Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/SMY9aSCgcuuhbpvhJW_GcOdIoYc.roa
File: SMY9aSCgcuuhbpvhJW_GcOdIoYc.roa (raw, json)
Hash identifier: jkn+pq9439a2xO2VXH24aD7e8d06JgTnzQW6Ue3BKCs=
Subject key identifier: 48:C6:3D:69:20:A0:72:EB:A1:6E:9B:E1:25:6F:C6:70:E7:48:A1:87
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC8016E41EA14E0C22280109C5097FF2E
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/SMY9aSCgcuuhbpvhJW_GcOdIoYc.roa
Signing time: Tue 02 Jan 2024 02:29:46 +0000
ROA not before: Tue 02 Jan 2024 02:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210103
IP address blocks: 2a0c:b641:90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:6e:41:ea:14:e0:c2:22:80:10:9c:50:97:ff:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48c63d6920a072eba16e9be1256fc670e748a187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:6f:22:65:b3:03:f1:0b:c2:99:77:5a:96:
3b:0d:9f:b6:ec:7d:44:a1:e6:be:9b:8c:f4:61:b0:
64:9a:e6:8a:2b:7d:0a:a1:0c:8a:41:30:3f:3b:df:
93:63:38:63:14:3a:01:d4:af:1b:86:73:f5:71:54:
9a:1b:c7:dc:17:e2:86:e3:28:a2:b7:e5:0b:5e:d3:
cf:25:a7:a9:14:e3:ea:44:dd:8b:e2:96:88:aa:e4:
ce:be:0a:0f:98:39:4f:f2:de:0b:69:f4:22:81:b8:
13:3c:eb:81:19:68:08:75:2f:e8:5a:2e:87:55:60:
c4:1d:6e:d0:61:0e:f8:d7:08:65:76:82:20:b8:9b:
74:b0:f1:5d:ef:9c:54:32:c4:a0:a0:1a:5f:4b:6d:
10:06:6b:b1:02:e6:83:16:95:93:d0:cb:fd:c6:55:
9c:eb:a2:ee:68:0d:b1:da:44:ce:de:73:95:80:99:
f7:6e:12:4c:f6:59:94:9d:19:c3:99:08:15:a6:cd:
a1:43:30:02:d2:46:4b:fa:1f:1e:1a:2c:ad:38:72:
d2:40:ef:3e:13:73:f9:ee:ef:77:61:08:8c:74:12:
b6:b9:af:3a:55:c2:43:f9:ef:1d:57:74:38:d6:06:
d8:ae:bb:27:a3:c6:7e:55:ab:24:bd:7a:0d:af:6f:
ca:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C6:3D:69:20:A0:72:EB:A1:6E:9B:E1:25:6F:C6:70:E7:48:A1:87
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/SMY9aSCgcuuhbpvhJW_GcOdIoYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:90::/44
Signature Algorithm: sha256WithRSAEncryption
70:e3:04:9f:57:d4:19:72:d5:83:a7:a1:7d:76:88:9d:0b:53:
46:5d:32:07:1b:66:a8:12:b0:ba:c5:2d:09:75:f2:68:dd:15:
69:95:69:e7:61:15:39:16:2b:35:3e:09:bf:a5:d7:86:5e:51:
62:30:56:e0:b6:f7:f2:e8:b1:2a:2b:3f:00:f5:f3:ef:96:f0:
ad:2b:ae:1f:9c:16:f7:99:09:63:d1:d2:d3:10:7f:4c:d6:2f:
0e:de:bd:29:94:c7:b1:54:c0:7a:69:fa:a2:80:38:b0:f1:7d:
01:ce:24:89:4a:b8:06:35:c6:79:d6:4e:61:e6:33:64:40:56:
ce:14:40:8d:6d:84:46:a5:7d:7a:8c:cc:b4:d3:50:26:0d:39:
b6:58:4f:e0:69:dc:f9:df:5c:af:47:22:d6:6a:ac:d5:22:37:
97:de:35:10:42:36:ab:51:31:24:c2:e8:c3:33:2d:ed:85:3b:
e4:bb:63:bc:ea:09:44:9b:3e:93:3a:86:48:0d:66:7d:3c:7c:
40:23:29:28:39:04:6d:0b:16:78:e9:83:8f:a5:86:51:66:27:
04:34:c2:e1:70:3e:3d:68:4e:1e:d7:04:c0:48:d3:a4:7a:81:
fd:f5:89:b2:fa:c0:92:b3:83:66:b8:cc:d3:50:d0:e2:e3:70:
4a:4c:6d:03
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIAW5B6hTgwiKAEJxQl/8uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQwMTAyMDIyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGM2M2Q2OTIwYTA3MmViYTE2ZTliZTEyNTZmYzY3MGU3NDhhMTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBJvImWzA/ELwpl3WpY7DZ+27H1E
oea+m4z0YbBkmuaKK30KoQyKQTA/O9+TYzhjFDoB1K8bhnP1cVSaG8fcF+KG4yii
t+ULXtPPJaepFOPqRN2L4paIquTOvgoPmDlP8t4LafQigbgTPOuBGWgIdS/oWi6H
VWDEHW7QYQ741whldoIguJt0sPFd75xUMsSgoBpfS20QBmuxAuaDFpWT0Mv9xlWc
66LuaA2x2kTO3nOVgJn3bhJM9lmUnRnDmQgVps2hQzAC0kZL+h8eGiytOHLSQO8+
E3P57u93YQiMdBK2ua86VcJD+e8dV3Q41gbYrrsno8Z+VaskvXoNr2/K3QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEjGPWkgoHLroW6b4SVvxnDnSKGHMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvU01ZOWFTQ2djdXVoYnB2aEpXX0djT2RJb1ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQCQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBw4wSfV9QZctWDp6F9doidC1NGXTIHG2aoErC6
xS0JdfJo3RVplWnnYRU5Fis1Pgm/pdeGXlFiMFbgtvfy6LEqKz8A9fPvlvCtK64f
nBb3mQlj0dLTEH9M1i8O3r0plMexVMB6afqigDiw8X0BziSJSrgGNcZ51k5h5jNk
QFbOFECNbYRGpX16jMy001AmDTm2WE/gadz531yvRyLWaqzVIjeX3jUQQjarUTEk
wujDMy3thTvku2O86glEmz6TOoZIDWZ9PHxAIykoOQRtCxZ46YOPpYZRZicENMLh
cD49aE4e1wTASNOkeoH99Ymy+sCSs4NmuMzTUNDi43BKTG0D
-----END CERTIFICATE-----
Generated at Sat May 4 09:03:10 2024 by rpki-client on console-ams.rpki-client.org