Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/sY4ycvj-54xq8txSNgqA7C8n0KU.roa
File: sY4ycvj-54xq8txSNgqA7C8n0KU.roa (raw, json)
Hash identifier: bpR0PF4wOssKKTEVwub3A5orTtXl8Wy6E9kqfCokKOg=
Subject key identifier: B1:8E:32:72:F8:FE:E7:8C:6A:F2:DC:52:36:0A:80:EC:2F:27:D0:A5
Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial: 018CCA2A46D28E2EF20B8182F98442C79889
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/sY4ycvj-54xq8txSNgqA7C8n0KU.roa
Signing time: Tue 02 Jan 2024 12:33:37 +0000
ROA not before: Tue 02 Jan 2024 12:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30860
IP address blocks: 2a00:17a0:1005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:46:d2:8e:2e:f2:0b:81:82:f9:84:42:c7:98:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Validity
Not Before: Jan 2 12:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b18e3272f8fee78c6af2dc52360a80ec2f27d0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:40:df:2a:74:e6:88:28:3f:fd:0c:44:ab:
46:63:e8:ef:d4:01:80:04:f8:ae:01:2e:77:f2:fb:
a9:38:70:4d:26:9f:c3:d5:13:d4:7d:2e:cb:98:1f:
94:49:20:28:05:0a:94:25:71:b3:75:76:85:7e:91:
a1:c7:90:30:8c:54:ba:a4:a9:11:b7:a6:96:2f:76:
94:b7:e4:e1:cf:8e:ee:e9:f8:69:3f:03:0c:02:5d:
4d:63:8f:c9:e4:0a:f9:6b:f8:a8:16:72:f3:ea:ed:
07:b3:0b:c2:98:81:15:d7:cd:87:73:80:76:85:66:
6f:cd:e3:32:70:05:ee:93:0b:13:96:21:71:9a:9e:
b3:ce:9c:17:be:b5:47:1f:ba:51:98:27:44:34:90:
88:11:5b:e4:9f:24:f6:ee:8d:7d:c0:b9:79:58:a7:
26:34:b1:23:d8:e7:69:5e:20:3a:db:8e:46:13:6d:
11:4a:5d:8c:da:2e:89:cd:49:97:f1:23:e1:e6:e0:
ae:cb:d2:72:15:e2:f0:fb:5e:0e:c0:ab:17:8c:37:
2e:a0:bc:8b:7d:9d:81:c8:05:5f:d9:61:99:65:f7:
23:f7:8b:8c:d0:20:33:5a:fc:06:e4:03:97:35:88:
b9:ed:59:fe:0d:62:46:54:8a:70:66:1b:d9:b6:af:
40:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8E:32:72:F8:FE:E7:8C:6A:F2:DC:52:36:0A:80:EC:2F:27:D0:A5
X509v3 Authority Key Identifier:
keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/sY4ycvj-54xq8txSNgqA7C8n0KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:17a0:1005::/48
Signature Algorithm: sha256WithRSAEncryption
4f:4c:66:61:51:76:0d:ca:66:20:b4:d0:fe:83:ea:14:26:87:
31:65:d3:b2:f2:5a:55:84:0a:a0:0d:84:2e:be:7a:80:61:7b:
c7:5f:33:0f:59:2f:3d:8a:ce:db:2c:a2:b9:c3:52:be:f9:d1:
7c:57:4d:b0:e5:8d:8f:b9:d1:59:7e:92:62:53:51:41:33:26:
85:03:6a:83:b2:b4:0e:fc:06:77:32:54:cf:d8:28:86:5f:0e:
99:92:72:9f:ed:0c:f8:fd:40:c1:da:37:be:24:7d:13:7f:59:
d2:3a:10:ec:8c:4f:42:c7:20:a2:16:5d:0e:2f:3a:ce:5b:6d:
b3:df:ff:d3:6c:20:f8:13:f9:ee:2e:ae:df:1a:2a:34:c7:f5:
7d:d1:e3:99:8d:93:bd:5a:c6:5f:66:65:89:27:79:bf:fa:d5:
00:f4:be:d3:3d:ca:9d:cc:f9:01:6b:80:fc:5c:0f:6e:e4:22:
73:f7:39:b2:a4:53:e4:e5:ef:97:51:a5:56:1b:68:15:b1:0f:
43:73:89:a3:a9:a0:2e:2e:37:7d:7f:e5:64:8d:f6:1f:9c:39:
4f:90:f7:50:1e:b9:a4:e7:b5:84:1c:81:45:51:76:84:c0:52:
0f:54:65:31:fb:18:6a:11:4d:64:57:c7:3b:e2:d3:d1:9a:4f:
b4:19:32:cd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzKKkbSji7yC4GC+YRCx5iJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OTQ3NjgxZGEwZGI3ZmU3OTMxNWVjNmRiZGEyOGJmOGQ2
NjBmYzAwHhcNMjQwMTAyMTIzMzM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMThlMzI3MmY4ZmVlNzhjNmFmMmRjNTIzNjBhODBlYzJmMjdkMGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDlA3yp05ogoP/0MRKtGY+jv1AGA
BPiuAS538vupOHBNJp/D1RPUfS7LmB+USSAoBQqUJXGzdXaFfpGhx5AwjFS6pKkR
t6aWL3aUt+Thz47u6fhpPwMMAl1NY4/J5Ar5a/ioFnLz6u0HswvCmIEV182Hc4B2
hWZvzeMycAXukwsTliFxmp6zzpwXvrVHH7pRmCdENJCIEVvknyT27o19wLl5WKcm
NLEj2OdpXiA6245GE20RSl2M2i6JzUmX8SPh5uCuy9JyFeLw+14OwKsXjDcuoLyL
fZ2ByAVf2WGZZfcj94uM0CAzWvwG5AOXNYi57Vn+DWJGVIpwZhvZtq9AMwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLGOMnL4/ueMavLcUjYKgOwvJ9ClMB8GA1UdIwQY
MBaAFKaUdoHaDbf+eTFextvaKL+NZg/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mNjQ5YTItNTE4ZC00NDU2LTk4YTct
MjNjM2RmODJjMjMwLzEvc1k0eWN2ai01NHhxOHR4U05ncUE3QzhuMEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mNjQ5YTItNTE4ZC00NDU2LTk4YTctMjNjM2RmODJjMjMw
LzEvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgAXoBAF
MA0GCSqGSIb3DQEBCwUAA4IBAQBPTGZhUXYNymYgtND+g+oUJocxZdOy8lpVhAqg
DYQuvnqAYXvHXzMPWS89is7bLKK5w1K++dF8V02w5Y2PudFZfpJiU1FBMyaFA2qD
srQO/AZ3MlTP2CiGXw6ZknKf7Qz4/UDB2je+JH0Tf1nSOhDsjE9CxyCiFl0OLzrO
W22z3//TbCD4E/nuLq7fGio0x/V90eOZjZO9WsZfZmWJJ3m/+tUA9L7TPcqdzPkB
a4D8XA9u5CJz9zmypFPk5e+XUaVWG2gVsQ9Dc4mjqaAuLjd9f+VkjfYfnDlPkPdQ
Hrmk57WEHIFFUXaEwFIPVGUx+xhqEU1kV8c74tPRmk+0GTLN
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:34 2024 by rpki-client on console-fra.rpki-client.org