Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/API0TDGNuk-_-9asJGyHHMzPJj0.roa
File: API0TDGNuk-_-9asJGyHHMzPJj0.roa (raw, json)
Hash identifier: gK4DWToFhzaaQNIStR/pQisri9P9CLk9bnS0zp7b3Q8=
Subject key identifier: 00:F2:34:4C:31:8D:BA:4F:BF:FB:D6:AC:24:6C:87:1C:CC:CF:26:3D
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC80160DA1BB793A93B2CE3359EE809E9
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/API0TDGNuk-_-9asJGyHHMzPJj0.roa
Signing time: Tue 02 Jan 2024 02:29:42 +0000
ROA not before: Tue 02 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206425
IP address blocks: 2a0c:b641:820::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:60:da:1b:b7:93:a9:3b:2c:e3:35:9e:e8:09:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00f2344c318dba4fbffbd6ac246c871ccccf263d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:bc:17:98:8a:44:c4:b6:1e:d1:8c:dd:07:
35:c7:d4:e5:1b:2d:8a:38:58:65:0f:60:6e:3c:22:
50:19:0e:0b:07:a2:fb:5c:20:e8:8b:e7:71:b1:df:
a8:44:2f:9b:dc:4f:38:b8:1b:c6:55:80:d3:e5:d4:
14:83:e1:96:88:d5:8d:ec:72:70:6e:88:49:91:21:
e7:33:5c:e3:fa:91:7d:31:8a:d2:58:d8:0c:4d:69:
78:e7:89:d3:d5:12:43:79:34:d2:29:84:23:a4:ab:
d4:8f:20:7d:5e:03:29:05:1c:0e:cb:1e:61:e2:68:
6f:d2:33:22:b2:2b:fd:19:63:a7:cd:8b:4b:8a:1b:
4f:a8:84:e0:78:42:ed:fa:6e:f5:be:66:84:6a:90:
8f:d1:2c:3e:8a:f2:f0:a6:5b:94:02:bb:60:12:43:
00:76:5e:17:5f:6c:fe:38:bc:91:6b:db:e3:cb:55:
cc:6e:76:a3:92:c9:ed:7f:46:10:82:63:91:4b:18:
bc:41:a8:12:58:f8:91:a7:52:f0:86:02:26:dd:f6:
bf:bd:1a:2c:0a:cf:7e:1e:f2:64:90:d4:b5:ab:65:
cd:07:53:68:41:32:d9:b8:0f:7e:ec:4f:42:3b:6c:
90:82:05:82:6e:7e:57:e0:2d:74:68:4a:c4:f4:f7:
9c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F2:34:4C:31:8D:BA:4F:BF:FB:D6:AC:24:6C:87:1C:CC:CF:26:3D
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/API0TDGNuk-_-9asJGyHHMzPJj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:820::/44
Signature Algorithm: sha256WithRSAEncryption
48:96:c6:8f:ac:e5:86:df:0f:98:65:fa:70:19:0e:86:91:f2:
3b:4f:ee:d7:3f:63:74:af:ca:fb:be:2a:2d:a4:73:32:06:a3:
be:b9:36:9d:0a:c3:b8:83:42:e6:6d:fd:23:60:97:09:d0:f4:
ba:82:2b:87:34:20:00:15:e2:30:45:46:ea:e4:1b:8a:35:72:
d5:52:39:f2:55:d5:7b:75:7e:eb:d2:13:6f:e3:fb:7e:56:9b:
80:14:85:6c:46:7f:f0:31:9b:86:06:f1:fd:a3:96:c2:1d:f8:
2e:c7:e6:1f:8c:d6:28:9d:2f:c8:d7:e3:e8:a1:e5:04:2d:7e:
45:56:7d:a3:99:32:1f:7e:a5:1b:78:96:b5:9d:a2:b1:39:59:
7e:0b:81:1e:1d:d5:e7:52:75:96:b4:a0:1c:ec:ad:75:d1:41:
37:64:55:38:36:a3:07:8a:1c:ac:a6:83:ed:74:69:49:c3:cb:
83:9f:3c:07:98:65:9d:d8:0e:b9:e6:26:5a:72:b5:3e:84:df:
c8:20:ad:dc:61:e7:dc:72:72:53:69:41:96:b3:73:2a:47:00:
30:82:50:d5:6d:d6:76:e0:1c:04:e8:8e:bc:b2:6f:b9:17:12:
b0:60:7e:b0:d1:49:1a:59:54:09:d4:9f:09:c2:c0:56:25:02:
d6:b1:04:1c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIAWDaG7eTqTss4zWe6AnpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQwMTAyMDIyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGYyMzQ0YzMxOGRiYTRmYmZmYmQ2YWMyNDZjODcxY2NjY2YyNjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbe8F5iKRMS2HtGM3Qc1x9TlGy2K
OFhlD2BuPCJQGQ4LB6L7XCDoi+dxsd+oRC+b3E84uBvGVYDT5dQUg+GWiNWN7HJw
bohJkSHnM1zj+pF9MYrSWNgMTWl454nT1RJDeTTSKYQjpKvUjyB9XgMpBRwOyx5h
4mhv0jMisiv9GWOnzYtLihtPqITgeELt+m71vmaEapCP0Sw+ivLwpluUArtgEkMA
dl4XX2z+OLyRa9vjy1XMbnajksntf0YQgmORSxi8QagSWPiRp1LwhgIm3fa/vRos
Cs9+HvJkkNS1q2XNB1NoQTLZuA9+7E9CO2yQggWCbn5X4C10aErE9PecdwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFADyNEwxjbpPv/vWrCRshxzMzyY9MB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvQVBJMFRER051ay1fLTlhc0pHeUhITXpQSmowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQgg
MA0GCSqGSIb3DQEBCwUAA4IBAQBIlsaPrOWG3w+YZfpwGQ6GkfI7T+7XP2N0r8r7
viotpHMyBqO+uTadCsO4g0Lmbf0jYJcJ0PS6giuHNCAAFeIwRUbq5BuKNXLVUjny
VdV7dX7r0hNv4/t+VpuAFIVsRn/wMZuGBvH9o5bCHfgux+YfjNYonS/I1+PooeUE
LX5FVn2jmTIffqUbeJa1naKxOVl+C4EeHdXnUnWWtKAc7K110UE3ZFU4NqMHihys
poPtdGlJw8uDnzwHmGWd2A655iZacrU+hN/IIK3cYefccnJTaUGWs3MqRwAwglDV
bdZ24BwE6I68sm+5FxKwYH6w0UkaWVQJ1J8JwsBWJQLWsQQc
-----END CERTIFICATE-----
Generated at Sat May 4 09:03:09 2024 by rpki-client on console-ams.rpki-client.org