Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/0nT9AY09rUUX8V6tEOpd1tPpueY.roa
File: 0nT9AY09rUUX8V6tEOpd1tPpueY.roa (raw, json)
Hash identifier: QHAzUJR2rqE1u0e0VMPmQANhCKq3XT+kP3kH6LeNuNE=
Subject key identifier: D2:74:FD:01:8D:3D:AD:45:17:F1:5E:AD:10:EA:5D:D6:D3:E9:B9:E6
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01922A4663A4A50684352FD658C0308B898C
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/0nT9AY09rUUX8V6tEOpd1tPpueY.roa
Signing time: Wed 25 Sep 2024 17:41:48 +0000
ROA not before: Wed 25 Sep 2024 17:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214139
IP address blocks: 2a0c:b641:d10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2a:46:63:a4:a5:06:84:35:2f:d6:58:c0:30:8b:89:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Sep 25 17:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d274fd018d3dad4517f15ead10ea5dd6d3e9b9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:4a:c3:cf:6e:fe:4d:2b:8d:7e:40:33:59:
6e:d5:42:77:31:61:5e:6b:de:2f:dc:8e:5e:53:a8:
1b:57:91:28:ce:7b:e0:40:f4:a4:68:e1:76:5e:52:
70:cc:0c:b7:67:06:ef:19:7c:cc:b6:a4:b8:b5:fd:
3c:be:1e:61:6f:cf:a2:b8:13:fa:67:71:4a:fe:3d:
93:79:14:04:9c:60:04:da:07:c6:12:22:d1:4b:a6:
8d:9f:24:24:cf:a4:b8:38:cc:92:1f:ee:50:7a:18:
b8:65:3b:36:49:f8:15:ea:cc:db:7d:b4:3e:40:b4:
cb:8a:f0:06:95:c1:0f:83:83:9a:7d:03:51:9a:88:
32:f3:0a:37:b8:3c:85:79:43:e4:d7:98:8b:9a:6a:
5c:86:09:fc:ee:d6:af:c4:50:69:c4:2f:6d:69:17:
83:58:4e:7a:57:1c:ca:76:10:70:5f:a0:5d:ae:8f:
05:81:76:58:38:8b:4a:3b:71:5c:90:37:30:08:3f:
71:f0:e6:7d:f7:66:25:a8:11:9f:ce:22:ba:68:f5:
83:8d:53:ee:0a:bc:06:86:36:e2:39:7d:41:17:dd:
4c:60:7b:c2:23:1b:51:ea:fa:e2:90:fe:4b:c4:15:
bc:97:49:70:1e:fb:7b:ff:f4:a4:5c:a0:75:85:7e:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:74:FD:01:8D:3D:AD:45:17:F1:5E:AD:10:EA:5D:D6:D3:E9:B9:E6
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/0nT9AY09rUUX8V6tEOpd1tPpueY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:d10::/44
Signature Algorithm: sha256WithRSAEncryption
6a:90:3c:c0:6f:c0:6d:4f:1f:4b:b2:fa:ea:d0:fe:38:75:82:
d1:c0:92:5a:3c:64:cf:76:a1:56:91:8c:44:31:27:cb:44:bd:
17:2e:68:d6:77:a6:b5:9c:ec:dd:bb:05:9e:bb:b9:17:3b:bf:
79:63:2c:b5:b0:e5:3c:43:b3:13:a0:05:ac:66:51:e5:65:e6:
00:68:6b:bf:1d:59:14:96:77:fe:e5:52:65:d2:ab:12:07:ff:
28:ec:51:f5:84:cf:1e:7c:b5:61:9d:5b:66:30:b9:31:37:f2:
31:12:85:af:72:77:22:e3:6d:4f:73:5d:6f:be:b9:ad:76:a4:
a5:97:0b:d7:63:58:01:cd:10:9e:ea:ea:ce:c2:6a:a4:2f:5d:
d3:49:90:6a:23:6d:2d:e8:0a:64:0b:d0:9c:06:fd:c6:66:0d:
43:61:97:0d:1a:35:a8:07:89:08:ef:d2:f4:29:cc:c6:b6:e9:
64:f4:d1:f3:7d:5e:07:9e:31:1c:5d:31:ad:7a:b7:73:98:72:
5b:09:0e:20:c9:70:4f:2b:18:51:68:19:12:94:de:a4:dd:a0:
d5:4f:f8:11:d0:0a:a1:cd:64:6d:4c:a9:19:39:b5:cc:6c:13:
5d:8e:d9:29:71:bf:e1:13:cc:ac:ed:eb:3d:d6:75:98:20:25:
0a:6f:49:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:36:36 2024 by rpki-client on console-fra.rpki-client.org