Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/sYgBlVxRGU0_jLn26MbkQRDKnyg.roa
File: sYgBlVxRGU0_jLn26MbkQRDKnyg.roa (raw, json)
Hash identifier: K3gkw8A60MaDwI9rUYYJrkFJX0rXDtIAsZCAuaSWgeE=
Subject key identifier: B1:88:01:95:5C:51:19:4D:3F:8C:B9:F6:E8:C6:E4:41:10:CA:9F:28
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 018CC4932FFE5A7520670DF5373648BE415D
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/sYgBlVxRGU0_jLn26MbkQRDKnyg.roa
Signing time: Mon 01 Jan 2024 10:30:29 +0000
ROA not before: Mon 01 Jan 2024 10:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24750
IP address blocks: 2a05:4c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:2f:fe:5a:75:20:67:0d:f5:37:36:48:be:41:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jan 1 10:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b18801955c51194d3f8cb9f6e8c6e44110ca9f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:da:31:40:9c:63:37:e1:5f:61:66:57:84:
47:ba:88:77:02:17:77:2d:a1:02:78:ce:39:61:2f:
c7:1e:df:0b:a6:07:0d:65:4c:2c:8c:c9:22:5a:b2:
5c:2c:5a:04:85:a1:75:fa:63:64:5b:25:ba:5f:0a:
06:fd:77:ad:23:6d:d6:62:7b:6e:2c:f0:62:8f:34:
96:41:92:38:ad:fc:00:03:ee:c5:42:89:c1:a1:38:
36:2b:92:bf:02:76:9c:44:79:1e:09:13:d2:ff:35:
0f:5a:90:25:75:b8:2c:c3:43:eb:69:e0:18:5a:55:
f6:58:38:1b:00:35:6d:7c:c9:8f:f8:1e:82:33:df:
9c:c9:b7:ec:89:7d:49:a6:39:97:ef:94:b1:9f:7a:
b2:d3:f5:54:f0:5d:1c:fc:64:ee:88:fd:2e:32:1a:
d0:85:78:c6:15:12:1e:56:ab:93:f6:76:53:b0:fb:
0f:ab:80:f0:43:0f:4c:4f:9b:e4:2b:43:00:69:3d:
42:28:c7:64:be:f1:19:e0:2d:f7:10:89:fe:5b:cf:
56:79:bd:14:6c:5e:0e:38:a4:ee:0d:90:16:81:7b:
02:64:3d:ec:ed:07:dd:08:fa:b8:d6:59:39:be:af:
ea:1e:13:29:c9:dc:dd:0c:e6:db:a5:88:eb:84:85:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:88:01:95:5C:51:19:4D:3F:8C:B9:F6:E8:C6:E4:41:10:CA:9F:28
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/sYgBlVxRGU0_jLn26MbkQRDKnyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4c00::/29
Signature Algorithm: sha256WithRSAEncryption
57:db:87:41:35:f7:e4:a7:0e:a7:65:00:6e:df:e5:70:a3:de:
34:18:08:17:30:cb:b2:75:14:16:8c:d1:1d:17:14:a2:9d:89:
dd:ea:c9:fc:09:e1:bd:29:ff:6b:5a:34:b0:55:2e:e4:fe:30:
29:ab:91:72:51:3b:fb:d3:70:01:94:bc:18:12:b7:71:a3:38:
91:72:d1:79:00:ef:09:ab:e5:a3:4c:9d:d2:23:8a:c5:0a:8c:
32:68:45:66:1c:63:91:6b:2b:d3:89:f6:ed:f2:11:0a:5c:23:
93:28:1f:aa:0e:80:97:bb:27:9a:48:c1:94:02:3b:fa:67:c6:
2a:87:86:98:49:b7:c2:9a:22:0d:4b:5a:27:90:8f:b9:88:03:
b7:ea:4d:03:6d:28:46:0a:47:8e:88:5d:72:47:09:d7:0a:ea:
77:1b:f5:c2:21:43:e7:19:71:1e:d8:d6:67:d4:dd:77:3a:80:
c1:a7:49:4f:7a:05:c5:b2:cb:1b:d3:2b:e4:77:3e:f2:54:53:
f4:cd:2e:15:92:b1:50:84:02:b8:e4:0b:c3:37:ce:28:85:23:
47:97:76:11:6b:1d:db:56:78:43:7c:0b:45:65:30:f6:ff:26:
b6:b2:68:db:bf:e6:b7:46:f6:64:8c:c8:0a:b1:c9:f7:f2:23:
1f:38:af:81
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzEky/+WnUgZw31NzZIvkFdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjQwMTAxMTAzMDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTg4MDE5NTVjNTExOTRkM2Y4Y2I5ZjZlOGM2ZTQ0MTEwY2E5ZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIbaMUCcYzfhX2FmV4RHuoh3Ahd3
LaECeM45YS/HHt8LpgcNZUwsjMkiWrJcLFoEhaF1+mNkWyW6XwoG/XetI23WYntu
LPBijzSWQZI4rfwAA+7FQonBoTg2K5K/AnacRHkeCRPS/zUPWpAldbgsw0PraeAY
WlX2WDgbADVtfMmP+B6CM9+cybfsiX1JpjmX75Sxn3qy0/VU8F0c/GTuiP0uMhrQ
hXjGFRIeVquT9nZTsPsPq4DwQw9MT5vkK0MAaT1CKMdkvvEZ4C33EIn+W89Web0U
bF4OOKTuDZAWgXsCZD3s7QfdCPq41lk5vq/qHhMpydzdDObbpYjrhIWHswIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLGIAZVcURlNP4y59ujG5EEQyp8oMB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvc1lnQmxWeFJHVTBfakxuMjZNYmtRUkRLbnlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgVMADAN
BgkqhkiG9w0BAQsFAAOCAQEAV9uHQTX35KcOp2UAbt/lcKPeNBgIFzDLsnUUFozR
HRcUop2J3erJ/AnhvSn/a1o0sFUu5P4wKauRclE7+9NwAZS8GBK3caM4kXLReQDv
Cavlo0yd0iOKxQqMMmhFZhxjkWsr04n27fIRClwjkygfqg6Al7snmkjBlAI7+mfG
KoeGmEm3wpoiDUtaJ5CPuYgDt+pNA20oRgpHjohdckcJ1wrqdxv1wiFD5xlxHtjW
Z9TddzqAwadJT3oFxbLLG9Mr5Hc+8lRT9M0uFZKxUIQCuOQLwzfOKIUjR5d2EWsd
21Z4Q3wLRWUw9v8mtrJo27/mt0b2ZIzICrHJ9/IjHzivgQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:38:58 2024 by rpki-client on console-fra.rpki-client.org