Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/PyEm2bez2EVbhtxS3SHv6XGFsvI.roa
File: PyEm2bez2EVbhtxS3SHv6XGFsvI.roa (raw, json)
Hash identifier: k+YmQ5Nb3SeknpTc/8dZM7jM3zsIQIPZ8cN8jr7pRik=
Subject key identifier: 3F:21:26:D9:B7:B3:D8:45:5B:86:DC:52:DD:21:EF:E9:71:85:B2:F2
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC80153EFD610B87CB0EA3B9E4072717F
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/PyEm2bez2EVbhtxS3SHv6XGFsvI.roa
Signing time: Tue 02 Jan 2024 02:29:39 +0000
ROA not before: Tue 02 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198231
IP address blocks: 2a0c:b641:a30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:53:ef:d6:10:b8:7c:b0:ea:3b:9e:40:72:71:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f2126d9b7b3d8455b86dc52dd21efe97185b2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4d:31:39:f2:1d:c3:ed:22:36:7e:16:71:c3:
7a:48:c8:5b:48:13:61:dc:e9:6f:fc:73:97:15:d6:
fe:95:ab:4a:a2:2e:3e:3c:a9:88:3e:f5:c8:ad:d6:
d6:23:0b:84:3c:57:b5:39:f1:e0:73:e5:09:3c:e4:
cb:7e:fe:4f:22:ae:6a:20:f3:6f:ba:c7:66:38:69:
08:3c:7f:49:2e:d7:2d:bd:5e:8a:43:f5:3b:c6:7c:
62:67:83:a4:b6:92:01:fb:e9:9e:28:d7:9d:8f:8d:
a4:0c:08:15:11:8f:f9:0d:f2:ed:15:1c:61:69:6d:
dc:a0:c6:7a:3b:88:26:8f:5d:47:b3:65:b2:d4:97:
05:56:b7:b1:59:b3:c0:17:ee:4b:c5:7b:b5:fa:41:
7e:eb:c0:df:67:c0:a9:c0:c3:05:40:0f:61:c5:12:
65:42:92:ee:a7:16:80:15:6f:d2:92:e7:12:f6:15:
1d:74:ff:7a:1c:64:19:44:1b:c3:6e:87:61:a1:31:
14:c3:c5:e5:0b:3f:03:f7:d7:69:b2:08:15:f7:e5:
97:83:0d:7e:52:6d:dd:b0:b4:53:5c:ca:0f:e8:50:
91:c4:b7:e9:77:2c:46:af:a8:65:81:a6:20:d0:c8:
5c:f1:57:18:40:00:d8:91:e6:3b:02:1f:a2:9f:80:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:21:26:D9:B7:B3:D8:45:5B:86:DC:52:DD:21:EF:E9:71:85:B2:F2
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/PyEm2bez2EVbhtxS3SHv6XGFsvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:a30::/44
Signature Algorithm: sha256WithRSAEncryption
41:bb:be:69:2b:86:c4:44:d2:3a:40:8d:f8:b5:c2:c5:28:03:
fd:8e:f8:e7:0c:12:20:fb:5a:f1:87:f2:7f:87:d4:d1:ef:47:
bc:0a:7c:9d:db:ba:ba:dc:50:de:d8:4f:9a:21:ff:4c:8c:5c:
50:a7:51:d5:df:7c:f9:38:13:b9:e9:34:91:50:48:50:04:f6:
53:44:dd:d6:59:d5:7b:39:c8:af:9b:ae:ac:88:6f:c3:a8:97:
74:8b:a8:df:bc:33:0f:56:c7:d4:4f:35:cf:1e:9b:43:8a:e5:
26:fd:29:d2:b3:22:b0:61:ee:78:74:5c:41:1b:67:61:ab:9b:
ea:ad:5f:28:e7:4b:95:b9:cf:3c:17:38:74:6b:b8:b0:23:cc:
fe:8b:90:50:b8:7c:bf:3f:41:05:f5:4d:9c:9d:54:fe:e0:36:
59:b9:8a:d5:ef:7a:5b:4a:03:a7:da:db:92:1e:75:8e:63:6b:
e0:d3:03:60:21:81:57:8b:fe:a0:f5:77:72:61:cd:1c:f6:8b:
cf:73:ad:92:c6:c2:1e:0c:9c:1a:69:4f:b5:48:2a:1d:ed:90:
2d:59:1d:6f:aa:14:de:a6:22:38:41:b4:15:65:47:68:8c:47:
51:c1:59:63:c2:87:de:ac:aa:20:df:1e:d2:f3:ce:fd:a2:bf:
21:d5:c3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:14:04 2024 by rpki-client on console-fra.rpki-client.org