Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/jKPaexmHabMQSLl0cGG0C8eJ0Q4.roa
File: jKPaexmHabMQSLl0cGG0C8eJ0Q4.roa (raw, json)
Hash identifier: o+f1CbdYxRKZnsuNYCbieCKkd/ZH+4XomMWytifbOMU=
Subject key identifier: 8C:A3:DA:7B:19:87:69:B3:10:48:B9:74:70:61:B4:0B:C7:89:D1:0E
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018CC424605FDB660A4BC0C65DF48F63BE1D
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/jKPaexmHabMQSLl0cGG0C8eJ0Q4.roa
Signing time: Mon 01 Jan 2024 08:29:27 +0000
ROA not before: Mon 01 Jan 2024 08:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47741
IP address blocks: 2a0f:7803:ff00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:60:5f:db:66:0a:4b:c0:c6:5d:f4:8f:63:be:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 08:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ca3da7b198769b31048b9747061b40bc789d10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:09:b8:f0:8b:c0:a7:56:f1:1a:6c:b9:17:21:
a5:ef:67:e9:91:70:05:74:2f:6c:93:95:79:2f:43:
55:be:9a:b4:ff:4b:59:a3:d7:a9:b4:09:83:72:36:
ba:1e:a1:35:74:9d:a1:02:10:7f:9d:6b:f5:b0:26:
6c:f0:b1:93:f8:7f:67:ba:0b:6a:f0:f5:d8:41:02:
92:05:25:36:83:c4:18:06:90:04:71:16:b5:ba:80:
7b:3f:dd:ba:e4:85:3d:ce:c3:21:3d:84:d5:33:f1:
6d:ff:62:3b:5b:76:d9:53:9c:19:bb:d7:ce:f7:ea:
40:5b:60:4c:62:4c:14:23:31:9a:d3:64:ef:65:af:
16:38:b3:c7:97:2c:06:07:56:33:f1:53:f7:3a:cc:
16:96:b2:41:7f:a6:11:02:27:3d:7b:ca:56:2e:10:
e4:9b:73:96:0d:e9:de:ba:99:fe:eb:59:95:d7:e5:
0b:1c:e9:9b:11:43:33:18:43:e8:fc:db:28:b3:44:
ea:f0:11:bc:b1:08:01:2c:65:29:cf:2c:6c:46:7f:
e4:49:4a:6c:0e:4a:d6:ae:c4:46:e4:51:ea:b4:ad:
8e:cb:23:6a:51:f5:14:98:f5:ac:fa:ff:95:fb:77:
51:28:4e:c4:e2:b9:06:34:81:bc:1a:eb:6a:8b:51:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A3:DA:7B:19:87:69:B3:10:48:B9:74:70:61:B4:0B:C7:89:D1:0E
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/jKPaexmHabMQSLl0cGG0C8eJ0Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:ff00::/44
Signature Algorithm: sha256WithRSAEncryption
46:b4:a0:8e:e2:0d:12:b9:7f:40:ee:b4:42:30:29:7b:9c:b5:
1d:b1:2c:af:72:9d:bd:01:fa:a6:18:31:82:34:6f:27:99:56:
cf:c5:85:ec:0d:cb:6c:48:9c:c2:42:5b:8f:6c:50:56:25:c1:
a0:fb:76:31:99:ac:e3:95:7f:e0:41:bd:a8:36:6f:28:56:56:
f0:9c:ff:9c:c8:1a:27:14:cf:2c:0d:2f:3f:e6:2a:4e:02:04:
9f:17:27:3c:f2:9e:e9:ff:28:14:e8:7a:c8:ad:b2:25:f7:57:
f7:22:ca:0c:dd:24:07:d4:b2:78:a6:3c:89:d8:db:8b:ee:02:
08:7b:93:b4:ef:3e:23:db:01:71:2b:10:a7:4f:5b:c7:a8:ba:
d7:54:0a:ef:9a:91:21:7c:ae:cf:90:ad:f3:de:58:17:5b:cb:
a6:b5:53:4d:19:c7:f0:66:2b:cc:d0:a6:0e:80:a5:ae:9e:69:
c1:a7:2b:28:5a:76:ad:e1:ce:b8:e9:da:dd:7d:35:de:b7:45:
0c:fa:2c:da:99:a6:6f:f9:57:d8:80:1e:3a:ce:10:6f:44:a0:
33:0f:e3:ff:f1:1b:e5:42:6d:21:df:d2:f9:a1:f2:8a:3c:ef:
97:56:48:d7:80:95:15:8a:f4:19:d7:de:6e:1b:ee:b0:32:9c:
da:5d:09:1f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzEJGBf22YKS8DGXfSPY74dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw
ZDcwZTUwHhcNMjQwMTAxMDgyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2EzZGE3YjE5ODc2OWIzMTA0OGI5NzQ3MDYxYjQwYmM3ODlkMTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQm48IvAp1bxGmy5FyGl72fpkXAF
dC9sk5V5L0NVvpq0/0tZo9eptAmDcja6HqE1dJ2hAhB/nWv1sCZs8LGT+H9nugtq
8PXYQQKSBSU2g8QYBpAEcRa1uoB7P9265IU9zsMhPYTVM/Ft/2I7W3bZU5wZu9fO
9+pAW2BMYkwUIzGa02TvZa8WOLPHlywGB1Yz8VP3OswWlrJBf6YRAic9e8pWLhDk
m3OWDeneupn+61mV1+ULHOmbEUMzGEPo/Nsos0Tq8BG8sQgBLGUpzyxsRn/kSUps
DkrWrsRG5FHqtK2OyyNqUfUUmPWs+v+V+3dRKE7E4rkGNIG8Gutqi1FwiQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIyj2nsZh2mzEEi5dHBhtAvHidEOMB8GA1UdIwQY
MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt
ZjViNmE3MThmNGI1LzEvaktQYWV4bUhhYk1RU0xsMGNHRzBDOGVKMFE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1
LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/8A
MA0GCSqGSIb3DQEBCwUAA4IBAQBGtKCO4g0SuX9A7rRCMCl7nLUdsSyvcp29Afqm
GDGCNG8nmVbPxYXsDctsSJzCQluPbFBWJcGg+3YxmazjlX/gQb2oNm8oVlbwnP+c
yBonFM8sDS8/5ipOAgSfFyc88p7p/ygU6HrIrbIl91f3IsoM3SQH1LJ4pjyJ2NuL
7gIIe5O07z4j2wFxKxCnT1vHqLrXVArvmpEhfK7PkK3z3lgXW8umtVNNGcfwZivM
0KYOgKWunmnBpysoWnat4c646drdfTXet0UM+izamaZv+VfYgB46zhBvRKAzD+P/
8RvlQm0h39L5ofKKPO+XVkjXgJUVivQZ195uG+6wMpzaXQkf
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:36:40 2024 by rpki-client on console-fra.rpki-client.org