Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IedE0r2OWNnr7c5PHcx4L_unjdg.roa
File: IedE0r2OWNnr7c5PHcx4L_unjdg.roa (raw, json)
Hash identifier: jCkZKBL2mSI1jDAZdGbg+2Sj7Bf7SwRxRYEvp4ObF14=
Subject key identifier: 21:E7:44:D2:BD:8E:58:D9:EB:ED:CE:4F:1D:CC:78:2F:FB:A7:8D:D8
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 018F7CC217242FC0FB5B55A85F188E6A7A84
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IedE0r2OWNnr7c5PHcx4L_unjdg.roa
Signing time: Wed 15 May 2024 14:57:25 +0000
ROA not before: Wed 15 May 2024 14:57:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396828
IP address blocks: 2a10:eec0:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7c:c2:17:24:2f:c0:fb:5b:55:a8:5f:18:8e:6a:7a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: May 15 14:57:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21e744d2bd8e58d9ebedce4f1dcc782ffba78dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:90:65:e3:7e:4f:58:44:6b:e9:09:d8:4f:
7a:c7:b3:00:cb:b2:58:88:b6:38:a5:57:cd:c6:79:
6d:9c:59:ec:56:2d:b3:2f:e3:44:0c:dc:16:19:f2:
ae:ba:b8:bd:55:c2:3f:e3:7f:12:0f:4a:7c:04:0e:
eb:41:46:c7:2b:58:57:cb:d5:fb:d4:5c:e2:41:6c:
e6:44:85:ef:d6:d4:2a:8e:bc:d6:4d:cb:ea:94:8a:
98:85:2f:ac:e7:5c:26:40:c2:ed:2d:c2:5e:99:5e:
1b:9b:b2:5e:3c:5b:6f:a3:95:cd:12:af:06:dc:6a:
49:07:1e:49:4b:4e:a2:d8:be:87:4b:bb:76:09:16:
d0:d3:1b:63:79:8c:75:06:20:fb:c7:61:00:0b:93:
cc:3e:b2:7b:1e:09:ba:b6:f8:2b:16:ae:ce:70:3c:
1d:3c:22:d3:35:bd:44:b1:66:e0:d7:93:d6:7b:0f:
a9:72:50:a2:7c:2a:bd:ab:76:3b:5b:4b:a9:56:51:
85:e4:f2:a6:93:76:2f:f2:fa:83:b3:d1:17:4b:da:
16:01:15:dc:3e:88:ed:ac:b9:c6:06:20:63:8d:aa:
02:94:51:ad:2f:bd:eb:21:94:c9:71:1e:48:10:53:
07:ef:96:ef:d8:b0:aa:a9:10:7c:cc:88:58:c4:52:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E7:44:D2:BD:8E:58:D9:EB:ED:CE:4F:1D:CC:78:2F:FB:A7:8D:D8
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IedE0r2OWNnr7c5PHcx4L_unjdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:eec0:b::/48
Signature Algorithm: sha256WithRSAEncryption
40:73:e3:d1:99:b4:8b:d7:ec:6b:69:80:19:43:5d:a1:b7:c0:
7b:54:53:85:30:e7:5d:72:b4:e1:ad:b3:f2:e9:ff:17:ea:dd:
8e:27:56:6d:0f:ba:94:6d:f2:b9:7a:ef:24:a6:b1:78:39:14:
ca:53:87:c8:c6:18:2d:76:8e:d6:42:b5:76:4b:c8:21:38:43:
7e:ee:af:30:79:60:c5:c9:87:b3:65:5e:6c:32:3b:d9:4c:53:
7e:52:99:40:17:f0:9c:1c:a8:5b:d0:2f:48:8d:a5:a7:4d:27:
54:b1:81:26:15:0c:82:a5:9e:7d:8f:bc:05:19:47:f5:60:09:
31:1c:61:0a:27:d2:8d:a4:fd:01:9f:2b:51:26:cc:96:b5:88:
1f:57:06:23:9f:fb:4f:a5:aa:e2:ce:5a:2b:07:1f:5c:3c:86:
7b:3c:b8:89:6b:a9:03:cd:04:ec:68:1f:21:91:55:c2:2c:99:
32:1a:43:27:fe:89:3b:d1:db:76:43:5f:d5:21:c7:66:bf:35:
58:99:b8:ef:55:05:1a:88:01:4a:22:ac:74:b6:f0:44:fe:ec:
db:af:e6:29:d0:60:65:d6:d3:b7:c9:07:5b:75:82:92:33:82:
b6:5f:50:40:10:69:69:40:11:09:f2:83:57:d9:fb:b3:d5:4f:
be:44:93:98
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY98whckL8D7W1WoXxiOanqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQwNTE1MTQ1NzI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWU3NDRkMmJkOGU1OGQ5ZWJlZGNlNGYxZGNjNzgyZmZiYTc4ZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2qQZeN+T1hEa+kJ2E96x7MAy7JY
iLY4pVfNxnltnFnsVi2zL+NEDNwWGfKuuri9VcI/438SD0p8BA7rQUbHK1hXy9X7
1FziQWzmRIXv1tQqjrzWTcvqlIqYhS+s51wmQMLtLcJemV4bm7JePFtvo5XNEq8G
3GpJBx5JS06i2L6HS7t2CRbQ0xtjeYx1BiD7x2EAC5PMPrJ7Hgm6tvgrFq7OcDwd
PCLTNb1EsWbg15PWew+pclCifCq9q3Y7W0upVlGF5PKmk3Yv8vqDs9EXS9oWARXc
PojtrLnGBiBjjaoClFGtL73rIZTJcR5IEFMH75bv2LCqqRB8zIhYxFKc8wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCHnRNK9jljZ6+3OTx3MeC/7p43YMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvSWVkRTByMk9XTm5yN2M1UEhjeDRMX3VuamRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhDuwAAL
MA0GCSqGSIb3DQEBCwUAA4IBAQBAc+PRmbSL1+xraYAZQ12ht8B7VFOFMOddcrTh
rbPy6f8X6t2OJ1ZtD7qUbfK5eu8kprF4ORTKU4fIxhgtdo7WQrV2S8ghOEN+7q8w
eWDFyYezZV5sMjvZTFN+UplAF/CcHKhb0C9IjaWnTSdUsYEmFQyCpZ59j7wFGUf1
YAkxHGEKJ9KNpP0BnytRJsyWtYgfVwYjn/tPparizlorBx9cPIZ7PLiJa6kDzQTs
aB8hkVXCLJkyGkMn/ok70dt2Q1/VIcdmvzVYmbjvVQUaiAFKIqx0tvBE/uzbr+Yp
0GBl1tO3yQdbdYKSM4K2X1BAEGlpQBEJ8oNX2fuz1U++RJOY
-----END CERTIFICATE-----
Generated at Mon Jun 3 11:48:09 2024 by rpki-client on console-ams.rpki-client.org