Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/OMAPxLE_kqhptSnMIq5-EBvddW8.roa
File: OMAPxLE_kqhptSnMIq5-EBvddW8.roa (raw, json)
Hash identifier: 7/gxsekjnOS/RjRAKqff4OGUxurYz/eehfroUFsbJw0=
Subject key identifier: 38:C0:0F:C4:B1:3F:92:A8:69:B5:29:CC:22:AE:7E:10:1B:DD:75:6F
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC801748C5360CCF785D596528BD0DA1C
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/OMAPxLE_kqhptSnMIq5-EBvddW8.roa
Signing time: Tue 02 Jan 2024 02:29:47 +0000
ROA not before: Tue 02 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210890
IP address blocks: 2a0c:b641:220::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:74:8c:53:60:cc:f7:85:d5:96:52:8b:d0:da:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38c00fc4b13f92a869b529cc22ae7e101bdd756f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7e:04:a4:ec:54:27:09:ee:02:a4:54:2f:00:
fa:a4:d6:af:fe:f3:a0:92:39:5d:cb:fc:04:8a:18:
f0:02:9f:da:7f:1b:e8:0a:59:13:63:52:0f:05:55:
ca:59:7f:95:3a:28:81:95:3a:31:c2:03:96:47:42:
51:0d:db:12:cf:26:85:17:34:9d:41:71:a1:ea:b7:
cd:e6:0b:ca:99:1e:de:73:b3:6f:91:cf:dd:4f:78:
ee:cd:ba:04:77:a8:2c:4b:41:fc:b8:7a:e7:68:0d:
6a:8a:e6:73:ee:ad:fd:6c:b5:f5:18:89:38:c7:d2:
02:f4:98:fd:1c:b7:09:2d:32:6b:12:98:37:66:3c:
40:93:94:e6:00:16:fb:fb:6a:a6:5e:8b:5e:b6:b6:
34:39:bf:57:3d:4d:cb:66:e4:0b:0a:d6:10:e6:1a:
26:19:7f:82:72:b5:a7:04:a5:59:98:a8:34:5f:30:
e4:87:9e:88:9a:d7:bf:ea:4e:2c:db:d4:55:fc:c0:
d3:6b:8e:7b:6a:94:85:7f:19:f7:1b:6c:1d:75:c6:
83:d5:83:10:e3:66:00:32:16:17:d8:41:27:fa:0f:
8a:86:73:2c:97:6e:67:6a:a5:a0:a9:71:fd:9b:a3:
6e:5f:31:95:8a:b4:59:ba:79:2b:4a:8b:e9:35:08:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C0:0F:C4:B1:3F:92:A8:69:B5:29:CC:22:AE:7E:10:1B:DD:75:6F
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/OMAPxLE_kqhptSnMIq5-EBvddW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:220::/44
Signature Algorithm: sha256WithRSAEncryption
52:d3:ed:b7:fa:ac:b2:7c:50:77:1a:77:c7:d5:e4:4f:28:ec:
d0:47:30:60:15:da:89:1e:e6:f3:29:cf:0e:21:73:09:af:33:
f8:f5:66:f0:8d:45:5c:8a:4c:90:c2:a6:36:69:7b:3e:af:58:
c2:b1:bd:9f:47:37:52:18:60:c7:4c:30:46:45:a8:57:03:bd:
f8:2c:c5:ab:f5:83:3a:24:e7:dc:64:7d:9c:ad:6c:36:15:57:
68:56:dc:f6:11:f5:44:c3:d1:22:40:9f:da:2e:6a:3d:7a:a8:
8b:6e:05:8f:04:43:c5:a5:bd:f4:06:fa:d7:45:d4:aa:66:00:
59:48:52:2a:2d:96:9a:e9:1c:fa:76:50:3f:9f:36:e1:d5:1a:
b6:ed:fd:18:7c:94:14:9f:8e:a6:cc:56:53:63:23:34:df:e1:
c7:58:8b:31:75:45:18:b8:92:5e:c2:9f:1b:fb:3c:c8:7f:d6:
1e:0a:f5:23:14:63:14:f2:8d:d2:ed:02:ac:f2:a8:f8:c3:d1:
c7:85:f8:ee:66:54:ed:ea:b5:35:08:1b:29:d2:97:d2:ed:fd:
1a:97:a0:bd:f9:03:19:ab:ec:9f:68:c9:74:82:e6:57:8e:05:
ce:86:d7:ee:ff:41:48:7c:f7:23:fb:59:61:ba:e6:83:9a:3c:
bb:4a:45:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:14:04 2024 by rpki-client on console-fra.rpki-client.org