Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/vKZnewZew0qnaWw9zoH5NjOflCM.roa
File: vKZnewZew0qnaWw9zoH5NjOflCM.roa (raw, json)
Hash identifier: wAYi4hO+f0zRfbGVEEas+to2lx3FwWRlvUakYWKg2Hw=
Subject key identifier: BC:A6:67:7B:06:5E:C3:4A:A7:69:6C:3D:CE:81:F9:36:33:9F:94:23
Certificate issuer: /CN=593b53fb9306346f272494928d77839cbaf9ddc7
Certificate serial: 018CC3493866D67AE7D254DFA1FE25AFB05B
Authority key identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/vKZnewZew0qnaWw9zoH5NjOflCM.roa
Signing time: Mon 01 Jan 2024 04:30:04 +0000
ROA not before: Mon 01 Jan 2024 04:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12637
IP address blocks: 2a0b:ee40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:38:66:d6:7a:e7:d2:54:df:a1:fe:25:af:b0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=593b53fb9306346f272494928d77839cbaf9ddc7
Validity
Not Before: Jan 1 04:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bca6677b065ec34aa7696c3dce81f936339f9423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:7f:42:c1:53:9c:2f:17:b0:a9:a0:8d:93:
c7:86:79:69:5a:ba:7f:5a:58:79:d2:c7:4f:68:4c:
5f:b5:ad:fb:9b:05:29:e7:32:06:cd:72:58:89:00:
00:d2:2c:16:fc:5a:6a:e2:5a:d2:52:d4:9d:25:63:
9f:cc:23:82:17:94:c0:83:2f:17:83:cd:14:34:da:
d7:1c:9b:26:89:a7:61:7b:15:db:1b:51:13:46:0f:
fe:3f:c8:ef:e1:1e:94:59:b8:24:fd:ee:7e:49:d7:
a1:fa:7d:00:5d:41:6f:db:ed:8e:5c:9d:53:27:48:
cb:03:a6:fa:60:84:ae:7f:89:36:b0:0c:38:4d:13:
f9:ab:58:56:86:f3:16:24:87:2f:a1:c8:82:fd:68:
5f:37:4d:3e:e7:d1:d5:e4:71:d1:0c:3f:da:ca:8a:
47:e4:2d:19:55:db:c7:58:77:ac:49:0d:db:14:a3:
1f:5d:7c:73:fa:af:19:e2:c5:8a:20:b2:fe:10:72:
8c:62:14:ea:bf:5a:93:43:22:76:34:36:f1:2c:bf:
c7:b6:32:da:a6:13:23:34:6f:5c:83:5a:e6:84:98:
13:cd:8d:83:01:3c:b3:d9:74:21:07:99:e1:d6:b0:
69:e6:2a:3d:54:49:14:dc:4f:0c:88:bc:05:d7:8c:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A6:67:7B:06:5E:C3:4A:A7:69:6C:3D:CE:81:F9:36:33:9F:94:23
X509v3 Authority Key Identifier:
keyid:59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/vKZnewZew0qnaWw9zoH5NjOflCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ee40::/29
Signature Algorithm: sha256WithRSAEncryption
af:3f:95:86:4e:40:bd:a6:6e:a2:5d:df:28:ab:b0:57:e4:13:
91:33:a9:91:3a:d3:a5:b1:26:ee:10:78:d2:bc:90:63:1a:25:
ad:91:39:b2:62:24:ac:b6:4d:b0:09:24:01:4f:79:3e:39:29:
1c:29:37:e4:cc:8b:0e:e6:7d:12:3e:e6:b7:b6:9d:8e:1a:48:
0d:74:64:5e:2b:cb:7e:d5:85:62:a5:28:f4:28:8f:ff:79:f6:
8f:c5:b8:0f:18:b6:9b:67:d4:76:fc:d7:4d:70:ee:13:df:0e:
67:c8:3b:25:4c:4e:ec:9e:28:07:01:ad:fc:94:6c:64:52:6f:
14:84:50:b5:81:80:9e:f2:b1:8c:9a:48:d5:e6:1c:eb:43:41:
41:59:4d:41:67:84:66:f6:79:78:d7:f4:4b:11:4c:72:29:cf:
83:82:bb:36:06:16:3e:b6:ab:81:a5:24:ae:e2:f3:da:64:f5:
b5:2a:72:df:52:74:af:4a:dc:d4:d8:9f:70:89:2c:cf:51:7d:
e5:68:a8:cc:e8:cb:42:a6:6c:7e:95:be:f5:c8:d8:1f:84:1d:
33:ba:1c:1a:f3:1e:63:a0:a1:69:5d:f4:64:c6:2c:aa:3b:77:
50:27:ec:95:d3:58:cf:3f:a5:1b:7e:1d:12:e6:c6:06:3e:3e:
d6:e6:99:0e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzDSThm1nrn0lTfof4lr7BbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5M2I1M2ZiOTMwNjM0NmYyNzI0OTQ5MjhkNzc4MzljYmFm
OWRkYzcwHhcNMjQwMTAxMDQzMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2E2Njc3YjA2NWVjMzRhYTc2OTZjM2RjZTgxZjkzNjMzOWY5NDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgR/QsFTnC8XsKmgjZPHhnlpWrp/
Wlh50sdPaExfta37mwUp5zIGzXJYiQAA0iwW/Fpq4lrSUtSdJWOfzCOCF5TAgy8X
g80UNNrXHJsmiadhexXbG1ETRg/+P8jv4R6UWbgk/e5+Sdeh+n0AXUFv2+2OXJ1T
J0jLA6b6YISuf4k2sAw4TRP5q1hWhvMWJIcvociC/WhfN00+59HV5HHRDD/ayopH
5C0ZVdvHWHesSQ3bFKMfXXxz+q8Z4sWKILL+EHKMYhTqv1qTQyJ2NDbxLL/HtjLa
phMjNG9cg1rmhJgTzY2DATyz2XQhB5nh1rBp5io9VEkU3E8MiLwF14zHZQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLymZ3sGXsNKp2lsPc6B+TYzn5QjMB8GA1UdIwQY
MBaAFFk7U/uTBjRvJySUko13g5y6+d3HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1R0VC01TUdORzhuSkpTU2pYZURuTHI1M2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMmZjOWUtZWEzYi00MWMwLTk1MGUt
NDQ3NWE5YmYyNTBlLzEvdktabmV3WmV3MHFuYVd3OXpvSDVOak9mbENNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMmZjOWUtZWEzYi00MWMwLTk1MGUtNDQ3NWE5YmYyNTBl
LzEvV1R0VC01TUdORzhuSkpTU2pYZURuTHI1M2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgvuQDAN
BgkqhkiG9w0BAQsFAAOCAQEArz+Vhk5AvaZuol3fKKuwV+QTkTOpkTrTpbEm7hB4
0ryQYxolrZE5smIkrLZNsAkkAU95PjkpHCk35MyLDuZ9Ej7mt7adjhpIDXRkXivL
ftWFYqUo9CiP/3n2j8W4Dxi2m2fUdvzXTXDuE98OZ8g7JUxO7J4oBwGt/JRsZFJv
FIRQtYGAnvKxjJpI1eYc60NBQVlNQWeEZvZ5eNf0SxFMcinPg4K7NgYWPrargaUk
ruLz2mT1tSpy31J0r0rc1NifcIksz1F95WiozOjLQqZsfpW+9cjYH4QdM7ocGvMe
Y6ChaV30ZMYsqjt3UCfsldNYzz+lG34dEubGBj4+1uaZDg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:16 2024 by rpki-client on console-ams.rpki-client.org