Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Dkg1cV3ir7YtgLvGcWjxKdYYaZ0.roa
File: Dkg1cV3ir7YtgLvGcWjxKdYYaZ0.roa (raw, json)
Hash identifier: rG6S5/NVuLTQJhPnyKiWGileKvwv/GR02uNGTPa2Jw0=
Subject key identifier: 0E:48:35:71:5D:E2:AF:B6:2D:80:BB:C6:71:68:F1:29:D6:18:69:9D
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC8015CBA107A73BBCE40D61B8C6917F1
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Dkg1cV3ir7YtgLvGcWjxKdYYaZ0.roa
Signing time: Tue 02 Jan 2024 02:29:41 +0000
ROA not before: Tue 02 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204625
IP address blocks: 2a0c:b642:900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:5c:ba:10:7a:73:bb:ce:40:d6:1b:8c:69:17:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e4835715de2afb62d80bbc67168f129d618699d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:b4:6c:06:68:a3:da:57:a3:0a:f8:81:f2:
94:9b:88:f4:cd:54:03:4b:fb:f7:bd:80:96:87:1d:
20:18:18:59:49:68:5f:35:43:e3:16:ed:dc:cc:98:
92:7d:ba:82:18:b2:55:28:12:79:a2:57:d0:70:90:
ea:45:6d:2c:4e:d7:b2:8d:d7:01:9e:88:1e:2c:00:
84:ed:ef:06:da:50:9e:b2:6a:61:93:56:ae:a7:42:
90:70:b0:cf:b7:39:60:d1:ed:98:94:c9:31:35:33:
0b:90:18:9b:70:5a:87:e9:a6:bf:a2:a0:0a:12:05:
e5:ac:ab:05:1b:11:29:81:a1:6b:15:49:cc:46:8a:
47:cc:6c:ce:21:8a:af:d5:f7:9e:57:93:5f:6e:4d:
80:46:07:99:9e:b0:57:88:df:ed:c4:fa:ab:0c:60:
49:8c:aa:ab:78:fb:28:2a:8e:25:c7:1f:c0:b8:a2:
3d:9b:ba:3e:8f:9a:f7:c2:44:8c:7e:d1:f8:d2:30:
7c:41:99:e3:71:70:f6:92:26:63:68:1e:96:81:b1:
61:1c:aa:d7:6f:6d:ae:38:43:79:fe:94:a2:92:82:
9b:67:02:1d:c3:07:bd:a0:ca:5b:b8:f9:1e:ce:7b:
77:bf:55:63:50:a8:05:e4:81:fc:7d:00:55:a3:4f:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:48:35:71:5D:E2:AF:B6:2D:80:BB:C6:71:68:F1:29:D6:18:69:9D
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Dkg1cV3ir7YtgLvGcWjxKdYYaZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:900::/40
Signature Algorithm: sha256WithRSAEncryption
8b:f0:9a:ac:9f:2c:92:19:ab:3a:07:8a:0f:56:fb:63:92:a8:
9e:2a:16:0d:c3:b9:61:0e:f3:e4:7c:c9:7f:36:90:88:af:28:
de:7f:85:81:52:68:25:50:71:18:b6:f3:23:d6:cd:13:f2:7d:
60:62:8e:34:01:2c:22:d4:35:97:58:90:78:01:c9:91:5c:31:
c5:e9:2a:7e:6e:d6:4d:5e:ff:e4:ff:c0:c7:0d:5a:a2:40:1e:
90:1d:30:09:73:1e:a1:1d:9c:0a:74:5e:24:1d:02:be:8d:c0:
76:54:4d:5f:b0:35:84:25:1f:84:6a:d5:34:3d:0c:64:5a:93:
af:4e:5b:a8:6a:f2:f7:19:42:c7:c6:d3:a7:3d:9c:90:ae:67:
55:10:dc:7f:f4:d6:87:44:c6:08:28:c5:a8:03:63:ec:6f:94:
a9:2b:2b:ca:68:0f:af:e4:69:cd:da:48:b1:03:e4:4e:dc:0b:
f5:ea:6a:d0:d2:ab:90:66:ec:97:df:92:ea:e8:2e:58:dd:00:
96:c1:12:32:71:12:2d:b2:08:03:72:df:8a:83:ec:ed:75:c4:
4f:69:a1:ac:6f:8a:59:8a:2c:46:4b:fd:0e:ad:bb:d2:97:11:
49:38:4e:97:6d:b1:ce:0c:ec:3d:53:66:57:72:a3:00:7a:f3:
d0:53:9d:b5
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzIAVy6EHpzu85A1huMaRfxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQwMTAyMDIyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTQ4MzU3MTVkZTJhZmI2MmQ4MGJiYzY3MTY4ZjEyOWQ2MTg2OTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxje0bAZoo9pXowr4gfKUm4j0zVQD
S/v3vYCWhx0gGBhZSWhfNUPjFu3czJiSfbqCGLJVKBJ5olfQcJDqRW0sTteyjdcB
nogeLACE7e8G2lCesmphk1aup0KQcLDPtzlg0e2YlMkxNTMLkBibcFqH6aa/oqAK
EgXlrKsFGxEpgaFrFUnMRopHzGzOIYqv1feeV5Nfbk2ARgeZnrBXiN/txPqrDGBJ
jKqrePsoKo4lxx/AuKI9m7o+j5r3wkSMftH40jB8QZnjcXD2kiZjaB6WgbFhHKrX
b22uOEN5/pSikoKbZwIdwwe9oMpbuPkeznt3v1VjUKgF5IH8fQBVo09E1QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFA5INXFd4q+2LYC7xnFo8SnWGGmdMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvRGtnMWNWM2lyN1l0Z0x2R2NXanhLZFlZYVowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgy2Qgkw
DQYJKoZIhvcNAQELBQADggEBAIvwmqyfLJIZqzoHig9W+2OSqJ4qFg3DuWEO8+R8
yX82kIivKN5/hYFSaCVQcRi28yPWzRPyfWBijjQBLCLUNZdYkHgByZFcMcXpKn5u
1k1e/+T/wMcNWqJAHpAdMAlzHqEdnAp0XiQdAr6NwHZUTV+wNYQlH4Rq1TQ9DGRa
k69OW6hq8vcZQsfG06c9nJCuZ1UQ3H/01odExggoxagDY+xvlKkrK8poD6/kac3a
SLED5E7cC/XqatDSq5Bm7JffkuroLljdAJbBEjJxEi2yCANy34qD7O11xE9poaxv
ilmKLEZL/Q6tu9KXEUk4Tpdtsc4M7D1TZldyowB689BTnbU=
-----END CERTIFICATE-----
Generated at Sat May 4 08:45:26 2024 by rpki-client on console-fra.rpki-client.org