Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/STBeGwyI1GvSrPWa3QtyzIm9i80.roa
File: STBeGwyI1GvSrPWa3QtyzIm9i80.roa (raw, json)
Hash identifier: Uk1BvyMgZ9eN78VPo34osGYayP08GA+SqfeUoIJnyC0=
Subject key identifier: 49:30:5E:1B:0C:88:D4:6B:D2:AC:F5:9A:DD:0B:72:CC:89:BD:8B:CD
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC801561B8BF865D8E2F795BD5E69BADE
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/STBeGwyI1GvSrPWa3QtyzIm9i80.roa
Signing time: Tue 02 Jan 2024 02:29:39 +0000
ROA not before: Tue 02 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199426
IP address blocks: 2a0c:b641:9b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:56:1b:8b:f8:65:d8:e2:f7:95:bd:5e:69:ba:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49305e1b0c88d46bd2acf59add0b72cc89bd8bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0e:19:ac:d9:df:66:3e:6f:dd:91:a8:41:ee:
c4:62:e6:c9:39:43:1d:4c:6a:c6:cb:fd:77:c1:63:
cb:86:c0:a7:93:81:08:0c:fb:a6:2b:3c:d8:5c:93:
60:c6:54:27:63:54:7f:dd:bd:cb:85:ef:fb:ed:0a:
35:84:c1:32:44:29:6f:af:e5:f0:ee:78:f6:7b:46:
10:54:1f:9b:fb:e4:d6:52:0d:ee:11:4d:b8:ae:2f:
93:c3:8e:c1:8f:15:b2:62:84:41:cc:0c:42:87:6e:
ec:4d:8c:43:f3:8c:f1:49:30:b9:41:07:04:b1:e7:
46:33:0b:48:0e:1c:ec:ef:8b:f9:21:e0:4a:c8:21:
1b:85:36:6d:1d:3e:0d:4a:cf:c0:27:8f:c6:b8:f4:
7d:97:5f:17:31:df:1b:e1:3b:17:4d:a4:15:19:34:
e7:8f:af:19:43:de:9c:72:1a:06:ad:cd:7b:1f:48:
5d:e6:b7:03:95:33:0a:04:88:2f:ab:86:b0:df:e5:
76:1f:2c:1c:6f:16:1e:7a:6a:a2:be:ea:85:22:2f:
7a:97:ae:a0:7c:49:8c:bb:e5:62:32:04:93:41:ad:
4f:82:27:26:03:91:d4:15:66:2b:f8:a1:0e:fe:56:
6a:c5:17:b9:c5:33:8e:67:6b:a1:b6:20:68:e3:0f:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:30:5E:1B:0C:88:D4:6B:D2:AC:F5:9A:DD:0B:72:CC:89:BD:8B:CD
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/STBeGwyI1GvSrPWa3QtyzIm9i80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:9b0::/44
Signature Algorithm: sha256WithRSAEncryption
76:0a:b0:7f:0a:4a:91:c0:d9:dc:52:3b:a5:6e:70:e2:39:b9:
d7:42:47:11:7e:55:4e:b9:1b:d2:a8:fb:7f:aa:c5:ec:80:28:
99:3e:95:3e:1b:9b:44:13:ad:81:37:2f:ab:70:65:70:e4:98:
2f:2e:b5:4f:fc:ab:ff:67:6e:41:8b:ec:5d:e5:82:90:1d:31:
89:2b:69:fa:e8:e7:88:44:5b:cc:fb:b0:fc:eb:d1:98:2a:39:
34:11:25:19:31:f4:40:76:41:bd:44:13:ce:b3:e0:45:96:05:
36:d5:62:7f:c8:8b:67:d7:87:73:37:3c:93:88:65:a1:ab:44:
c1:50:d4:27:73:6d:19:82:5d:f7:92:5f:3a:6e:a4:1e:b9:a5:
c3:47:61:77:08:57:7f:18:b3:bd:78:af:0f:fe:4b:65:f7:3b:
6c:c2:15:66:1d:1a:94:90:6a:09:b3:d4:eb:be:28:8a:ef:81:
51:25:11:98:f5:13:87:f4:0b:f6:af:ab:c2:cc:a9:e0:fc:2c:
50:b4:70:fe:3a:ee:4d:4f:fd:e2:7f:a0:d3:b2:6b:b9:d9:ba:
95:e9:32:55:e3:1e:c2:48:a8:e7:4d:b2:82:d3:f3:61:35:7c:
26:3d:1a:40:e8:34:ce:15:38:41:8e:83:80:24:1c:72:c9:07:
85:e5:c9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:45:26 2024 by rpki-client on console-fra.rpki-client.org