Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/ANpQ1Omro56EO2uKdMmEfREStF4.roa
File: ANpQ1Omro56EO2uKdMmEfREStF4.roa (raw, json)
Hash identifier: bHeVP0U3ciLYtu9q1BsNC/Ih45s0waOT7TV3lEXyjEM=
Subject key identifier: 00:DA:50:D4:E9:AB:A3:9E:84:3B:6B:8A:74:C9:84:7D:11:12:B4:5E
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 018CC5DCF002C42E585B70EF943A7574F137
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/ANpQ1Omro56EO2uKdMmEfREStF4.roa
Signing time: Mon 01 Jan 2024 16:30:40 +0000
ROA not before: Mon 01 Jan 2024 16:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57602
IP address blocks: 2001:67c:240c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:f0:02:c4:2e:58:5b:70:ef:94:3a:75:74:f1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Jan 1 16:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00da50d4e9aba39e843b6b8a74c9847d1112b45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:d1:47:16:96:c1:75:95:a1:4f:fc:dc:38:
e7:3a:ec:1e:d8:65:73:f8:2d:de:8c:bd:62:43:be:
f2:c5:31:f9:0a:19:b7:47:77:ba:41:c5:4f:62:85:
79:63:3f:0f:cf:91:a6:86:50:15:ed:d7:18:3f:83:
3d:8f:83:6b:09:01:65:79:73:8c:2e:a0:57:2c:49:
84:73:36:7e:f8:25:cb:6f:72:65:d7:90:cf:04:a9:
2f:2c:78:a8:ab:7d:28:4f:5d:65:0a:63:03:6c:c8:
31:76:22:60:5b:54:e1:f8:e6:6a:50:5c:58:fb:72:
dd:27:cf:9d:ee:82:ce:a8:44:a5:8a:5c:2d:cb:fe:
e2:b6:ef:ad:e0:89:59:36:b6:62:db:32:0b:de:ad:
61:91:db:09:3a:62:0d:92:43:11:c6:55:75:53:5c:
7e:7e:c4:78:a6:e7:9a:ee:dc:83:ee:02:03:fd:6b:
f0:d0:ca:34:13:dd:e3:45:e6:3f:a6:33:1a:c4:19:
13:84:d5:f2:04:6b:55:4a:6b:2e:3c:b3:84:aa:99:
f7:c8:2b:33:ee:ce:1f:3e:f6:70:03:fd:11:63:f2:
7d:b1:a0:8d:bb:20:29:fc:74:0f:71:cd:67:ff:cd:
0e:8f:1c:34:88:6e:7c:0b:11:77:27:3e:ec:83:cd:
dc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DA:50:D4:E9:AB:A3:9E:84:3B:6B:8A:74:C9:84:7D:11:12:B4:5E
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/ANpQ1Omro56EO2uKdMmEfREStF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:240c::/48
Signature Algorithm: sha256WithRSAEncryption
72:27:30:27:cb:a0:c2:7f:ca:24:6f:67:ae:96:ff:45:da:69:
15:4d:e5:54:3c:dd:a6:b7:e6:1f:88:88:0f:9b:3e:40:6b:b5:
50:3d:ed:ec:7e:f1:66:98:b5:92:a0:2c:fd:c4:e8:e6:7c:6e:
11:65:fe:b2:14:45:40:af:b2:9d:19:0f:bb:13:77:bc:e2:0b:
2d:ea:10:8d:30:f3:6d:88:13:bd:a1:10:53:9f:96:38:2f:e8:
9e:da:6f:34:62:c9:e3:02:0c:c6:4f:15:65:e9:c4:1e:67:c7:
18:70:44:04:b4:7b:51:c3:ae:27:a5:cf:07:7f:9a:97:aa:28:
1f:1c:b7:fa:6e:b2:7f:2d:3f:9b:9d:27:25:42:00:d3:7d:6d:
13:55:b9:ed:f6:64:02:36:f1:91:53:51:d9:cf:ad:8c:fe:38:
49:d0:54:b1:3c:b1:74:a0:3d:da:f9:09:87:4c:46:ea:ad:db:
91:58:43:19:0a:49:79:a4:e3:76:44:72:f1:04:b1:ff:98:0c:
ec:5b:6c:49:74:32:3c:78:6b:49:85:0a:2f:f9:b5:a6:b7:b7:
ae:7f:2f:74:ad:00:fd:09:a6:2f:5b:bc:28:04:db:0a:fc:ad:
ae:e8:9c:86:4c:6f:c9:ee:ff:79:e8:4c:af:ca:11:6a:32:2d:
94:42:02:58
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzF3PACxC5YW3DvlDp1dPE3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NWU3OTE0MTEzMGNlZWM4NTcyMTVmOWJiZGQ3YTU1YmFm
NGU3N2YwHhcNMjQwMTAxMTYzMDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGRhNTBkNGU5YWJhMzllODQzYjZiOGE3NGM5ODQ3ZDExMTJiNDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzbRRxaWwXWVoU/83DjnOuwe2GVz
+C3ejL1iQ77yxTH5Chm3R3e6QcVPYoV5Yz8Pz5GmhlAV7dcYP4M9j4NrCQFleXOM
LqBXLEmEczZ++CXLb3Jl15DPBKkvLHioq30oT11lCmMDbMgxdiJgW1Th+OZqUFxY
+3LdJ8+d7oLOqESlilwty/7itu+t4IlZNrZi2zIL3q1hkdsJOmINkkMRxlV1U1x+
fsR4puea7tyD7gID/Wvw0Mo0E93jReY/pjMaxBkThNXyBGtVSmsuPLOEqpn3yCsz
7s4fPvZwA/0RY/J9saCNuyAp/HQPcc1n/80Ojxw0iG58CxF3Jz7sg83cAwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFADaUNTpq6OehDtrinTJhH0RErReMB8GA1UdIwQY
MBaAFPReeRQRMM7shXIV+bvdelW69Od/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2Ut
MzNiZDg0MzQ5NWY4LzEvQU5wUTFPbXJvNTZFTzJ1S2RNbUVmUkVTdEY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2UtMzNiZDg0MzQ5NWY4
LzEvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCQM
MA0GCSqGSIb3DQEBCwUAA4IBAQByJzAny6DCf8okb2eulv9F2mkVTeVUPN2mt+Yf
iIgPmz5Aa7VQPe3sfvFmmLWSoCz9xOjmfG4RZf6yFEVAr7KdGQ+7E3e84gst6hCN
MPNtiBO9oRBTn5Y4L+ie2m80YsnjAgzGTxVl6cQeZ8cYcEQEtHtRw64npc8Hf5qX
qigfHLf6brJ/LT+bnSclQgDTfW0TVbnt9mQCNvGRU1HZz62M/jhJ0FSxPLF0oD3a
+QmHTEbqrduRWEMZCkl5pON2RHLxBLH/mAzsW2xJdDI8eGtJhQov+bWmt7eufy90
rQD9CaYvW7woBNsK/K2u6JyGTG/J7v956EyvyhFqMi2UQgJY
-----END CERTIFICATE-----
Generated at Thu May 9 11:14:59 2024 by rpki-client on console-ams.rpki-client.org