Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5GljiOGKRkF0bO88VurXV0iGwBU.roa
File: 5GljiOGKRkF0bO88VurXV0iGwBU.roa (raw, json)
Hash identifier: 39NuXfxkXMU6QMn39KNVytz2z9fi2gHvbKInbdc1tcw=
Subject key identifier: E4:69:63:88:E1:8A:46:41:74:6C:EF:3C:56:EA:D7:57:48:86:C0:15
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC8017EA1019FEED5370F586AC64ED06A
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5GljiOGKRkF0bO88VurXV0iGwBU.roa
Signing time: Tue 02 Jan 2024 02:29:50 +0000
ROA not before: Tue 02 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212963
IP address blocks: 2a0c:b641:650::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7e:a1:01:9f:ee:d5:37:0f:58:6a:c6:4e:d0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4696388e18a4641746cef3c56ead7574886c015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:bb:45:07:7e:18:03:b2:fb:33:7f:ba:8e:
7f:d6:25:1e:ba:d2:e8:91:8f:fb:1d:c4:e4:9c:0e:
f1:aa:9c:20:ac:a8:87:11:bb:95:15:a0:4b:60:48:
a4:bb:57:3b:1e:2a:2f:0b:5b:e1:b1:d6:e8:ef:07:
8d:b1:3d:1c:c6:4d:86:96:53:ba:2e:fc:c9:02:51:
a8:74:c3:2c:a4:6e:6a:67:24:d8:4b:f8:37:60:5c:
90:82:e9:18:48:70:1b:ba:09:19:db:82:02:94:c4:
f7:36:4c:45:98:f6:34:a6:22:cb:e4:a6:ca:71:85:
76:ad:62:d8:21:03:a4:a0:7d:a0:bb:28:90:87:06:
c1:d0:f6:ca:b2:18:b3:52:64:31:93:13:e6:f2:9e:
31:b6:01:49:28:b6:9b:39:f3:45:1f:9e:02:44:21:
fa:9d:06:a8:f7:f3:ae:8f:57:6f:31:a9:40:4a:9d:
dc:a7:67:c5:2a:1c:4c:74:04:f8:68:d7:80:27:77:
f1:bc:00:42:71:bc:eb:4e:e3:17:d2:22:df:b4:e2:
d2:0e:da:af:5b:6e:67:d6:54:ee:ba:97:13:1f:9d:
45:e5:51:15:90:ab:9c:ac:e0:d9:dc:dd:d4:5d:8f:
3f:10:19:2a:e6:f0:d4:cd:60:bd:52:38:dd:a8:a4:
31:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:69:63:88:E1:8A:46:41:74:6C:EF:3C:56:EA:D7:57:48:86:C0:15
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5GljiOGKRkF0bO88VurXV0iGwBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:650::/44
Signature Algorithm: sha256WithRSAEncryption
93:21:df:f1:7c:e1:8c:a3:19:6f:c0:96:be:c7:ab:74:89:ce:
1a:bc:d6:ac:68:cf:73:49:3b:50:98:21:cb:be:17:4f:6d:8c:
24:e7:e5:8a:fb:07:5a:f7:27:97:dd:b5:01:4d:3b:cf:4b:0f:
c1:cc:f5:7c:3f:d4:75:81:86:04:d1:eb:e9:a4:7c:09:d2:4f:
62:b3:07:62:e2:f3:52:1f:50:06:63:ab:8c:36:3a:20:dc:70:
76:12:2b:d3:af:23:6c:99:26:5c:6c:5c:56:81:4b:d4:4f:ad:
67:e4:fd:e3:c0:5b:76:e4:f7:2b:0d:5b:c7:42:19:a3:ed:ca:
24:b6:ce:52:0a:3c:bc:84:0f:ed:42:cb:f3:74:a6:64:1e:a1:
46:b3:05:41:9f:76:4c:8d:fe:46:15:cc:4a:39:17:58:a4:ab:
22:3f:cd:1c:7d:d1:0a:db:17:e2:55:4c:72:a1:0d:fe:d9:24:
88:3c:1f:08:37:ba:36:70:52:b4:df:43:67:4e:12:5e:7b:14:
e1:ab:93:cb:fd:1d:ac:c1:94:5d:35:11:ef:d4:f9:83:76:fe:
ef:43:f2:cd:3f:56:88:89:03:2b:4f:05:1a:da:a1:0f:ba:8e:
aa:46:e0:ba:07:f2:2a:23:76:5c:95:04:01:d0:63:c8:a6:c8:
f1:6f:bb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:45:26 2024 by rpki-client on console-fra.rpki-client.org