Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/D5ejPdib-pF7Wezy1XQU5VV3fDg.roa
File: D5ejPdib-pF7Wezy1XQU5VV3fDg.roa (raw, json)
Hash identifier: g+sU7pntdzAI9vzHzJEwP3kFG7y833JVQpfnb0EcIew=
Subject key identifier: 0F:97:A3:3D:D8:9B:FA:91:7B:59:EC:F2:D5:74:14:E5:55:77:7C:38
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01928C3E64184DCA46F6985FEE4DB10168B5
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/D5ejPdib-pF7Wezy1XQU5VV3fDg.roa
Signing time: Mon 14 Oct 2024 18:15:51 +0000
ROA not before: Mon 14 Oct 2024 18:15:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214043
IP address blocks: 2a0c:b641:d30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8c:3e:64:18:4d:ca:46:f6:98:5f:ee:4d:b1:01:68:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 14 18:15:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f97a33dd89bfa917b59ecf2d57414e555777c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:45:25:ba:77:f8:76:7c:4c:44:4f:22:f1:45:
81:ad:6b:7d:2a:00:d1:54:f7:2f:6d:cf:99:01:21:
32:d8:71:2a:cb:15:b2:fe:c7:79:72:ac:9e:58:97:
f3:2e:b5:7e:09:df:a0:44:f4:00:6d:3a:20:e3:13:
7f:b4:03:51:65:7f:26:45:17:d0:c9:b2:13:79:95:
e3:8e:01:e6:df:41:07:0b:9c:5f:48:0c:3c:e8:20:
9f:19:54:8c:90:3a:4e:51:a1:c9:ea:17:08:1b:65:
92:91:5e:61:55:ad:0d:56:b2:f7:49:cc:bf:94:42:
a4:4d:20:86:db:22:64:4d:e2:2b:1f:4a:ac:4c:e5:
79:b1:be:eb:5f:15:93:89:c5:82:e9:d5:2a:90:ca:
0d:73:26:35:b3:92:24:89:44:b9:3d:7b:83:fe:f3:
11:ae:d2:54:ac:05:c7:78:47:28:10:1a:90:47:a7:
f6:8a:37:02:7a:47:cb:13:72:47:30:a3:b3:84:ac:
3f:59:43:4b:24:07:23:c6:d3:f2:51:f2:5f:3c:52:
70:93:93:a9:4c:4a:43:ef:ef:a8:09:b8:69:28:2e:
48:f6:15:05:98:1c:7d:ca:74:ba:2d:a0:a3:f6:2c:
ed:7f:37:53:55:15:db:e4:05:42:e3:8c:6e:8b:c9:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:97:A3:3D:D8:9B:FA:91:7B:59:EC:F2:D5:74:14:E5:55:77:7C:38
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/D5ejPdib-pF7Wezy1XQU5VV3fDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:d30::/44
Signature Algorithm: sha256WithRSAEncryption
3f:6f:03:0b:4b:fd:2f:5e:7a:68:9c:56:95:a4:e3:a2:4f:be:
36:33:89:31:48:b1:9e:25:cd:94:73:ed:c1:ea:cf:0e:8b:c8:
f9:e1:33:ef:69:6e:df:73:ed:52:f9:72:cd:97:f8:da:3c:29:
f8:e7:5c:3a:b8:32:4e:b0:2b:4f:a9:de:06:d2:49:22:42:66:
f8:04:6a:37:74:87:5b:91:5a:74:65:0e:38:44:30:fb:21:87:
9d:ff:26:1a:94:59:3a:51:49:14:a0:aa:dc:64:e1:ba:c1:67:
52:bd:61:31:35:22:c3:40:14:0d:d5:5b:ec:a3:2d:98:de:06:
28:17:67:0e:28:05:12:3d:6c:ba:96:81:a6:2c:1f:ea:c5:be:
24:11:9b:0f:b6:cf:fe:94:c6:e8:fe:05:e9:71:4c:10:d9:3c:
2a:0f:b7:7b:66:98:84:82:2a:a4:a3:b5:0f:7b:ee:25:cc:69:
4c:f6:39:4c:38:7f:6d:a1:67:70:d8:2e:b0:08:dc:dd:54:54:
94:e2:36:c9:86:52:d1:13:4c:7e:85:be:50:57:7d:7a:11:5b:
aa:60:f0:df:53:01:61:75:f6:38:6f:03:b4:cf:74:50:44:b8:
a1:45:35:1a:9a:df:30:25:fb:16:8c:47:92:bb:9e:a2:7e:44:
37:ff:00:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:17 2024 by rpki-client on console-ams.rpki-client.org