Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8aoGuA85XQJPBdAx1qPCtdfv2K4.roa
File: 8aoGuA85XQJPBdAx1qPCtdfv2K4.roa (raw, json)
Hash identifier: AaPMjdmP6T17TK0GFLrkwmsnuOUw97d0wxuCP/uR7Ls=
Subject key identifier: F1:AA:06:B8:0F:39:5D:02:4F:05:D0:31:D6:A3:C2:B5:D7:EF:D8:AE
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC8015B29CD0ADA5D7EB27C9CFA81F3C1
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8aoGuA85XQJPBdAx1qPCtdfv2K4.roa
Signing time: Tue 02 Jan 2024 02:29:41 +0000
ROA not before: Tue 02 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203226
IP address blocks: 2a0c:b641:350::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:5b:29:cd:0a:da:5d:7e:b2:7c:9c:fa:81:f3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1aa06b80f395d024f05d031d6a3c2b5d7efd8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d5:68:d3:e2:51:50:41:21:bc:96:10:ae:8e:
56:ab:b4:2c:c9:fd:0d:35:a1:d0:f2:d0:06:f9:37:
e5:44:1c:a9:1c:86:15:b1:4a:a4:15:c1:8d:b5:b6:
ed:9d:db:2d:1c:98:7a:87:65:42:4d:35:f0:77:45:
42:3d:a8:95:f8:d7:40:99:11:33:69:ce:fe:2c:2b:
25:b8:84:97:c9:e4:a0:0f:11:f0:e8:b0:7d:fb:32:
69:e6:ab:e4:3b:45:bf:31:68:08:19:4a:c4:40:8c:
ad:6b:eb:f6:49:0b:a7:e0:61:8e:5e:a0:ad:e0:dd:
8c:f2:7e:96:f2:61:49:2f:44:ab:fd:8a:ae:15:dd:
de:1e:c7:aa:8c:2a:65:6a:96:5b:e5:0b:f6:af:00:
f2:52:46:14:01:d7:4c:36:04:b2:67:a1:a0:95:7d:
bc:7d:93:72:1a:73:d3:e7:a5:8f:d3:bf:ee:7d:48:
2d:df:b9:18:a3:0d:98:a1:be:d1:f5:0f:34:9a:a3:
1a:1e:f4:57:06:b0:37:3b:df:5a:68:b1:09:cf:a2:
46:0b:3e:88:b6:d2:20:c6:fc:3b:31:06:66:04:a1:
e9:cc:b3:f4:7e:05:65:08:37:04:71:85:a6:09:95:
95:67:97:3c:92:a4:d3:48:72:94:6b:99:83:f8:ec:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AA:06:B8:0F:39:5D:02:4F:05:D0:31:D6:A3:C2:B5:D7:EF:D8:AE
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8aoGuA85XQJPBdAx1qPCtdfv2K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:350::/44
Signature Algorithm: sha256WithRSAEncryption
87:35:af:e7:bc:21:f6:3a:db:45:b1:ba:a4:d2:2e:ba:02:b6:
4b:2f:22:95:a4:d8:c2:9f:21:18:3a:e8:51:d5:af:8c:04:97:
09:b0:8d:b2:13:e7:b8:f5:95:14:59:2c:c2:0b:91:f3:e9:45:
9c:cd:1b:2e:1e:39:4b:c2:91:9d:68:2f:b4:e3:b1:8b:9f:3d:
bf:f7:05:33:16:60:76:6c:88:d7:93:70:08:07:4f:74:db:76:
77:8b:4b:74:b7:82:ad:37:ab:27:90:c3:6f:4e:52:c4:ed:30:
eb:bc:15:fd:77:6d:20:72:22:dd:42:d8:c3:48:fe:c5:f6:6c:
34:f9:5d:44:a3:8f:73:aa:3b:9e:41:f5:63:51:6c:61:46:9c:
51:f9:b0:3a:0d:8b:9f:69:e6:29:0f:c9:aa:4e:4a:aa:5a:77:
8d:97:22:6f:4d:f9:f6:37:4c:5a:bf:f7:57:6b:5e:43:78:7f:
a7:e1:48:05:f7:c1:e2:d3:09:39:2a:5e:05:8a:14:5d:43:fc:
7f:fc:20:0f:f3:da:cb:d8:56:ff:b0:e7:61:4e:25:f8:d6:8c:
b4:19:72:0c:b6:38:ac:cf:56:23:78:3b:f5:26:0f:b1:00:08:
4d:37:57:f9:37:11:fc:92:6f:b0:4a:9b:c9:09:8d:a3:d2:d2:
fa:2a:62:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 17:54:11 2024 by rpki-client on console-ams.rpki-client.org