Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/34Iqso-jGQBDPGpkboW5oawM0pA.roa
File: 34Iqso-jGQBDPGpkboW5oawM0pA.roa (raw, json)
Hash identifier: uyhDNajpaWKvgf+iSimIR9NI6oVmZvrDauSI0pT9Lqw=
Subject key identifier: DF:82:2A:B2:8F:A3:19:00:43:3C:6A:64:6E:85:B9:A1:AC:0C:D2:90
Certificate issuer: /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Certificate serial: 01916F2E533E17D5252D78E6D74C78FF547D
Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/34Iqso-jGQBDPGpkboW5oawM0pA.roa
Signing time: Tue 20 Aug 2024 09:46:32 +0000
ROA not before: Tue 20 Aug 2024 09:46:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210400
IP address blocks: 2a0d:d742:40::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:2e:53:3e:17:d5:25:2d:78:e6:d7:4c:78:ff:54:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Validity
Not Before: Aug 20 09:46:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df822ab28fa31900433c6a646e85b9a1ac0cd290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:11:29:11:4a:0a:88:b9:f6:85:75:de:a4:8c:
38:38:95:f6:e8:ff:6e:71:17:0d:5f:c4:99:2f:33:
24:7b:cb:95:c4:ee:c1:81:3f:d8:2b:de:ec:74:75:
a7:a8:7c:98:ee:f7:c6:97:9d:89:8a:59:ef:11:c7:
16:51:64:8e:fe:f6:1d:ce:86:9f:04:49:86:bd:8c:
bd:c5:e6:a5:e5:6b:a1:9a:11:9b:90:ca:cb:13:b6:
65:7b:e9:23:d7:cf:8c:ee:5f:5c:aa:70:9b:0a:f7:
26:31:76:9a:4c:41:bd:57:81:5c:11:71:bb:4f:97:
64:d1:e2:af:d9:01:5b:a5:fd:c1:72:a4:d5:f0:c5:
04:03:58:58:e5:87:04:64:45:db:ce:bf:8b:b1:d7:
7d:d7:ad:21:5f:61:80:14:53:9e:2f:0e:15:f3:c9:
34:fc:e8:17:2e:df:db:c7:a5:95:4b:6f:80:33:6c:
ce:93:c0:c1:7c:83:78:1d:02:e0:3c:cd:0f:cb:f2:
44:41:11:4a:c4:93:cb:44:c1:c9:fd:9b:65:5f:b7:
ec:63:0a:4c:cb:3c:36:d7:13:18:1a:7e:03:37:fd:
d3:1c:43:3c:56:35:b8:7c:02:24:4b:13:df:05:ba:
eb:c8:91:8b:e1:3b:79:94:ac:97:6f:fc:a1:a4:36:
33:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:82:2A:B2:8F:A3:19:00:43:3C:6A:64:6E:85:B9:A1:AC:0C:D2:90
X509v3 Authority Key Identifier:
keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/34Iqso-jGQBDPGpkboW5oawM0pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d742:40::/44
Signature Algorithm: sha256WithRSAEncryption
53:24:ed:53:d2:18:58:56:70:28:f3:81:0a:df:5d:6e:ff:b2:
71:6d:e1:3a:f5:2b:f3:b7:05:cb:a5:29:a4:77:ec:6c:1b:2c:
33:c4:06:8b:fa:d4:d3:48:5d:e2:56:6d:bd:38:de:c1:83:1b:
7b:e2:ea:7d:9d:f8:1c:2d:e6:97:75:3d:28:e3:75:81:bf:55:
9d:4c:6b:fe:7c:67:a5:37:cd:6b:f4:81:53:3d:b9:24:fd:eb:
26:c1:f5:9d:bc:b3:25:27:a4:0b:a7:cb:d8:a6:01:8f:1c:47:
46:ca:07:99:43:5f:0a:8d:13:c2:5a:7f:71:c0:db:57:c6:a3:
01:e4:8b:d2:b0:bb:f2:dc:0a:ac:ae:c2:ae:67:d1:d1:e5:a0:
47:00:e8:d8:ac:17:90:a2:03:bd:0e:9b:fe:d8:c2:69:6f:7d:
5e:ea:ab:c1:9b:dd:ca:03:3b:69:59:f5:06:68:d0:64:b7:8a:
a6:4d:21:9c:17:64:4d:62:ec:ea:3c:9c:e2:53:11:8b:10:d1:
dc:c7:47:8a:7b:4d:a2:95:75:91:37:1d:d8:8b:5c:a2:ac:3e:
2b:78:a1:6d:39:6a:df:b6:29:15:e7:c3:3e:ed:cf:f9:a1:07:
b2:c9:b1:ac:3a:a8:25:a0:a3:4b:d7:2c:77:03:83:1d:49:4f:
08:f4:96:19
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZFvLlM+F9UlLXjm10x4/1R9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTZmZTE0Yjg3NTVkOWZmNzQ2NmZhOTdjNGE1NWY3MzUx
ODMyNDkwHhcNMjQwODIwMDk0NjMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjgyMmFiMjhmYTMxOTAwNDMzYzZhNjQ2ZTg1YjlhMWFjMGNkMjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhEpEUoKiLn2hXXepIw4OJX26P9u
cRcNX8SZLzMke8uVxO7BgT/YK97sdHWnqHyY7vfGl52JilnvEccWUWSO/vYdzoaf
BEmGvYy9xeal5WuhmhGbkMrLE7Zle+kj18+M7l9cqnCbCvcmMXaaTEG9V4FcEXG7
T5dk0eKv2QFbpf3BcqTV8MUEA1hY5YcEZEXbzr+Lsdd9160hX2GAFFOeLw4V88k0
/OgXLt/bx6WVS2+AM2zOk8DBfIN4HQLgPM0Py/JEQRFKxJPLRMHJ/ZtlX7fsYwpM
yzw21xMYGn4DN/3THEM8VjW4fAIkSxPfBbrryJGL4Tt5lKyXb/yhpDYzGQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFN+CKrKPoxkAQzxqZG6FuaGsDNKQMB8GA1UdIwQY
MBaAFLvm/hS4dV2f90ZvqXxKVfc1GDJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NWQ0ZmQtOTBmNS00YmFhLWEzNWMt
ODdhNjMzM2Q2ZTY0LzEvMzRJcXNvLWpHUUJEUEdwa2JvVzVvYXdNMHBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83NWQ0ZmQtOTBmNS00YmFhLWEzNWMtODdhNjMzM2Q2ZTY0
LzEvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg3XQgBA
MA0GCSqGSIb3DQEBCwUAA4IBAQBTJO1T0hhYVnAo84EK311u/7JxbeE69SvztwXL
pSmkd+xsGywzxAaL+tTTSF3iVm29ON7Bgxt74up9nfgcLeaXdT0o43WBv1WdTGv+
fGelN81r9IFTPbkk/esmwfWdvLMlJ6QLp8vYpgGPHEdGygeZQ18KjRPCWn9xwNtX
xqMB5IvSsLvy3AqsrsKuZ9HR5aBHAOjYrBeQogO9Dpv+2MJpb31e6qvBm93KAztp
WfUGaNBkt4qmTSGcF2RNYuzqPJziUxGLENHcx0eKe02ilXWRNx3Yi1yirD4reKFt
OWrftikV58M+7c/5oQeyybGsOqgloKNL1yx3A4MdSU8I9JYZ
-----END CERTIFICATE-----
Generated at Tue Nov 26 03:17:02 2024 by rpki-client on console-fra.rpki-client.org