Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/JN5Kq3iA7dnzPvAb4_LHjgzwUqs.roa
File: JN5Kq3iA7dnzPvAb4_LHjgzwUqs.roa (raw, json)
Hash identifier: HMjSY1JKJiMyDbtWzRedjWY4Xqifr7jmYP4NpcsAz5s=
Subject key identifier: 24:DE:4A:AB:78:80:ED:D9:F3:3E:F0:1B:E3:F2:C7:8E:0C:F0:52:AB
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC8014BB494EA50AFC55222DF9ACEE9F7
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/JN5Kq3iA7dnzPvAb4_LHjgzwUqs.roa
Signing time: Tue 02 Jan 2024 02:29:37 +0000
ROA not before: Tue 02 Jan 2024 02:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47757
IP address blocks: 2a0c:b641:aa0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:4b:b4:94:ea:50:af:c5:52:22:df:9a:ce:e9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24de4aab7880edd9f33ef01be3f2c78e0cf052ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:07:6a:a5:18:e4:60:ba:97:43:d4:04:d6:
45:76:d1:de:4c:af:e2:11:a3:da:eb:a1:80:b9:b7:
c4:49:82:e9:14:6d:e2:da:e4:62:1d:10:9c:76:2b:
cf:fa:ce:34:70:8d:50:e0:53:96:16:1e:0a:c2:28:
eb:42:bb:0a:dc:3f:26:5e:a1:74:51:23:60:db:90:
b3:d3:41:e1:0f:99:74:37:04:91:c9:30:54:8b:a4:
0c:7f:ad:8d:43:e6:1a:a4:17:d4:2c:f6:1c:8f:20:
69:e1:5c:3d:68:c1:f5:e1:7a:51:bd:7a:5c:bf:a4:
ab:d9:1d:96:fd:a1:e5:70:70:b8:39:52:20:f4:0a:
18:0b:3c:01:9c:10:85:a5:72:4a:7a:05:ff:bf:c3:
4b:4a:15:b4:a6:ac:99:97:6a:4b:16:53:ea:54:7c:
dd:aa:3d:3c:6b:54:fb:14:c9:c2:e7:37:06:f1:1e:
bd:a4:12:d5:07:11:3b:13:c7:44:8f:40:ad:70:85:
64:cc:d3:f2:77:e7:99:88:7d:77:7e:9f:df:d4:85:
a1:ed:76:0b:c7:0b:e6:06:3e:80:cc:40:1d:69:49:
b3:cb:72:ed:a4:55:43:72:10:7d:4d:5f:31:aa:eb:
50:2d:26:9e:0c:88:d9:aa:af:91:a2:99:b7:c2:c1:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DE:4A:AB:78:80:ED:D9:F3:3E:F0:1B:E3:F2:C7:8E:0C:F0:52:AB
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/JN5Kq3iA7dnzPvAb4_LHjgzwUqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:aa0::/44
Signature Algorithm: sha256WithRSAEncryption
25:b9:18:e9:b8:9b:d4:9f:c8:ca:a3:2a:cf:24:c8:34:b4:64:
ae:58:2d:14:65:47:ae:b1:c2:01:76:c0:07:7f:9c:bf:dd:12:
2d:c2:d1:85:f0:7f:87:33:e0:ed:41:f7:66:97:3d:3a:36:1c:
0d:46:e1:c9:be:82:f2:c8:5a:b5:e0:7e:37:52:36:58:92:d1:
01:5d:8f:4d:d9:68:80:df:29:61:ba:ed:3b:4c:43:b9:db:0b:
4a:59:9f:f6:86:35:94:58:db:50:11:4b:e4:55:4f:b4:b1:b1:
28:be:a5:ad:56:ed:e7:49:52:fc:f9:98:fc:83:6f:e3:f1:96:
ad:28:c3:9a:b3:38:ef:0c:fd:e4:ef:fb:8c:9f:a4:5b:17:73:
9c:56:27:11:db:f1:67:72:ba:bd:de:a3:d5:00:37:73:b9:40:
5c:1a:1a:bd:88:b5:48:c5:2f:3b:d0:91:9a:9b:4f:38:0f:5e:
1c:2c:f6:9d:5d:7a:5d:ce:c4:af:ef:19:23:1c:27:fd:60:08:
92:4a:20:6e:8f:84:07:b7:88:9d:5e:19:b2:68:25:1e:cd:84:
74:57:9d:89:d8:23:08:81:15:a8:5e:c7:cb:08:29:d1:b1:05:
a5:81:c6:0d:c4:d9:a9:68:a2:8e:1e:2a:b7:a9:0f:8b:d3:3a:
9e:cd:fd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:02:37 2024 by rpki-client on console-ams.rpki-client.org