Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5iuSHSIzwTZHAk_MHUUrz2ObqxA.roa
File: 5iuSHSIzwTZHAk_MHUUrz2ObqxA.roa (raw, json)
Hash identifier: iDMmRAPGRUh132Do8Af4j4xdJFK/YJYCKcoyW6vj03A=
Subject key identifier: E6:2B:92:1D:22:33:C1:36:47:02:4F:CC:1D:45:2B:CF:63:9B:AB:10
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019344297FEC584BFE98A6D34A5D590B8850
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5iuSHSIzwTZHAk_MHUUrz2ObqxA.roa
Signing time: Tue 19 Nov 2024 11:23:10 +0000
ROA not before: Tue 19 Nov 2024 11:23:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a0c:b641:20::/44 maxlen: 48
2a0c:b641:a0::/44 maxlen: 48
2a0c:b641:130::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:29:7f:ec:58:4b:fe:98:a6:d3:4a:5d:59:0b:88:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Nov 19 11:23:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e62b921d2233c13647024fcc1d452bcf639bab10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:95:6a:b8:3f:87:38:3a:fd:0b:bf:05:46:40:
9a:10:85:08:e7:b6:0b:f8:e7:4c:07:fe:a7:9e:d9:
6d:6e:26:27:c3:20:b7:ab:d0:77:a2:40:23:4d:19:
56:6a:31:6f:d4:8a:67:a3:8e:0e:75:4d:9e:bf:97:
d9:08:46:fc:29:d4:a3:38:32:0c:d1:92:6d:63:83:
ad:68:fb:cb:92:0b:e1:cb:6f:0d:2e:f8:55:5d:66:
68:eb:9b:5c:f2:a1:89:9b:55:9d:f7:d7:08:31:c8:
8f:94:f4:75:0f:ca:9a:f0:8d:5f:a9:91:95:60:b0:
44:50:04:6f:c7:3d:99:f4:3d:28:59:38:6b:76:58:
36:14:64:1f:99:a6:f8:72:27:f9:56:85:84:43:3a:
f0:ca:3b:8e:c6:82:fb:d8:9b:7c:d5:78:5e:83:e3:
fe:3b:21:d9:b8:16:c5:25:f5:34:75:42:3e:aa:5f:
9d:a4:69:13:ba:00:21:d1:0b:b0:2a:7f:05:2c:94:
26:30:b9:b1:fd:92:9e:6f:5b:a9:49:5e:7f:c1:0f:
a9:42:d6:af:d0:20:87:77:65:45:0c:82:a2:da:07:
ad:c5:59:2e:0a:22:1e:18:f0:b1:48:4b:39:ac:8c:
b1:cc:f0:99:fc:72:51:17:e2:33:cf:53:e3:85:71:
c6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2B:92:1D:22:33:C1:36:47:02:4F:CC:1D:45:2B:CF:63:9B:AB:10
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5iuSHSIzwTZHAk_MHUUrz2ObqxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:20::/44
2a0c:b641:a0::/44
2a0c:b641:130::/44
Signature Algorithm: sha256WithRSAEncryption
86:9c:fd:06:a6:59:54:ee:81:b6:61:4a:8f:8e:69:fb:d7:45:
4d:86:ba:ed:7e:b7:ed:65:ff:d9:c0:04:5c:d2:d5:02:5b:7d:
6b:a4:a5:57:bd:01:34:f3:e2:01:4a:9c:df:4a:8f:0d:d1:9c:
41:07:be:7d:92:bc:18:04:6e:5c:a6:80:0f:cb:cd:39:61:d6:
4e:24:7d:87:73:d8:c0:46:d2:8f:c0:95:e4:a6:11:4f:58:03:
ce:f4:de:2c:01:12:df:55:42:75:8e:ba:ad:19:0c:42:e6:ba:
55:6a:bb:84:38:f3:25:11:1f:84:4c:fe:e1:44:f6:f6:15:8b:
60:3c:e9:4f:da:a1:fe:c6:c5:a0:42:21:d8:f5:db:31:2a:c6:
41:97:8f:90:a2:2b:f8:7e:60:ff:e3:9b:77:0d:09:bd:0c:e3:
e8:84:f1:f3:38:84:cc:1c:e7:b6:6a:57:b5:64:70:79:e6:6b:
dd:49:1a:a4:1f:ff:9a:56:f6:33:50:df:b4:d3:df:16:2d:ba:
95:b8:0a:e8:0c:e2:5a:ad:90:54:83:e3:5e:2f:ce:73:a0:03:
2a:ac:1f:f2:d4:41:2f:2e:78:c0:c2:6f:19:ff:07:5f:fa:eb:
2d:f7:9c:c4:e4:f2:3c:e3:52:83:09:ed:50:89:f9:d1:94:c8:
9f:01:bf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:20:20 2024 by rpki-client on console-fra.rpki-client.org