Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/IAxenfahMAyj5xjgK8KeHbQgwE4.roa
File: IAxenfahMAyj5xjgK8KeHbQgwE4.roa (raw, json)
Hash identifier: BIyfMKlAliVG2eyHSOPgAATQLZJ0WCxb/Bm5bLBwKqI=
Subject key identifier: 20:0C:5E:9D:F6:A1:30:0C:A3:E7:18:E0:2B:C2:9E:1D:B4:20:C0:4E
Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial: 018CC500D791B393E3BFE484C970097BBF63
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/IAxenfahMAyj5xjgK8KeHbQgwE4.roa
Signing time: Mon 01 Jan 2024 12:30:15 +0000
ROA not before: Mon 01 Jan 2024 12:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26911
IP address blocks: 2a0e:c1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d7:91:b3:93:e3:bf:e4:84:c9:70:09:7b:bf:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
Validity
Not Before: Jan 1 12:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=200c5e9df6a1300ca3e718e02bc29e1db420c04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:e4:3a:21:e5:d9:42:3d:4f:32:9d:5c:6d:
b8:a5:cb:30:de:dc:ec:5e:62:22:2b:ee:b1:bd:e0:
a3:4a:d3:31:01:d8:66:63:35:b2:fd:46:b1:c4:2a:
b8:49:27:21:57:16:55:e1:9e:87:0a:8e:23:ca:5e:
4a:8b:aa:aa:03:65:65:83:13:6c:07:2c:de:f1:a9:
10:c5:a4:ad:5b:56:2b:23:34:3e:1b:38:7b:78:3a:
96:90:cf:15:93:83:4a:c7:8d:9d:d5:aa:fd:93:ee:
53:5b:9d:71:97:16:4c:8c:b8:c3:69:41:83:d6:97:
2c:b5:da:0e:88:6b:8d:c8:3a:b3:34:68:04:0c:b7:
c0:c7:d0:ca:ef:41:b8:55:89:01:b4:97:ed:de:ab:
9b:84:d7:42:de:e4:13:9c:d5:12:72:13:2d:9f:36:
eb:8f:cf:17:dd:78:41:b3:6f:35:0f:0a:02:8f:25:
96:a8:f3:af:f9:3f:b0:fc:18:a6:7b:e2:0c:60:84:
9f:00:f5:5a:d7:4d:88:e2:00:c0:f2:4b:48:d3:3f:
bc:66:df:db:13:f5:7c:2f:8d:dd:e2:df:f9:19:57:
d6:5c:19:1e:69:9a:fe:f1:80:9a:69:ec:f7:e5:27:
aa:e0:b2:ac:74:8c:aa:6f:f5:3b:7c:8f:c1:1d:35:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0C:5E:9D:F6:A1:30:0C:A3:E7:18:E0:2B:C2:9E:1D:B4:20:C0:4E
X509v3 Authority Key Identifier:
keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/IAxenfahMAyj5xjgK8KeHbQgwE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:c1c0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:5e:df:2f:49:04:64:a9:2a:e5:ae:79:8b:ea:a8:d1:db:92:
3e:77:d5:a9:3a:9b:6b:2c:b8:df:a0:8a:99:36:ef:af:ae:da:
9b:7d:65:7b:d6:13:ad:c5:4e:eb:ca:a6:c8:60:2e:5d:2b:b7:
94:7c:42:17:6c:86:ab:94:74:6c:18:7d:62:1e:d2:21:c9:17:
66:35:32:3c:2b:f6:63:be:9f:60:ed:33:c2:2d:a6:ee:2d:00:
07:c0:0f:0b:95:11:09:33:1c:ba:0d:82:da:b3:47:5b:65:4f:
8f:0e:26:a1:ea:a0:e1:a1:ae:ec:0f:f4:1e:13:b0:b0:00:24:
c1:fd:4a:a0:bd:42:fb:78:60:f0:5c:f8:e9:8d:19:4a:23:1f:
7e:57:5b:57:52:05:b5:c3:9f:32:0a:df:f3:c8:3d:d9:9d:7f:
69:0b:0e:3c:18:97:44:a7:20:fd:f9:1a:5d:69:9e:f9:9e:df:
bf:e3:b5:0d:a1:17:20:38:f7:0d:9f:b4:d1:c8:0c:e5:a2:02:
78:c0:6d:83:65:fc:12:b0:d7:04:57:2e:4a:bf:4d:b3:c4:ab:
7d:17:ab:da:1e:fc:64:e4:ad:28:54:3c:b8:a3:6d:ea:20:08:
61:98:be:61:d4:8d:68:01:61:0e:1f:73:51:25:8b:4c:e7:8e:
8c:83:d3:f9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzFANeRs5Pjv+SEyXAJe79jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzkwNTVhNjk5MGI4MjQwOGNmMWFiZjI5MzEzNzgwZTI0
OWE0YzkwHhcNMjQwMTAxMTIzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDBjNWU5ZGY2YTEzMDBjYTNlNzE4ZTAyYmMyOWUxZGI0MjBjMDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi7kOiHl2UI9TzKdXG24pcsw3tzs
XmIiK+6xveCjStMxAdhmYzWy/UaxxCq4SSchVxZV4Z6HCo4jyl5Ki6qqA2VlgxNs
Byze8akQxaStW1YrIzQ+Gzh7eDqWkM8Vk4NKx42d1ar9k+5TW51xlxZMjLjDaUGD
1pcstdoOiGuNyDqzNGgEDLfAx9DK70G4VYkBtJft3qubhNdC3uQTnNUSchMtnzbr
j88X3XhBs281DwoCjyWWqPOv+T+w/Bime+IMYISfAPVa102I4gDA8ktI0z+8Zt/b
E/V8L43d4t/5GVfWXBkeaZr+8YCaaez35Seq4LKsdIyqb/U7fI/BHTWadQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCAMXp32oTAMo+cY4CvCnh20IMBOMB8GA1UdIwQY
MBaAFEw5BVppkLgkCM8avykxN4DiSaTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kZjZlMjUtOTIzYy00ODM4LTg2NGYt
ZDRiMzdlNDRhYjdjLzEvSUF4ZW5mYWhNQXlqNXhqZ0s4S2VIYlFnd0U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kZjZlMjUtOTIzYy00ODM4LTg2NGYtZDRiMzdlNDRhYjdj
LzEvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg7BwDAN
BgkqhkiG9w0BAQsFAAOCAQEAHV7fL0kEZKkq5a55i+qo0duSPnfVqTqbayy436CK
mTbvr67am31le9YTrcVO68qmyGAuXSu3lHxCF2yGq5R0bBh9Yh7SIckXZjUyPCv2
Y76fYO0zwi2m7i0AB8APC5URCTMcug2C2rNHW2VPjw4moeqg4aGu7A/0HhOwsAAk
wf1KoL1C+3hg8Fz46Y0ZSiMffldbV1IFtcOfMgrf88g92Z1/aQsOPBiXRKcg/fka
XWme+Z7fv+O1DaEXIDj3DZ+00cgM5aICeMBtg2X8ErDXBFcuSr9Ns8SrfRer2h78
ZOStKFQ8uKNt6iAIYZi+YdSNaAFhDh9zUSWLTOeOjIPT+Q==
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:56:56 2024 by rpki-client on console-ams.rpki-client.org