Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/T5hWPVvBNSnjdZPbj0CuebIm6Ek.roa
File: T5hWPVvBNSnjdZPbj0CuebIm6Ek.roa (raw, json)
Hash identifier: n7H6RIahH2XyTndBDB/JbNAj5nNT9qr3KKI4jBHGSo4=
Subject key identifier: 4F:98:56:3D:5B:C1:35:29:E3:75:93:DB:8F:40:AE:79:B2:26:E8:49
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01935829220BE70719ACBEDBA261AE55A465
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/T5hWPVvBNSnjdZPbj0CuebIm6Ek.roa
Signing time: Sat 23 Nov 2024 08:35:10 +0000
ROA not before: Sat 23 Nov 2024 08:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 2a11:5780::/30 maxlen: 30
2a11:5784::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:29:22:0b:e7:07:19:ac:be:db:a2:61:ae:55:a4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Nov 23 08:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f98563d5bc13529e37593db8f40ae79b226e849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8d:e6:73:c3:91:52:ee:d9:6e:dd:49:95:79:
39:b4:82:15:1c:08:e9:de:30:56:4e:c8:43:3b:52:
db:12:b1:56:4b:98:c3:2e:67:7d:f6:e7:33:85:64:
cc:41:86:b3:c1:ef:bd:1c:b5:b9:50:3a:02:87:a9:
39:8c:ab:0b:24:10:29:b0:d6:da:44:22:c6:39:d8:
34:54:2a:e1:8a:e4:16:6f:69:b5:f1:c7:d8:51:b1:
2e:2e:34:af:45:22:45:ea:2b:e1:af:ae:06:a2:cf:
2a:d4:87:d0:ab:70:a7:1a:3b:b5:53:ca:aa:98:35:
3a:d5:29:56:c4:b8:45:6b:7c:42:94:52:3f:ca:46:
19:97:f0:42:7a:b7:3b:dd:59:96:6c:cf:55:d1:5e:
21:ce:a4:87:7a:1f:79:99:57:fb:03:01:67:d3:6c:
31:6f:c2:00:a9:a8:1f:2f:66:54:a0:13:a2:9e:77:
46:5a:4f:f8:13:45:9f:28:0a:c7:1c:8b:15:87:39:
2d:d9:b7:81:ed:60:0a:81:fd:3c:d7:f2:06:be:e1:
4f:ef:3a:4b:a6:93:a2:00:2a:66:9c:17:11:f4:1d:
61:d4:50:d4:f2:15:f4:1e:69:30:d0:fb:7b:5c:a5:
f2:55:72:4b:c2:fd:bd:c0:cf:cb:3a:d7:e5:da:5d:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:98:56:3D:5B:C1:35:29:E3:75:93:DB:8F:40:AE:79:B2:26:E8:49
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/T5hWPVvBNSnjdZPbj0CuebIm6Ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5780::/29
Signature Algorithm: sha256WithRSAEncryption
0e:73:96:2b:d3:18:90:99:87:47:d4:61:f1:9d:6b:5f:f7:35:
65:10:f4:4e:02:32:3d:5b:f5:21:8a:7f:ef:7b:f4:84:b6:f1:
a9:fd:7d:0d:61:96:d2:98:92:93:3f:d4:f5:8a:a7:c9:ca:46:
63:75:07:3e:ea:22:0c:63:07:0a:c8:85:32:24:52:64:f0:4e:
e2:2b:69:a1:6f:1c:9c:2b:55:75:95:c9:88:bf:5a:84:d1:d1:
21:0a:86:08:00:c5:c5:75:cb:14:07:67:52:6d:e3:30:ed:67:
ca:62:0d:93:ea:fc:0f:5c:45:90:fa:53:f1:31:95:de:eb:2d:
d8:f6:26:21:e8:ca:3a:45:4a:02:8e:c4:e3:98:60:2f:c9:6c:
b8:4c:0b:a2:d2:71:c9:ea:10:79:08:1b:4e:be:bb:8a:8f:8a:
cd:2a:37:bc:c5:f2:22:93:ce:4c:d2:b0:85:05:b4:d5:9c:8f:
d6:18:87:ef:b1:44:d2:ef:99:6c:64:62:07:8a:42:b2:6d:50:
2a:a1:55:89:58:23:20:56:06:6e:f2:85:5b:a8:7f:2a:cc:5d:
79:a2:4c:00:8e:70:b2:5f:68:93:e1:3a:d9:92:c3:3c:dd:9c:
5b:35:b2:35:0b:89:ce:0e:a0:1d:c0:c1:b0:ca:cd:08:c4:24:
d3:2d:26:e8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZNYKSIL5wcZrL7bomGuVaRlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjQxMTIzMDgzNTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Zjk4NTYzZDViYzEzNTI5ZTM3NTkzZGI4ZjQwYWU3OWIyMjZlODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o3mc8ORUu7Zbt1JlXk5tIIVHAjp
3jBWTshDO1LbErFWS5jDLmd99uczhWTMQYazwe+9HLW5UDoCh6k5jKsLJBApsNba
RCLGOdg0VCrhiuQWb2m18cfYUbEuLjSvRSJF6ivhr64Gos8q1IfQq3CnGju1U8qq
mDU61SlWxLhFa3xClFI/ykYZl/BCerc73VmWbM9V0V4hzqSHeh95mVf7AwFn02wx
b8IAqagfL2ZUoBOinndGWk/4E0WfKArHHIsVhzkt2beB7WAKgf081/IGvuFP7zpL
ppOiACpmnBcR9B1h1FDU8hX0Hmkw0Pt7XKXyVXJLwv29wM/LOtfl2l06QwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFE+YVj1bwTUp43WT249ArnmyJuhJMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvVDVoV1BWdkJOU25qZFpQYmowQ3VlYkltNkVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhFXgDAN
BgkqhkiG9w0BAQsFAAOCAQEADnOWK9MYkJmHR9Rh8Z1rX/c1ZRD0TgIyPVv1IYp/
73v0hLbxqf19DWGW0piSkz/U9YqnycpGY3UHPuoiDGMHCsiFMiRSZPBO4itpoW8c
nCtVdZXJiL9ahNHRIQqGCADFxXXLFAdnUm3jMO1nymINk+r8D1xFkPpT8TGV3ust
2PYmIejKOkVKAo7E45hgL8lsuEwLotJxyeoQeQgbTr67io+KzSo3vMXyIpPOTNKw
hQW01ZyP1hiH77FE0u+ZbGRiB4pCsm1QKqFViVgjIFYGbvKFW6h/KsxdeaJMAI5w
sl9ok+E62ZLDPN2cWzWyNQuJzg6gHcDBsMrNCMQk0y0m6A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 23:42:43 2024 by rpki-client on console-fra.rpki-client.org