Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/8mapcWNXwgPO8hoJZzDASndPq-Q.roa
File: 8mapcWNXwgPO8hoJZzDASndPq-Q.roa (raw, json)
Hash identifier: YYEFhsMS7jgq8RuMd4W+WbyogZE2vv4GKBF6C5HB3LI=
Subject key identifier: F2:66:A9:71:63:57:C2:03:CE:F2:1A:09:67:30:C0:4A:77:4F:AB:E4
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018E5C039F834477A7B28114E2B361C24232
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/8mapcWNXwgPO8hoJZzDASndPq-Q.roa
Signing time: Wed 20 Mar 2024 13:18:45 +0000
ROA not before: Wed 20 Mar 2024 13:18:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215315
IP address blocks: 2a0f:7803:faf0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5c:03:9f:83:44:77:a7:b2:81:14:e2:b3:61:c2:42:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Mar 20 13:18:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f266a9716357c203cef21a096730c04a774fabe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:40:b3:17:96:21:e4:52:a4:23:e1:65:80:82:
23:c1:e2:8b:e4:7c:55:c1:19:b6:0e:b1:bd:01:fc:
e6:11:a0:1a:39:b3:b4:6b:8e:3c:44:88:b7:38:60:
1d:0b:0a:c0:b0:b0:5a:e7:63:24:9b:14:13:a3:a9:
98:56:c0:4f:18:2c:df:bc:eb:cf:95:38:69:87:d8:
df:87:71:1f:0c:33:4d:0d:97:bd:14:2b:dc:a9:34:
07:40:f4:34:18:5e:b1:d4:23:18:e0:e9:69:bf:b8:
c3:72:46:61:52:c1:18:20:9b:78:af:e1:2e:ce:63:
c1:df:16:a0:cc:d2:df:1c:42:91:d1:b3:c9:9c:0f:
d9:7d:58:34:8d:7b:40:d8:87:86:a8:0e:19:47:58:
70:d9:e6:97:5c:40:61:b0:d6:ab:30:8f:2c:0d:6c:
a3:2e:2c:01:7d:61:be:41:80:44:7e:3c:a1:0b:c1:
6a:37:e3:d4:23:2b:7d:02:14:57:13:ab:1b:0c:81:
be:b7:af:16:52:0f:5a:9f:c5:dd:ab:b6:bb:6e:73:
8e:9c:c9:61:dc:e5:90:e7:3c:02:fb:5e:d7:93:27:
84:77:11:d0:3f:75:e5:10:f9:75:13:07:c5:cf:9e:
7e:f4:a0:fe:bb:1f:0a:52:1b:e2:5a:2e:67:61:0e:
7b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:66:A9:71:63:57:C2:03:CE:F2:1A:09:67:30:C0:4A:77:4F:AB:E4
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/8mapcWNXwgPO8hoJZzDASndPq-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:faf0::/44
Signature Algorithm: sha256WithRSAEncryption
09:c2:15:5d:9a:f2:59:8e:a9:e7:9b:3a:91:e3:9f:36:f0:b3:
9b:e4:bc:80:94:91:5e:e3:b4:1a:a5:11:64:95:22:59:89:af:
8d:5a:37:b2:62:bd:3e:90:70:96:b2:d7:a8:84:42:0c:78:d2:
a5:dc:4e:21:46:94:a5:2c:2d:0e:bc:cc:ea:28:e6:12:67:d4:
de:1c:81:08:13:7c:b3:45:ab:dc:67:c3:37:c7:96:6e:c9:b1:
ec:e7:c2:1a:ce:21:d9:12:93:00:e8:71:86:97:1f:00:e1:3c:
20:bf:11:7e:80:f8:8b:b7:9b:8d:71:d1:e9:14:3e:e3:31:d7:
23:64:e8:13:ba:0a:0c:f2:bc:60:64:94:5c:c4:ca:11:c1:65:
9c:50:98:61:b7:98:37:c9:5a:16:a4:a6:2b:c2:19:f1:fb:89:
4e:07:55:c6:a1:6b:92:d8:f8:22:d7:84:6c:51:80:52:f9:a6:
56:bb:61:fb:0e:a8:38:ed:83:bd:ce:11:d4:76:ff:40:40:9b:
e9:d8:60:40:8f:3c:d3:2a:0a:0a:47:2b:8a:78:dd:c7:e4:0d:
c3:d0:3e:ae:28:66:d2:ba:01:24:74:d0:ea:66:83:13:f8:a8:
ea:9f:5d:62:38:5d:b7:1e:81:a1:5a:64:4c:b8:be:10:47:65:
6c:6f:dd:75
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY5cA5+DRHensoEU4rNhwkIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw
ZDcwZTUwHhcNMjQwMzIwMTMxODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjY2YTk3MTYzNTdjMjAzY2VmMjFhMDk2NzMwYzA0YTc3NGZhYmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhECzF5Yh5FKkI+FlgIIjweKL5HxV
wRm2DrG9AfzmEaAaObO0a448RIi3OGAdCwrAsLBa52MkmxQTo6mYVsBPGCzfvOvP
lThph9jfh3EfDDNNDZe9FCvcqTQHQPQ0GF6x1CMY4Olpv7jDckZhUsEYIJt4r+Eu
zmPB3xagzNLfHEKR0bPJnA/ZfVg0jXtA2IeGqA4ZR1hw2eaXXEBhsNarMI8sDWyj
LiwBfWG+QYBEfjyhC8FqN+PUIyt9AhRXE6sbDIG+t68WUg9an8Xdq7a7bnOOnMlh
3OWQ5zwC+17XkyeEdxHQP3XlEPl1EwfFz55+9KD+ux8KUhviWi5nYQ57wQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPJmqXFjV8IDzvIaCWcwwEp3T6vkMB8GA1UdIwQY
MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt
ZjViNmE3MThmNGI1LzEvOG1hcGNXTlh3Z1BPOGhvSlp6REFTbmRQcS1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1
LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/rw
MA0GCSqGSIb3DQEBCwUAA4IBAQAJwhVdmvJZjqnnmzqR45828LOb5LyAlJFe47Qa
pRFklSJZia+NWjeyYr0+kHCWsteohEIMeNKl3E4hRpSlLC0OvMzqKOYSZ9TeHIEI
E3yzRavcZ8M3x5ZuybHs58IaziHZEpMA6HGGlx8A4TwgvxF+gPiLt5uNcdHpFD7j
MdcjZOgTugoM8rxgZJRcxMoRwWWcUJhht5g3yVoWpKYrwhnx+4lOB1XGoWuS2Pgi
14RsUYBS+aZWu2H7Dqg47YO9zhHUdv9AQJvp2GBAjzzTKgoKRyuKeN3H5A3D0D6u
KGbSugEkdNDqZoMT+Kjqn11iOF23HoGhWmRMuL4QR2Vsb911
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:34:49 2024 by rpki-client on console-fra.rpki-client.org