Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/CsowcXjC6b8z2q_zRp33isXONtg.roa
File: CsowcXjC6b8z2q_zRp33isXONtg.roa (raw, json)
Hash identifier: uUnmuFufDholW6Q00Dwo6iZFPKywCj209pKODNr0tPk=
Subject key identifier: 0A:CA:30:71:78:C2:E9:BF:33:DA:AF:F3:46:9D:F7:8A:C5:CE:36:D8
Certificate issuer: /CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Certificate serial: 0192BE3EC2A4E1BBB9EE1A3CEC8AE1F9675C
Authority key identifier: 60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/CsowcXjC6b8z2q_zRp33isXONtg.roa
Signing time: Thu 24 Oct 2024 11:17:17 +0000
ROA not before: Thu 24 Oct 2024 11:17:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208447
IP address blocks: 2001:678:9e8::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:be:3e:c2:a4:e1:bb:b9:ee:1a:3c:ec:8a:e1:f9:67:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Validity
Not Before: Oct 24 11:17:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0aca307178c2e9bf33daaff3469df78ac5ce36d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:1f:b7:40:05:8a:f0:79:b0:e4:5f:e0:17:
bd:54:f7:50:3e:24:e3:85:b1:d4:9f:5c:65:97:5a:
eb:24:d8:0e:59:d0:22:82:e5:89:b7:6d:5e:04:55:
dc:00:df:df:df:d3:ad:69:4d:0a:63:c2:99:61:35:
25:11:55:76:52:c0:56:a0:13:0e:24:bd:73:f9:d7:
aa:ef:4c:51:07:b1:0a:32:fb:5d:c4:60:67:45:09:
fb:e5:73:71:8b:79:5b:20:70:11:45:42:5f:04:65:
50:cf:78:68:aa:09:8b:76:9c:09:d5:56:55:31:dc:
d7:8b:55:ac:d8:9e:13:2a:16:41:cd:88:87:4f:a5:
d3:fa:1a:46:d5:cd:7b:fb:d1:d2:cd:fe:f0:b9:19:
9c:b2:5f:14:10:42:c5:65:21:16:44:fb:b9:f2:44:
41:7b:3e:dc:47:b4:74:71:46:7f:ac:73:c6:82:9f:
9f:bf:2d:0c:f4:2d:15:63:74:2a:53:77:f8:3d:4e:
4b:79:a3:0d:a2:70:07:5b:48:fb:56:e8:84:f3:08:
b0:30:be:82:8d:dc:78:12:27:aa:29:f4:9f:c1:62:
48:79:48:2a:74:59:39:cd:29:23:bf:b0:2b:a0:61:
a7:86:ce:f6:a4:85:ec:98:51:7f:84:44:a5:7c:d9:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CA:30:71:78:C2:E9:BF:33:DA:AF:F3:46:9D:F7:8A:C5:CE:36:D8
X509v3 Authority Key Identifier:
keyid:60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/CsowcXjC6b8z2q_zRp33isXONtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:9e8::/48
Signature Algorithm: sha256WithRSAEncryption
8d:cc:97:6d:d9:0a:94:a5:fa:ac:95:e4:5f:91:92:de:0a:79:
ee:e9:58:83:d8:4c:b2:5b:30:ce:5a:a2:68:3e:80:3e:66:03:
d0:05:8c:ca:99:d0:43:68:90:0f:d6:29:59:d0:f5:32:80:7a:
a6:9c:1f:9b:af:97:58:0c:8f:32:eb:28:b2:c9:00:d5:bf:c7:
5f:cf:c7:8a:63:7a:37:85:c6:ff:40:7d:07:de:fc:00:92:e4:
c7:36:62:eb:a0:27:56:27:66:0c:f9:cd:f4:2c:96:78:ef:c9:
1c:47:dc:74:22:22:75:87:e8:13:1b:23:7a:a0:63:f9:8d:90:
d5:99:5e:93:ff:50:b0:76:67:f9:96:34:d1:5b:e7:24:a9:19:
7f:98:5d:b7:a3:aa:21:9b:cb:46:b5:f4:4e:8d:ce:5c:6c:f4:
4f:56:4a:cf:2e:46:43:7b:4c:5c:0b:18:bf:7e:77:02:1d:75:
19:40:98:0a:38:0e:0d:10:6d:eb:80:15:61:c5:be:e7:93:8c:
15:72:f7:01:2d:90:32:3d:70:f5:81:f9:d6:31:04:9f:25:c6:
39:19:3e:cc:1f:b4:68:a6:e1:76:3f:4c:ce:ca:60:c0:99:26:
cb:38:cd:c8:62:32:00:2b:b1:ce:ea:6b:cc:85:a0:d0:4a:cf:
a9:77:ba:5e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZK+PsKk4bu57ho87Irh+WdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMjFhNGRhYTdkY2Y0YTRjYjA4YWM0NzQ3Mzc1ZjY5OGFh
ZTg2NDMwHhcNMjQxMDI0MTExNzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWNhMzA3MTc4YzJlOWJmMzNkYWFmZjM0NjlkZjc4YWM1Y2UzNmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyugft0AFivB5sORf4Be9VPdQPiTj
hbHUn1xll1rrJNgOWdAiguWJt21eBFXcAN/f39OtaU0KY8KZYTUlEVV2UsBWoBMO
JL1z+deq70xRB7EKMvtdxGBnRQn75XNxi3lbIHARRUJfBGVQz3hoqgmLdpwJ1VZV
MdzXi1Ws2J4TKhZBzYiHT6XT+hpG1c17+9HSzf7wuRmcsl8UEELFZSEWRPu58kRB
ez7cR7R0cUZ/rHPGgp+fvy0M9C0VY3QqU3f4PU5LeaMNonAHW0j7VuiE8wiwML6C
jdx4EieqKfSfwWJIeUgqdFk5zSkjv7AroGGnhs72pIXsmFF/hESlfNnXEwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFArKMHF4wum/M9qv80ad94rFzjbYMB8GA1UdIwQY
MBaAFGAhpNqn3PSkywisR0c3X2mKroZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUNHazJxZmM5S1RMQ0t4SFJ6ZGZhWXF1aGtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84MGY0MmMtZDI0OS00NDYxLTlmZDct
NGQyYTYzMzRkZTc3LzEvQ3Nvd2NYakM2Yjh6MnFfelJwMzNpc1hPTnRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS84MGY0MmMtZDI0OS00NDYxLTlmZDctNGQyYTYzMzRkZTc3
LzEvWUNHazJxZmM5S1RMQ0t4SFJ6ZGZhWXF1aGtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAno
MA0GCSqGSIb3DQEBCwUAA4IBAQCNzJdt2QqUpfqsleRfkZLeCnnu6ViD2EyyWzDO
WqJoPoA+ZgPQBYzKmdBDaJAP1ilZ0PUygHqmnB+br5dYDI8y6yiyyQDVv8dfz8eK
Y3o3hcb/QH0H3vwAkuTHNmLroCdWJ2YM+c30LJZ478kcR9x0IiJ1h+gTGyN6oGP5
jZDVmV6T/1Cwdmf5ljTRW+ckqRl/mF23o6ohm8tGtfROjc5cbPRPVkrPLkZDe0xc
Cxi/fncCHXUZQJgKOA4NEG3rgBVhxb7nk4wVcvcBLZAyPXD1gfnWMQSfJcY5GT7M
H7RopuF2P0zOymDAmSbLOM3IYjIAK7HO6mvMhaDQSs+pd7pe
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:47:11 2024 by rpki-client on console-ams.rpki-client.org