Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5LMLbKeynD9180LMtI74s75ZQGA.roa
File: 5LMLbKeynD9180LMtI74s75ZQGA.roa (raw, json)
Hash identifier: z4HiQ/+KpMi5ZULLXA24wyls90iIyLS576QaESOp6IA=
Subject key identifier: E4:B3:0B:6C:A7:B2:9C:3F:75:F3:42:CC:B4:8E:F8:B3:BE:59:40:60
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC801620ACF43772A3796FBB49B1E3308
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5LMLbKeynD9180LMtI74s75ZQGA.roa
Signing time: Tue 02 Jan 2024 02:29:42 +0000
ROA not before: Tue 02 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206639
IP address blocks: 2a0c:b641:7c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:62:0a:cf:43:77:2a:37:96:fb:b4:9b:1e:33:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4b30b6ca7b29c3f75f342ccb48ef8b3be594060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:01:d4:54:c6:97:28:00:57:7a:69:42:38:28:
85:1c:90:ce:62:26:ec:9e:3a:c2:03:2f:fd:9c:60:
82:76:bc:b9:63:1b:c3:0b:27:0c:62:09:c8:cf:8b:
ce:03:b0:6e:e5:4b:70:3a:27:85:38:2f:b7:2e:52:
78:e1:3e:ea:e4:87:35:64:4f:8d:89:d9:ec:24:fa:
95:a8:df:96:f1:df:2d:3e:28:87:c8:ef:bf:e4:f1:
bf:6a:ba:12:65:3a:fb:16:51:d0:ac:bc:5b:c4:05:
66:0d:09:c0:9c:c3:8b:98:88:ae:b7:f7:69:e8:33:
cb:a0:4b:76:70:01:a7:e5:f7:ef:8e:cf:0e:77:7a:
2d:de:12:00:22:68:79:7e:f6:29:69:59:47:fb:d9:
76:c0:e0:2d:4c:06:bf:32:61:3f:aa:9f:1e:ad:e3:
64:99:ab:c5:d1:26:ca:16:61:01:cd:5e:95:a2:5a:
63:2c:9f:58:10:76:4b:91:71:86:a8:77:35:98:ca:
cc:c3:0a:fd:7a:de:88:6b:b9:19:30:87:77:6c:06:
78:5a:64:b6:41:b0:6c:db:a4:24:18:81:61:cb:94:
13:86:60:51:8a:e4:02:49:6b:d6:cc:64:7f:cf:b9:
fe:92:74:b8:60:1d:97:4c:d1:f8:90:0b:a7:70:12:
fd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B3:0B:6C:A7:B2:9C:3F:75:F3:42:CC:B4:8E:F8:B3:BE:59:40:60
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5LMLbKeynD9180LMtI74s75ZQGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:7c0::/44
Signature Algorithm: sha256WithRSAEncryption
28:1d:76:ec:64:04:0d:76:d5:ef:82:a3:91:86:35:bd:48:0f:
a1:76:c5:fb:b7:f6:70:d0:1e:35:26:b4:b9:35:d1:d5:37:b9:
5f:43:53:a7:29:77:d4:de:86:4e:ac:cb:08:45:d3:2e:f9:f8:
a2:c2:41:4e:a7:27:89:9e:b2:3d:b6:64:f7:6e:e2:1b:9d:64:
70:37:21:72:b6:c1:c5:96:91:62:b4:38:11:b4:77:a0:7f:02:
38:88:1d:64:d9:a5:f7:2f:08:a5:41:e2:60:08:ca:09:ea:fc:
fa:ca:e4:19:09:03:33:88:ec:a4:1c:07:86:a3:15:a2:d1:29:
f9:59:44:b3:8b:a8:fb:95:d3:7f:38:86:69:88:a4:0b:82:d3:
7f:43:64:76:e8:e9:7a:a5:0e:c0:42:07:95:02:41:e4:6b:b3:
38:d7:f5:ad:45:d7:50:b0:1b:cc:f6:13:17:99:4e:7e:0a:84:
1b:5f:ae:88:57:64:c5:89:9e:12:20:a4:ae:86:2a:a7:4a:93:
08:29:f8:5f:9a:bf:a5:9e:16:f6:61:87:be:47:df:2f:0a:2b:
0b:5e:cd:f7:7f:3e:78:3b:c5:2b:60:ff:a7:96:79:28:6e:f3:
18:39:bc:08:51:74:42:a1:b3:7f:f3:9b:65:8c:74:45:e0:03:
4a:97:bc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:45:26 2024 by rpki-client on console-fra.rpki-client.org