Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/X01dWUSkquklARnNTjXPTYdaJuY.roa
File: X01dWUSkquklARnNTjXPTYdaJuY.roa (raw, json)
Hash identifier: +Dggt/YJz84Grzjsa83/jWEoWYtmZ8MK3gCi6UNbBjA=
Subject key identifier: 5F:4D:5D:59:44:A4:AA:E9:25:01:19:CD:4E:35:CF:4D:87:5A:26:E6
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 01917573180A9ED5C487F7452C8F965DECC9
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/X01dWUSkquklARnNTjXPTYdaJuY.roa
Signing time: Wed 21 Aug 2024 14:59:22 +0000
ROA not before: Wed 21 Aug 2024 14:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214339
IP address blocks: 2a12:de40:46::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:75:73:18:0a:9e:d5:c4:87:f7:45:2c:8f:96:5d:ec:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Aug 21 14:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f4d5d5944a4aae9250119cd4e35cf4d875a26e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:bd:8d:e9:29:69:9f:c9:fd:5d:fd:f8:ed:
45:e2:07:ed:fa:89:c0:5e:d0:27:35:16:b1:95:45:
cb:39:10:4b:73:68:48:f7:cb:dd:60:cd:40:5c:24:
62:a3:2e:53:09:a3:09:e2:fd:ee:43:c0:16:11:cc:
16:eb:2a:61:c9:b3:81:7c:f6:07:c4:3e:f3:06:d8:
95:84:ba:46:84:44:fb:7f:bd:a4:29:31:b5:c1:9e:
8d:c7:38:b4:8e:f2:f4:c1:4f:32:64:27:be:84:26:
6a:67:7e:ef:e6:f5:73:c6:9d:89:8b:c0:a8:4e:77:
a7:0e:45:6f:38:0f:20:7f:5b:9a:46:c8:15:bb:8d:
b4:4c:12:0d:4d:bc:08:25:90:4f:ce:cc:dc:2a:92:
27:c5:91:19:22:b8:53:97:46:6c:e0:f3:53:1c:e0:
d5:bb:6e:56:9d:48:e6:ba:3b:54:4e:11:78:1c:48:
fc:03:3c:77:60:ea:35:46:e4:19:0f:c0:67:76:79:
64:e8:cc:fd:d3:ba:12:62:94:d9:17:9b:4b:3d:89:
f1:45:68:11:a4:b3:6a:7f:06:8a:83:ec:ef:8c:9a:
cf:10:54:23:e3:30:b4:2a:89:03:3f:72:3d:cd:ef:
41:d8:4d:f6:9d:c8:45:59:b4:99:7d:20:9f:12:a3:
4e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4D:5D:59:44:A4:AA:E9:25:01:19:CD:4E:35:CF:4D:87:5A:26:E6
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/X01dWUSkquklARnNTjXPTYdaJuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de40:46::/48
Signature Algorithm: sha256WithRSAEncryption
b8:1f:39:51:37:d7:26:80:e6:be:e6:8b:1e:75:f5:27:42:b0:
33:42:dc:ab:f9:87:fd:2f:bd:e5:85:41:ec:3d:12:02:fc:2c:
0d:51:dc:ca:a4:06:69:04:29:32:56:d7:72:94:00:4c:79:6a:
e4:cd:4c:09:ac:3e:a5:38:b1:40:d1:d1:3c:7b:7d:c3:4c:0b:
69:92:03:65:c5:4d:33:75:fb:02:3a:f4:6f:3e:08:bb:8c:4e:
73:23:92:d4:53:50:1b:2e:bf:92:55:98:d1:e2:61:48:27:d6:
15:40:c9:e3:6f:7f:e8:a1:85:e9:f1:58:64:bf:fa:20:38:dc:
97:b4:3f:9f:e8:9e:fa:dd:fc:dc:d6:f4:21:9e:32:ab:cb:7e:
2b:e1:b8:b6:cd:fb:94:53:28:ce:98:16:7e:d6:14:4a:a3:35:
f6:4f:d5:0d:81:8e:bd:1f:e0:f7:34:85:ad:e4:ae:0c:4f:06:
86:09:11:a9:a4:8e:3d:7d:7c:3b:58:03:fc:93:e2:8b:c2:5e:
ca:7c:03:88:4e:40:e7:68:c8:ff:c0:f7:8d:12:a9:79:a8:2c:
3f:d9:23:da:6c:24:5e:14:85:26:fd:3c:41:22:5a:26:a1:67:
56:cb:7e:6f:73:c7:0d:7d:ac:d6:aa:22:7a:0d:1c:23:5c:2a:
e6:a6:21:19
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZF1cxgKntXEh/dFLI+WXezJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTZjNDFhMmIwNGZjZDhmOGU5NTcxOGZhN2QyZTEyY2M0
NGFjMWYwHhcNMjQwODIxMTQ1OTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjRkNWQ1OTQ0YTRhYWU5MjUwMTE5Y2Q0ZTM1Y2Y0ZDg3NWEyNmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXS9jekpaZ/J/V39+O1F4gft+onA
XtAnNRaxlUXLORBLc2hI98vdYM1AXCRioy5TCaMJ4v3uQ8AWEcwW6yphybOBfPYH
xD7zBtiVhLpGhET7f72kKTG1wZ6Nxzi0jvL0wU8yZCe+hCZqZ37v5vVzxp2Ji8Co
TnenDkVvOA8gf1uaRsgVu420TBINTbwIJZBPzszcKpInxZEZIrhTl0Zs4PNTHODV
u25WnUjmujtUThF4HEj8Azx3YOo1RuQZD8Bndnlk6Mz907oSYpTZF5tLPYnxRWgR
pLNqfwaKg+zvjJrPEFQj4zC0KokDP3I9ze9B2E32nchFWbSZfSCfEqNOrQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFF9NXVlEpKrpJQEZzU41z02HWibmMB8GA1UdIwQY
MBaAFLnmxBorBPzY+OlXGPp9LhLMRKwfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWViRUdpc0VfTmo0NlZjWS1uMHVFc3hFckI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMjYxYmYtNmM2Yi00YjA3LWI1YWEt
YzA4YzA0NDZkNjEzLzEvWDAxZFdVU2txdWtsQVJuTlRqWFBUWWRhSnVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jMjYxYmYtNmM2Yi00YjA3LWI1YWEtYzA4YzA0NDZkNjEz
LzEvdWViRUdpc0VfTmo0NlZjWS1uMHVFc3hFckI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhLeQABG
MA0GCSqGSIb3DQEBCwUAA4IBAQC4HzlRN9cmgOa+5osedfUnQrAzQtyr+Yf9L73l
hUHsPRIC/CwNUdzKpAZpBCkyVtdylABMeWrkzUwJrD6lOLFA0dE8e33DTAtpkgNl
xU0zdfsCOvRvPgi7jE5zI5LUU1AbLr+SVZjR4mFIJ9YVQMnjb3/ooYXp8Vhkv/og
ONyXtD+f6J763fzc1vQhnjKry34r4bi2zfuUUyjOmBZ+1hRKozX2T9UNgY69H+D3
NIWt5K4MTwaGCRGppI49fXw7WAP8k+KLwl7KfAOITkDnaMj/wPeNEql5qCw/2SPa
bCReFIUm/TxBIlomoWdWy35vc8cNfazWqiJ6DRwjXCrmpiEZ
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:03:09 2024 by rpki-client on console-ams.rpki-client.org