Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/OI86iKGe-L4NW8ZBJmaXh-rTHhA.roa
File: OI86iKGe-L4NW8ZBJmaXh-rTHhA.roa (raw, json)
Hash identifier: OXBoyB4y+tsHhFMfbefE2iXbBpPjcwrTjU88nMkMo9c=
Subject key identifier: 38:8F:3A:88:A1:9E:F8:BE:0D:5B:C6:41:26:66:97:87:EA:D3:1E:10
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC80157C957DEF402F8F66E8AD682C642
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/OI86iKGe-L4NW8ZBJmaXh-rTHhA.roa
Signing time: Tue 02 Jan 2024 02:29:40 +0000
ROA not before: Tue 02 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200202
IP address blocks: 2a0c:b641:940::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:57:c9:57:de:f4:02:f8:f6:6e:8a:d6:82:c6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=388f3a88a19ef8be0d5bc64126669787ead31e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:f5:16:b8:ef:e4:d2:fc:b1:6a:28:09:ea:
69:74:d4:e3:81:1a:49:52:c5:ed:44:08:03:9a:5b:
78:bb:68:45:09:35:5b:1d:94:c5:ac:d5:53:5a:86:
5c:a0:0e:ea:85:6a:66:48:82:a0:19:29:eb:a2:0e:
5c:76:cb:24:d5:dd:c6:78:a4:61:17:78:7f:22:fb:
78:80:11:bd:8c:8d:53:49:4c:93:76:22:e4:98:4d:
be:7f:5c:a3:dc:3b:56:2a:55:b3:9b:60:14:d5:f8:
6b:be:98:fb:8c:0c:87:9f:ef:f3:36:b3:7e:c2:d6:
62:fc:fd:cc:17:68:4c:14:59:69:f5:d4:29:66:77:
cf:32:9f:f9:2f:9f:95:47:3d:e2:05:8f:b5:a0:6c:
a5:e2:aa:f2:57:52:50:80:df:01:ab:bf:df:b8:08:
46:32:d1:50:eb:8b:14:7f:c6:c1:a3:19:e9:e2:fb:
92:ee:98:84:00:68:68:11:7a:f8:86:c5:58:5b:53:
60:46:5b:13:ec:a2:1b:e8:22:2d:c7:35:b4:b5:84:
61:0a:d0:94:17:c3:81:a4:e7:f5:d6:50:1a:3d:20:
bf:ab:a6:3d:ce:33:00:54:fa:7b:6a:3e:bf:a1:45:
6c:cb:3a:d5:eb:b0:a9:47:ce:7d:87:29:d3:95:b6:
46:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8F:3A:88:A1:9E:F8:BE:0D:5B:C6:41:26:66:97:87:EA:D3:1E:10
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/OI86iKGe-L4NW8ZBJmaXh-rTHhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:940::/44
Signature Algorithm: sha256WithRSAEncryption
82:17:3a:d9:7e:3c:49:55:f1:b2:7b:bc:63:9a:79:b8:ff:4e:
a1:5f:47:a0:92:01:af:27:13:8f:69:45:82:d2:b5:d8:88:6c:
db:e8:e7:62:86:96:7d:af:d3:4f:b1:a3:f8:6e:2f:8f:43:48:
f2:83:81:1a:d3:d9:8c:07:8a:6e:c7:c1:f3:ed:20:5e:eb:02:
dd:0d:6e:42:c7:96:ca:5e:a3:2d:af:5d:ef:52:5b:0f:0e:a9:
ce:35:01:28:c1:9f:b6:e2:5c:91:92:8e:68:46:02:e9:fa:42:
c9:19:8e:3e:a8:e8:fb:29:61:21:75:1b:a9:d9:f5:6d:74:07:
e8:2e:93:ed:81:98:c6:cb:3d:c7:65:d2:78:4b:93:a2:55:2e:
5e:52:2b:d0:d7:8b:e8:5a:2e:66:ff:62:1f:c1:9a:5c:ed:b5:
50:e0:18:86:72:65:f3:e9:6d:bf:5e:97:c2:a6:db:81:7c:6f:
9d:9e:5d:85:c0:38:36:14:de:eb:d1:ce:aa:1d:62:6f:5c:84:
d5:84:d9:41:4f:91:23:08:79:b5:d5:d8:a9:5c:42:cd:6b:46:
80:45:ac:e3:56:58:19:63:1b:16:2e:35:77:2d:44:3e:b1:16:
80:24:9f:b1:60:0b:ed:a8:0b:46:ae:63:8a:5b:22:e8:0a:bb:
3d:9a:b5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:45:26 2024 by rpki-client on console-fra.rpki-client.org