Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/KHlYI0iCsGBOLXqUVE8qJELgnd4.roa
File: KHlYI0iCsGBOLXqUVE8qJELgnd4.roa (raw, json)
Hash identifier: hf0zn7Gu5/A+y5Lh9+X2d7YUK/VpmDM44xTFgmLIelY=
Subject key identifier: 28:79:58:23:48:82:B0:60:4E:2D:7A:94:54:4F:2A:24:42:E0:9D:DE
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC8014B28533E7066E44BDE665E9941EC
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/KHlYI0iCsGBOLXqUVE8qJELgnd4.roa
Signing time: Tue 02 Jan 2024 02:29:37 +0000
ROA not before: Tue 02 Jan 2024 02:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43927
IP address blocks: 2a0c:b642:1a06::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:4b:28:53:3e:70:66:e4:4b:de:66:5e:99:41:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=287958234882b0604e2d7a94544f2a2442e09dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:56:b5:23:5a:99:f9:9b:09:a2:4a:8c:56:9a:
49:69:64:c8:9c:fd:64:46:12:11:04:1a:2e:75:c2:
60:08:bc:38:46:21:8c:eb:6d:c3:fe:e3:9a:0f:d8:
45:36:92:da:18:69:9b:8c:33:d3:00:12:82:a1:13:
89:4e:e2:2a:36:47:a2:91:cd:46:a4:32:c5:d6:a9:
e0:38:9e:56:ce:d3:46:7b:85:ed:1d:ae:e0:35:c6:
78:fa:6f:2c:7e:65:d3:49:e3:70:2a:37:44:c5:3d:
c0:b0:c1:7f:dc:62:ef:81:e5:8f:23:11:e0:22:0c:
1a:09:37:0b:1e:60:63:ae:f4:7c:89:3d:ad:08:9b:
10:da:42:83:cb:d1:2a:b6:e8:35:8b:45:92:2a:6a:
17:b0:07:a8:aa:ca:a5:0c:de:f9:6c:01:6f:8b:dc:
da:02:a4:57:2e:41:49:d9:49:ca:76:73:92:cc:37:
3f:fa:71:fb:29:65:f4:d4:06:79:c4:17:9d:de:ec:
5b:b8:10:cd:55:5c:6b:9a:81:9c:54:9b:f2:2d:81:
3e:6b:b4:46:1e:2d:4a:bd:f4:9c:30:0e:d6:53:c0:
06:32:34:0e:8f:61:a0:03:ca:cb:63:0d:1e:27:e6:
59:81:77:d4:9f:a6:67:fb:0b:69:0b:c5:8b:8c:aa:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:79:58:23:48:82:B0:60:4E:2D:7A:94:54:4F:2A:24:42:E0:9D:DE
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/KHlYI0iCsGBOLXqUVE8qJELgnd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a06::/48
Signature Algorithm: sha256WithRSAEncryption
86:ba:34:11:a6:7f:3f:14:e3:e3:3e:2d:35:80:f1:f5:72:d4:
39:5a:50:d6:b4:7a:57:cb:60:d2:20:b9:4a:a6:14:a7:01:c2:
c2:cb:21:03:1d:67:26:32:c8:f4:eb:72:ac:09:00:bd:d3:2a:
fd:0a:09:47:cc:f2:46:a5:67:60:cc:5c:ae:87:70:30:d2:9b:
a2:0b:6c:77:c6:b5:a3:dd:cc:9a:5d:bd:2d:6c:43:21:a2:3e:
4a:e9:52:a1:45:2c:3a:78:76:7f:8a:e4:14:57:84:ab:64:62:
34:b9:4f:4c:62:e9:58:d5:f3:30:3b:aa:8c:b3:49:81:60:44:
37:d1:30:e8:38:36:c7:89:60:de:db:57:49:d0:0c:8e:e7:86:
2f:99:9d:8d:61:af:94:b0:4d:4b:70:b6:1d:84:88:99:6e:e4:
27:cf:27:de:37:b9:89:f4:32:5b:f9:3c:b1:5f:78:49:83:c8:
e4:4f:e0:ba:b3:4b:fb:73:8b:8a:ce:9c:43:ad:fa:c8:ed:4f:
34:4d:57:80:ea:a9:43:dd:4e:c8:cd:69:6b:92:be:13:a3:1f:
cc:46:e2:49:73:24:30:d5:96:79:63:57:f0:14:43:e4:ba:2c:
6b:9b:d9:e0:40:f7:91:6b:7d:5c:42:a5:9a:48:1a:f5:85:cd:
aa:33:3f:14
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIAUsoUz5wZuRL3mZemUHsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQwMTAyMDIyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODc5NTgyMzQ4ODJiMDYwNGUyZDdhOTQ1NDRmMmEyNDQyZTA5ZGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkla1I1qZ+ZsJokqMVppJaWTInP1k
RhIRBBoudcJgCLw4RiGM623D/uOaD9hFNpLaGGmbjDPTABKCoROJTuIqNkeikc1G
pDLF1qngOJ5WztNGe4XtHa7gNcZ4+m8sfmXTSeNwKjdExT3AsMF/3GLvgeWPIxHg
IgwaCTcLHmBjrvR8iT2tCJsQ2kKDy9Eqtug1i0WSKmoXsAeoqsqlDN75bAFvi9za
AqRXLkFJ2UnKdnOSzDc/+nH7KWX01AZ5xBed3uxbuBDNVVxrmoGcVJvyLYE+a7RG
Hi1KvfScMA7WU8AGMjQOj2GgA8rLYw0eJ+ZZgXfUn6Zn+wtpC8WLjKpvvQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCh5WCNIgrBgTi16lFRPKiRC4J3eMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvS0hsWUkwaUNzR0JPTFhxVVZFOHFKRUxnbmQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgy2QhoG
MA0GCSqGSIb3DQEBCwUAA4IBAQCGujQRpn8/FOPjPi01gPH1ctQ5WlDWtHpXy2DS
ILlKphSnAcLCyyEDHWcmMsj063KsCQC90yr9CglHzPJGpWdgzFyuh3Aw0puiC2x3
xrWj3cyaXb0tbEMhoj5K6VKhRSw6eHZ/iuQUV4SrZGI0uU9MYulY1fMwO6qMs0mB
YEQ30TDoODbHiWDe21dJ0AyO54YvmZ2NYa+UsE1LcLYdhIiZbuQnzyfeN7mJ9DJb
+TyxX3hJg8jkT+C6s0v7c4uKzpxDrfrI7U80TVeA6qlD3U7IzWlrkr4Tox/MRuJJ
cyQw1ZZ5Y1fwFEPkuixrm9ngQPeRa31cQqWaSBr1hc2qMz8U
-----END CERTIFICATE-----
Generated at Sat May 4 08:45:26 2024 by rpki-client on console-fra.rpki-client.org