Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/rGaYI1r_VRGcetkWnmpkilatIlE.roa
File: rGaYI1r_VRGcetkWnmpkilatIlE.roa (raw, json)
Hash identifier: 7CbOSQxPE6/GTsC3wx89DKV5wpQmFpsr+BZXAfZ1av0=
Subject key identifier: AC:66:98:23:5A:FF:55:11:9C:7A:D9:16:9E:6A:64:8A:56:AD:22:51
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018FCF4356200A9EC4902DC3E758DAFD681A
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/rGaYI1r_VRGcetkWnmpkilatIlE.roa
Signing time: Fri 31 May 2024 15:27:27 +0000
ROA not before: Fri 31 May 2024 15:27:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151673
IP address blocks: 2a0f:7803:fc00::/40 maxlen: 48
2a0f:7803:fd00::/40 maxlen: 48
2a0f:7803:fd12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cf:43:56:20:0a:9e:c4:90:2d:c3:e7:58:da:fd:68:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: May 31 15:27:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac6698235aff55119c7ad9169e6a648a56ad2251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:76:43:d6:26:35:b9:bc:16:b3:ad:13:ae:de:
31:fa:0a:94:70:73:22:76:7d:cb:53:88:c0:5f:e0:
b3:5b:4e:04:d2:06:65:70:aa:ff:4f:65:c7:4c:99:
61:61:57:ec:b7:9c:25:ee:2d:cc:18:cd:2f:06:5a:
0d:aa:2d:d8:fe:9c:71:88:b7:0c:15:37:19:d7:77:
cd:e3:7f:83:44:7f:4e:32:66:64:36:d4:5e:d4:39:
a8:71:62:50:91:4d:91:a4:5d:86:fb:31:4e:d6:37:
dc:0e:0c:50:97:ee:cc:74:c7:a4:b0:41:fe:b0:85:
bf:5a:f9:e7:d6:0f:ea:d0:a1:57:25:0f:ad:f7:f9:
e7:58:dd:b4:a2:26:97:6f:d0:e7:a8:38:e9:00:4f:
0c:c5:1a:37:91:46:cd:a3:3e:ac:b0:c8:8f:4f:91:
88:5c:e5:4b:f3:36:29:e7:3f:3f:e7:f9:f3:5f:38:
74:70:2a:1c:68:8b:a6:32:8f:c4:d9:b2:43:8b:fb:
1e:09:7a:b9:8a:be:73:06:83:16:a9:a2:1e:5e:e2:
11:9e:44:a1:b6:7c:d4:00:e8:3d:71:d8:08:e5:97:
45:3c:2d:30:1e:fb:c1:5c:09:c2:9f:05:c7:9c:1b:
54:33:2d:c3:bd:e2:4b:5e:52:d8:c8:82:4c:88:98:
f0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:66:98:23:5A:FF:55:11:9C:7A:D9:16:9E:6A:64:8A:56:AD:22:51
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/rGaYI1r_VRGcetkWnmpkilatIlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fc00::/39
Signature Algorithm: sha256WithRSAEncryption
65:2b:5e:0d:75:13:66:74:fc:4a:a5:e8:53:ee:ef:28:b4:ea:
e9:26:cb:83:f6:61:39:a2:bd:fa:dd:e4:9a:84:80:52:b6:53:
76:f1:98:e5:11:6d:68:2c:b4:a1:59:c3:e9:f5:1a:1c:53:2a:
89:88:af:07:0c:bc:70:be:64:b5:84:c7:95:d8:ab:32:3d:ff:
e1:b6:59:21:aa:7c:0a:7b:37:4c:b6:94:79:a7:d5:7f:ff:41:
bc:e2:ee:1d:72:f5:e1:ab:53:ad:e7:b5:3e:5c:92:39:75:7a:
46:a5:12:f0:39:a6:55:bd:a9:ba:a6:e4:81:dd:34:cd:df:c7:
cd:c5:74:9e:70:fa:5f:7c:69:34:12:6b:6c:69:b9:39:2b:73:
16:b1:ce:92:c5:77:2d:7e:f2:32:76:7a:7c:94:97:4f:2f:d9:
66:6d:19:4d:3e:b5:58:19:49:40:7a:8b:86:2e:95:0b:00:0f:
46:0d:81:c4:40:d4:f7:c1:8c:ec:d0:ac:53:27:f7:ab:f5:d7:
65:77:8f:7d:66:b3:de:6a:07:f2:5c:1d:33:71:6b:06:03:2f:
af:13:25:10:3d:42:af:cd:a8:ea:23:9c:07:fa:c0:92:a2:2c:
de:99:c3:28:1e:25:b0:f3:bb:6b:8f:a6:37:3f:4b:5a:05:60:
3d:c5:f3:c5
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAY/PQ1YgCp7EkC3D51ja/WgaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw
ZDcwZTUwHhcNMjQwNTMxMTUyNzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzY2OTgyMzVhZmY1NTExOWM3YWQ5MTY5ZTZhNjQ4YTU2YWQyMjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3ZD1iY1ubwWs60Trt4x+gqUcHMi
dn3LU4jAX+CzW04E0gZlcKr/T2XHTJlhYVfst5wl7i3MGM0vBloNqi3Y/pxxiLcM
FTcZ13fN43+DRH9OMmZkNtRe1DmocWJQkU2RpF2G+zFO1jfcDgxQl+7MdMeksEH+
sIW/Wvnn1g/q0KFXJQ+t9/nnWN20oiaXb9DnqDjpAE8MxRo3kUbNoz6ssMiPT5GI
XOVL8zYp5z8/5/nzXzh0cCocaIumMo/E2bJDi/seCXq5ir5zBoMWqaIeXuIRnkSh
tnzUAOg9cdgI5ZdFPC0wHvvBXAnCnwXHnBtUMy3DveJLXlLYyIJMiJjwEwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFKxmmCNa/1URnHrZFp5qZIpWrSJRMB8GA1UdIwQY
MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt
ZjViNmE3MThmNGI1LzEvckdhWUkxcl9WUkdjZXRrV25tcGtpbGF0SWxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1
LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKg94A/ww
DQYJKoZIhvcNAQELBQADggEBAGUrXg11E2Z0/Eql6FPu7yi06ukmy4P2YTmivfrd
5JqEgFK2U3bxmOURbWgstKFZw+n1GhxTKomIrwcMvHC+ZLWEx5XYqzI9/+G2WSGq
fAp7N0y2lHmn1X//Qbzi7h1y9eGrU63ntT5ckjl1ekalEvA5plW9qbqm5IHdNM3f
x83FdJ5w+l98aTQSa2xpuTkrcxaxzpLFdy1+8jJ2enyUl08v2WZtGU0+tVgZSUB6
i4YulQsAD0YNgcRA1PfBjOzQrFMn96v112V3j31ms95qB/JcHTNxawYDL68TJRA9
Qq/NqOojnAf6wJKiLN6ZwygeJbDzu2uPpjc/S1oFYD3F88U=
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:25:39 2024 by rpki-client on console-fra.rpki-client.org