Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/E9YtD0hB4szoSVEszeRohn-7Zdo.roa
File: E9YtD0hB4szoSVEszeRohn-7Zdo.roa (raw, json)
Hash identifier: SwIrbcpc+EecNFWTzax5tfAzgoY3U0lXVFejcSpTj4M=
Subject key identifier: 13:D6:2D:0F:48:41:E2:CC:E8:49:51:2C:CD:E4:68:86:7F:BB:65:DA
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC80147D9DBC0C5D7C4A27AA30D21C310
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/E9YtD0hB4szoSVEszeRohn-7Zdo.roa
Signing time: Tue 02 Jan 2024 02:29:36 +0000
ROA not before: Tue 02 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31396
IP address blocks: 2a0c:b641:410::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:47:d9:db:c0:c5:d7:c4:a2:7a:a3:0d:21:c3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13d62d0f4841e2cce849512ccde468867fbb65da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:be:9d:7b:30:24:0c:8a:d4:2f:4b:e8:0a:d8:
f2:7d:db:4f:f3:da:49:81:80:b3:9a:3a:eb:47:81:
e4:76:b7:c7:37:4b:ad:b6:78:8a:21:2c:bd:af:a9:
2f:45:f1:48:01:b8:b4:31:d6:b3:a5:3a:64:a0:3a:
ae:33:59:f9:cc:30:13:32:1a:84:aa:c3:fd:03:e7:
2c:40:ef:a3:dd:af:2b:f3:9f:48:db:74:a0:7f:93:
d7:6f:54:58:77:2f:04:d7:d3:20:30:ec:b1:4c:78:
d0:50:28:ef:45:b2:e2:98:f9:ca:f5:96:8a:56:a9:
42:49:d7:df:db:1d:f2:8a:ed:65:c1:83:7d:54:94:
2e:3c:a7:ab:07:7a:4d:ae:35:8d:33:cf:9a:ca:cf:
ff:b0:a3:a3:b2:f0:0c:fc:b8:7b:be:51:e7:41:b4:
5b:b6:96:8d:26:49:d0:82:61:a9:62:b1:48:f0:6a:
ac:e8:dd:71:50:a2:16:af:a6:c0:95:41:da:e2:15:
82:d5:7e:b2:b5:3d:fe:38:99:cf:aa:e5:7d:62:32:
da:0c:0d:9f:e1:03:ab:0a:d8:c8:0e:a1:98:70:d0:
ea:f2:d5:8b:c1:df:24:65:5a:df:c1:30:d6:17:04:
60:c6:68:ca:2e:43:41:81:d2:40:7e:35:ef:e6:69:
a1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D6:2D:0F:48:41:E2:CC:E8:49:51:2C:CD:E4:68:86:7F:BB:65:DA
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/E9YtD0hB4szoSVEszeRohn-7Zdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:410::/44
Signature Algorithm: sha256WithRSAEncryption
16:e6:d9:91:b9:10:a7:e2:0d:3e:a2:7b:25:2a:f4:a6:0c:f5:
2a:ee:3d:70:70:a4:8d:fc:82:8f:92:c0:94:6f:60:c4:b8:1a:
7c:93:b6:6f:68:7d:86:e0:8f:a4:1d:85:cb:3c:38:ec:6e:dc:
e9:bd:96:8a:25:00:3b:ae:54:79:2b:e8:07:80:76:68:a2:f2:
b3:b0:20:fa:50:b0:eb:bf:af:44:12:f7:a7:74:0b:b4:29:87:
c8:12:2d:75:55:b5:4d:2e:91:e8:a0:e1:da:46:ce:c7:3f:4b:
c8:de:16:bc:d5:de:f2:c5:88:2b:bc:20:89:bd:4f:18:65:30:
e9:b0:cc:c2:08:ae:6b:0f:b7:d5:ff:5d:52:54:1d:d2:21:94:
f1:84:6d:0c:6c:77:44:49:cf:61:d4:ad:2e:16:12:f7:69:be:
38:54:3d:12:87:3d:8f:e0:2d:b7:64:bc:2e:f6:fe:15:a7:b3:
d8:a0:e6:d3:e3:2c:6f:4b:78:14:40:3c:25:ca:19:20:85:d4:
a6:84:f6:6e:e9:55:54:48:64:ac:d4:a8:44:6b:d8:0e:d4:db:
4b:7b:29:f4:35:4d:c0:1c:a0:9a:8a:bd:d0:47:81:fc:17:7b:
01:cd:b2:80:c8:99:5b:22:be:77:64:be:f4:a1:56:f8:00:02:
17:43:f4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:45:26 2024 by rpki-client on console-fra.rpki-client.org