aWKp3L+dRpv+LVbffxpI5X3T7mGLON
gc9LoKo7JhA3/XvFlgURy0OyRQ3SZTHD/jvDvWu9mgi8bqOGcHiJJTc/MuXnEa/d
OdM0PyL49NRt4YZTS/Njx/WMQNwK2nireLfH8tRd7IAESFNEtNQ07MglzZAG/7sG
HbnVkHXztDOT2sQUANplOBnGQ7bgZjYFlsoA5bD1C306pwWN1xBAsY+EEbga1pg1
30yGwj0gPFnnZNMsbRD2zc0Oj4JQGM+h3MaGlO9aALKZb6NgfRQRx2j3IwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO+r2UmHxN74q0YhwraOqBj+nPBwMB8GA1UdIwQY
MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt
ZjViNmE3MThmNGI1LzEvNzZ2WlNZZkUzdmlyUmlIQ3RvNm9HUDZjOEhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1
LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKg94A/8Q
MA0GCSqGSIb3DQEBCwUAA4IBAQAoOuRHgY0DcMuNx0Tat9dGJyc29k4RbDk4ROqT
znuefJAD126x6KnW5+cCZJUmrxU/mACPi9vNhwUriCvlkt0OzPJMxQ83eX2fry66
wDS4E5vZ9nmH+ImR0LZO3LhaHmW6ozWUpW/3AD/E/8+IAUz414uRZrK9kTEE9Ybj
Io3xQBjTuTSmN4zRi/vtRTusciEM4aMGI0kDb+2Oa+MCyUEujFV9+L7A6MWp9aq0
xYPsvEa8pki3ZNUwZvFgdCUKUlflPUfqH4hnUtLEjsmGEzegdPClNT1cusWprBIZ
i4MvX0Osup2OUyaLACYk2BXNfdg32eOC3VQ+BdemJ85hANqm
-----END CERTIFICATE-----
Generated at Sat Jun 8 02:07:02 2024 by rpki-client on console-fra.rpki-client.org