Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BIkVD38BAvB_iU9rUEXZvV1nmV4.roa
File: BIkVD38BAvB_iU9rUEXZvV1nmV4.roa (raw, json)
Hash identifier: HuFXmeWMuE+wqRGLUVOjvqGA007P37gcNu6zglVWuW0=
Subject key identifier: 04:89:15:0F:7F:01:02:F0:7F:89:4F:6B:50:45:D9:BD:5D:67:99:5E
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC801690733C098E9F73990817EA9A8D1
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BIkVD38BAvB_iU9rUEXZvV1nmV4.roa
Signing time: Tue 02 Jan 2024 02:29:44 +0000
ROA not before: Tue 02 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208753
IP address blocks: 2a0c:b642:ace::/48 maxlen: 48
2a0c:b642:a00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:69:07:33:c0:98:e9:f7:39:90:81:7e:a9:a8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0489150f7f0102f07f894f6b5045d9bd5d67995e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0b:15:c7:14:af:d5:ae:d3:16:6d:30:98:a5:
c6:de:e9:b3:24:9b:b2:0c:32:dc:20:45:b3:4d:dd:
c7:3c:41:49:55:a4:06:94:7e:49:b7:65:f5:b0:e5:
2f:ef:e8:43:b2:f7:9e:a0:73:d0:2f:c9:6a:e1:33:
57:55:93:7a:6a:4b:60:5d:11:17:dd:82:b5:bf:12:
06:3c:52:d9:1d:76:f8:92:0c:4e:db:c1:e3:fd:bf:
70:4f:55:ca:58:55:44:82:b6:82:2a:1b:94:4d:e5:
28:79:fd:16:d8:3c:65:e5:dd:e2:b8:b7:d5:a1:6a:
15:af:31:c7:c5:8e:a7:3b:b3:07:dd:5d:c7:f4:dc:
1e:ec:44:89:99:31:11:36:b2:0f:0d:e7:9f:bb:6f:
61:e5:5d:b4:70:5f:99:bc:d5:5f:ee:53:5f:51:ea:
fc:a7:b1:51:da:5c:9f:b9:21:03:d4:74:de:05:43:
e9:fe:91:78:65:14:df:f6:56:44:e2:89:3e:01:00:
13:76:4f:3d:b1:bf:7a:5e:48:05:08:43:f5:17:0c:
43:26:c0:1d:64:ca:2b:f5:f8:07:14:9c:78:44:62:
d4:1d:f1:2d:a2:c1:fb:46:80:44:15:54:dd:57:9b:
57:e6:9a:fe:f9:17:50:94:38:d0:ab:4d:30:a9:bf:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:89:15:0F:7F:01:02:F0:7F:89:4F:6B:50:45:D9:BD:5D:67:99:5E
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BIkVD38BAvB_iU9rUEXZvV1nmV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:a00::/44
2a0c:b642:ace::/48
Signature Algorithm: sha256WithRSAEncryption
73:90:5c:10:3e:1b:66:13:c9:81:cc:f6:9b:e8:18:2f:27:50:
5f:d4:2c:07:77:fa:fb:a3:0b:af:b7:83:2a:c0:24:98:99:61:
b0:d8:47:44:14:12:82:ed:d7:c8:18:87:45:e9:39:fe:50:20:
e0:90:ad:a7:5a:6b:20:80:6d:4f:90:71:fb:a1:30:e3:01:a6:
73:a6:d8:14:92:2c:63:46:e9:5f:3e:7a:06:d8:3d:d0:2d:99:
64:50:d4:53:d0:d3:c6:ea:cd:54:ae:f0:1b:d1:24:7f:cb:0d:
f3:ee:9e:d6:a8:0f:f5:18:a4:79:4b:54:31:a1:97:2a:83:ea:
7f:c3:40:80:55:ec:20:52:25:e1:1e:5c:70:8f:e7:42:0a:3f:
89:e7:27:67:20:37:fc:9d:77:82:d1:dd:37:25:11:96:da:86:
c1:93:8b:f8:ee:51:26:be:81:91:40:3b:13:fe:47:fe:59:2b:
ec:79:01:ef:fe:6f:8e:e9:63:ba:f6:7a:39:73:1b:7b:85:b4:
3e:9a:d8:3c:b3:14:65:69:4d:39:d1:70:25:b4:93:8e:7c:dc:
ec:c5:93:94:f4:71:0d:de:71:14:2d:48:cc:a8:4c:4a:73:02:
b8:60:99:37:21:c0:c5:da:2f:a8:ad:77:39:6d:ad:98:b6:c3:
2e:6b:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:03:09 2024 by rpki-client on console-ams.rpki-client.org