Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/J6UpyEFyxul50vbmlWOOa19Xc3M.roa
File: J6UpyEFyxul50vbmlWOOa19Xc3M.roa (raw, json)
Hash identifier: xCOSBgEdEhdUtDAgvWBPW6t5ny8UhF2X4DOmzvXe+Io=
Subject key identifier: 27:A5:29:C8:41:72:C6:E9:79:D2:F6:E6:95:63:8E:6B:5F:57:73:73
Certificate issuer: /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Certificate serial: 018CC94E436506E27F9E7D307AB2B2682C37
Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/J6UpyEFyxul50vbmlWOOa19Xc3M.roa
Signing time: Tue 02 Jan 2024 08:33:18 +0000
ROA not before: Tue 02 Jan 2024 08:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202044
IP address blocks: 2a13:af04::/30 maxlen: 30
2a13:af00::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:43:65:06:e2:7f:9e:7d:30:7a:b2:b2:68:2c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Validity
Not Before: Jan 2 08:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27a529c84172c6e979d2f6e695638e6b5f577373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:e6:dd:a0:18:58:c8:8b:20:11:da:6d:a8:
23:b8:35:76:b2:be:59:4e:7e:47:a0:3d:bf:1a:ba:
7f:df:b3:81:0c:87:dd:aa:f0:38:6d:d8:7f:fa:a3:
80:0d:59:b0:e5:cd:2a:19:f8:8c:31:e0:73:28:9c:
d7:29:76:ee:b5:66:7f:a8:d6:9e:19:1a:96:63:89:
e8:1c:41:38:30:61:ea:22:46:8a:9a:d1:35:0f:6f:
a6:61:1e:2d:7f:29:4b:6b:67:63:f0:fa:0f:cb:29:
34:09:7a:fb:64:ea:bf:44:42:b5:91:fb:82:bf:44:
93:53:dd:91:bb:87:7f:bb:64:9f:1b:c4:03:69:47:
6e:b3:46:5d:2d:5e:ea:81:77:75:49:37:0d:e6:7b:
da:ff:01:a4:c3:e5:0c:1d:6b:71:06:c7:88:03:ec:
55:12:d4:63:81:f3:86:39:fd:99:2a:51:c9:19:b8:
c5:5d:58:f9:f2:4f:90:0b:39:9c:68:48:08:05:4e:
0b:a4:14:ab:da:84:f1:7a:a7:da:8d:6b:04:b1:b1:
e6:93:14:29:3f:c7:35:c1:f4:e3:d3:f3:d3:ab:5d:
54:a8:4f:4f:f8:b4:5c:da:9d:4e:ae:22:fc:67:09:
cb:6e:d0:18:15:0f:a2:01:21:35:5b:b8:5f:f8:9f:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A5:29:C8:41:72:C6:E9:79:D2:F6:E6:95:63:8E:6B:5F:57:73:73
X509v3 Authority Key Identifier:
keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/J6UpyEFyxul50vbmlWOOa19Xc3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:af00::/29
Signature Algorithm: sha256WithRSAEncryption
16:aa:91:e3:95:ef:7b:da:5c:a4:8b:c3:74:cf:9a:ab:b6:fc:
08:ac:89:bd:52:3e:f7:b3:9a:eb:fc:ce:88:52:0a:a9:34:6d:
01:88:57:a8:7e:c3:b6:4a:b6:6b:7e:f9:72:47:d9:94:47:3c:
05:ab:49:94:9d:7c:c2:b5:94:a5:be:cf:3d:5d:ff:4a:80:5c:
ae:37:56:9f:17:97:10:56:09:9c:0b:19:c7:20:12:6f:95:51:
47:3a:d2:e8:15:16:c3:d8:bb:f4:55:17:ba:3e:12:5a:2e:d3:
d4:d1:68:58:1f:6e:44:f1:4b:9d:7d:e7:6c:e4:62:64:ae:16:
20:5e:bb:87:ac:d9:89:2d:2c:89:c0:fe:3e:3c:82:dd:ee:2f:
f3:eb:01:77:82:89:32:5c:93:fd:5c:6e:ac:4f:83:d5:86:39:
a1:a9:39:a4:9d:4a:ac:fa:7c:f7:44:7d:77:12:15:57:a7:87:
5b:51:db:c2:5c:2e:e9:75:e5:37:91:0d:8f:75:cd:13:94:17:
3f:a4:b4:9a:b6:18:33:8b:f8:88:ea:40:8d:e7:53:cf:d3:70:
1b:11:7a:96:c8:9e:5f:1c:2a:06:b7:ca:53:93:31:72:bd:75:
01:a2:b9:c5:49:cc:9f:9b:0f:a7:5e:50:66:ea:9e:c4:8e:48:
ab:b3:5b:dc
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzJTkNlBuJ/nn0werKyaCw3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YmJkNjAzNzRiYzIzZWQwN2QwMWMyNGU3Y2ZkOTE3OGI4
ZmVkMjEwHhcNMjQwMTAyMDgzMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2E1MjljODQxNzJjNmU5NzlkMmY2ZTY5NTYzOGU2YjVmNTc3MzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ3m3aAYWMiLIBHabagjuDV2sr5Z
Tn5HoD2/Grp/37OBDIfdqvA4bdh/+qOADVmw5c0qGfiMMeBzKJzXKXbutWZ/qNae
GRqWY4noHEE4MGHqIkaKmtE1D2+mYR4tfylLa2dj8PoPyyk0CXr7ZOq/REK1kfuC
v0STU92Ru4d/u2SfG8QDaUdus0ZdLV7qgXd1STcN5nva/wGkw+UMHWtxBseIA+xV
EtRjgfOGOf2ZKlHJGbjFXVj58k+QCzmcaEgIBU4LpBSr2oTxeqfajWsEsbHmkxQp
P8c1wfTj0/PTq11UqE9P+LRc2p1OriL8ZwnLbtAYFQ+iASE1W7hf+J+/PwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCelKchBcsbpedL25pVjjmtfV3NzMB8GA1UdIwQY
MBaAFBe71gN0vCPtB9AcJOfP2ReLj+0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjd2V0EzUzhJLTBIMEJ3azU4X1pGNHVQN1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YjczZDctZjFmNS00ZThmLWE0YjYt
Y2RmODk2ODM1NDBlLzEvSjZVcHlFRnl4dWw1MHZibWxXT09hMTlYYzNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy81YjczZDctZjFmNS00ZThmLWE0YjYtY2RmODk2ODM1NDBl
LzEvRjd2V0EzUzhJLTBIMEJ3azU4X1pGNHVQN1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhOvADAN
BgkqhkiG9w0BAQsFAAOCAQEAFqqR45Xve9pcpIvDdM+aq7b8CKyJvVI+97Oa6/zO
iFIKqTRtAYhXqH7Dtkq2a375ckfZlEc8BatJlJ18wrWUpb7PPV3/SoBcrjdWnxeX
EFYJnAsZxyASb5VRRzrS6BUWw9i79FUXuj4SWi7T1NFoWB9uRPFLnX3nbORiZK4W
IF67h6zZiS0sicD+PjyC3e4v8+sBd4KJMlyT/VxurE+D1YY5oak5pJ1KrPp890R9
dxIVV6eHW1Hbwlwu6XXlN5ENj3XNE5QXP6S0mrYYM4v4iOpAjedTz9NwGxF6lsie
XxwqBrfKU5Mxcr11AaK5xUnMn5sPp15QZuqexI5Iq7Nb3A==
-----END CERTIFICATE-----
Generated at Tue Jun 4 09:40:55 2024 by rpki-client on console-fra.rpki-client.org