Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ShcKGRtTMx1KwJOoS4fl92BC0_I.roa
File: ShcKGRtTMx1KwJOoS4fl92BC0_I.roa (raw, json)
Hash identifier: 9DH7BbLvjhzD0rVO2bzyT4M/elc4jWMYccxqKjaf0Gc=
Subject key identifier: 4A:17:0A:19:1B:53:33:1D:4A:C0:93:A8:4B:87:E5:F7:60:42:D3:F2
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0190C159515E72B148EFFBA917EEA6D1CF70
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ShcKGRtTMx1KwJOoS4fl92BC0_I.roa
Signing time: Wed 17 Jul 2024 15:39:34 +0000
ROA not before: Wed 17 Jul 2024 15:39:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214508
IP address blocks: 2a0c:b641:ca0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c1:59:51:5e:72:b1:48:ef:fb:a9:17:ee:a6:d1:cf:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jul 17 15:39:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a170a191b53331d4ac093a84b87e5f76042d3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6f:0e:82:c7:2d:35:09:d4:5c:f8:ba:cd:83:
de:24:6c:a6:b1:fd:59:4d:13:0c:3a:54:a1:1b:56:
c9:d3:ca:12:89:6c:e2:22:2f:b3:7c:75:1c:cf:bb:
a6:90:04:db:37:5f:59:17:12:da:63:72:28:5c:bb:
fd:6d:ca:16:e0:95:c8:59:a0:31:8a:79:65:85:e3:
7e:50:ab:ee:d9:53:eb:4f:00:c0:47:a6:bc:33:b5:
49:93:5f:f2:17:0b:16:fc:d9:d3:94:b9:cb:0e:9c:
2b:af:37:b9:b3:1a:60:9c:64:47:33:96:39:48:55:
2c:70:f9:51:1b:11:8c:cb:93:20:84:ef:e5:21:66:
1d:8c:27:2d:65:5c:06:7e:30:19:49:ff:11:3f:cb:
a1:72:69:c2:21:99:64:06:40:9f:4b:3a:43:4c:28:
af:54:8c:30:8e:bd:20:f9:81:5d:13:1d:96:0c:d5:
20:e8:e9:d6:19:95:2e:8c:1d:02:d7:17:c3:1f:01:
33:6f:cb:f7:be:90:3c:cd:da:f7:2a:cc:bc:4f:26:
92:80:73:0c:e7:38:9d:4d:b5:d7:90:18:c4:93:50:
11:9b:e1:a2:76:9b:5e:2d:70:f4:ae:92:82:e8:12:
c4:2e:55:5f:b1:84:ae:a0:1f:42:a0:f9:88:5f:53:
b0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:17:0A:19:1B:53:33:1D:4A:C0:93:A8:4B:87:E5:F7:60:42:D3:F2
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ShcKGRtTMx1KwJOoS4fl92BC0_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:ca0::/44
Signature Algorithm: sha256WithRSAEncryption
9d:68:d9:1e:a2:28:f7:de:be:04:a5:26:5b:fb:df:0a:6f:6b:
37:9e:65:d5:39:64:10:8c:55:a6:c6:5d:5b:ff:7b:08:b8:21:
a0:2d:62:3e:bf:58:92:20:0f:54:96:9e:80:10:90:e6:c1:06:
f8:8c:e8:55:41:21:47:10:88:12:f3:3a:e5:66:2c:1c:2c:b8:
70:29:85:09:63:b5:18:4c:74:2a:04:55:8f:f5:a9:f1:8c:1e:
36:36:74:24:4a:2b:45:a0:1b:70:78:a6:c3:4d:e8:61:a6:fa:
09:b3:5a:85:38:c2:06:4e:66:5d:5e:d6:31:0a:bf:aa:66:33:
10:2a:33:d2:39:fc:8f:34:06:13:ea:31:5e:8e:23:e7:eb:17:
5b:95:eb:9c:3c:57:d3:9d:07:4c:ea:2b:0b:19:0f:6d:8f:44:
12:4b:4b:8e:b9:6e:72:36:1d:5b:b8:28:d8:85:e4:c5:5f:31:
b7:c3:be:8f:e7:b0:dd:a5:85:d3:f1:b8:2f:4e:5a:cc:da:46:
b6:51:0a:a9:d4:08:d3:e2:82:d1:16:73:fe:9c:fd:49:a7:8c:
56:a3:bf:10:26:24:7d:b8:61:a1:eb:71:02:4a:5e:0e:68:00:
00:71:df:6b:12:ac:1c:41:9c:f8:53:31:74:af:4d:b1:9e:8c:
8d:4b:a2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:17 2024 by rpki-client on console-ams.rpki-client.org