Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/StnG2fVovUGmEk2tJNaB-1BkU8k.roa
File: StnG2fVovUGmEk2tJNaB-1BkU8k.roa (raw, json)
Hash identifier: KApbi7/xafqQHKQNp+GJ9efXWr2zFWhPTDALQSYThKw=
Subject key identifier: 4A:D9:C6:D9:F5:68:BD:41:A6:12:4D:AD:24:D6:81:FB:50:64:53:C9
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC80152ED0380CEBE1CC2FD5F035E233F
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/StnG2fVovUGmEk2tJNaB-1BkU8k.roa
Signing time: Tue 02 Jan 2024 02:29:39 +0000
ROA not before: Tue 02 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142438
IP address blocks: 2a0c:b641:130::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:52:ed:03:80:ce:be:1c:c2:fd:5f:03:5e:23:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ad9c6d9f568bd41a6124dad24d681fb506453c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c6:b2:d5:fc:d8:eb:20:3a:2c:7a:4b:69:e3:
70:66:d4:c5:c1:cb:13:9b:f7:40:87:5b:40:31:e3:
61:6b:3d:5e:db:d3:56:7a:f8:1a:f1:bf:ee:c1:84:
d9:f3:fd:ce:d7:ba:12:f2:80:d4:e9:4d:4e:2d:83:
9e:b3:8f:fb:64:e4:5d:5e:f6:1a:8f:89:ae:4b:5c:
cd:bd:5a:12:57:9b:49:0e:4e:22:9f:a5:11:59:97:
b8:6e:22:87:a5:56:a4:9b:03:f3:b3:57:d5:0b:4f:
2b:85:c0:e6:6b:3e:c6:e8:1a:84:6b:44:01:a8:58:
1f:f7:fd:91:0d:fe:6e:fb:83:db:fc:06:67:82:1f:
7f:d4:fa:76:d4:e9:ad:10:a2:5d:0e:48:c4:3d:9c:
c9:fb:8e:32:ad:65:e4:d3:1d:b3:3d:98:7b:8c:4b:
20:28:36:a1:79:24:f8:e7:11:75:03:71:a2:e8:d6:
42:d3:ba:d1:08:53:e5:1a:53:18:1d:a5:29:0e:8b:
b0:00:80:44:17:9b:84:e8:62:f8:9f:39:97:46:b5:
76:22:5f:47:da:df:1f:e6:d7:62:4e:4f:fc:b0:4e:
b6:f1:13:3c:62:b8:5c:53:af:72:30:9a:6b:98:b9:
bf:ae:05:c4:aa:cd:d3:d4:9d:6f:d8:d5:35:57:82:
0f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D9:C6:D9:F5:68:BD:41:A6:12:4D:AD:24:D6:81:FB:50:64:53:C9
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/StnG2fVovUGmEk2tJNaB-1BkU8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:130::/44
Signature Algorithm: sha256WithRSAEncryption
4f:47:6d:3e:f4:2f:8a:76:ae:79:ce:19:23:a4:b9:72:2a:ee:
b7:51:e3:63:07:1c:6b:c9:0c:8f:cc:b1:2d:4d:35:25:6a:97:
31:12:ed:99:ad:74:25:b8:04:13:4d:fa:fb:a7:cf:bb:4a:30:
ad:99:0c:f9:e9:7d:db:13:11:8e:ba:a0:28:88:de:b4:2e:03:
57:3d:19:1f:0c:05:0b:f3:52:1b:1f:87:63:95:a2:3f:35:af:
e1:99:ea:90:f3:87:3b:41:f8:f3:2f:41:ed:d9:f0:c5:31:6c:
4c:38:ba:2c:57:b4:5f:85:ac:d6:e9:1f:5c:f4:ce:9c:dc:67:
90:4d:29:84:c0:84:6c:58:7c:9e:57:4b:e2:c1:cb:ae:9c:f1:
30:df:92:99:6d:b9:5e:f4:56:14:00:6a:55:83:98:0a:f1:99:
3d:91:50:a0:71:0c:b3:ab:27:d3:b7:48:51:f2:06:c5:c4:05:
b5:0a:d7:b8:6f:d0:9e:4a:65:6c:94:6a:1d:e4:08:69:42:2a:
16:72:0b:58:74:90:0d:99:aa:50:f5:42:51:9d:0e:16:0b:82:
42:9f:5a:97:7b:e7:55:fa:98:1f:fb:a5:7f:34:8d:f5:f1:ee:
63:7f:b8:e4:50:a9:27:dc:a8:ff:69:ce:1c:ce:66:e2:c9:06:
0c:67:fa:c8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIAVLtA4DOvhzC/V8DXiM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQwMTAyMDIyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWQ5YzZkOWY1NjhiZDQxYTYxMjRkYWQyNGQ2ODFmYjUwNjQ1M2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68ay1fzY6yA6LHpLaeNwZtTFwcsT
m/dAh1tAMeNhaz1e29NWevga8b/uwYTZ8/3O17oS8oDU6U1OLYOes4/7ZORdXvYa
j4muS1zNvVoSV5tJDk4in6URWZe4biKHpVakmwPzs1fVC08rhcDmaz7G6BqEa0QB
qFgf9/2RDf5u+4Pb/AZngh9/1Pp21OmtEKJdDkjEPZzJ+44yrWXk0x2zPZh7jEsg
KDaheST45xF1A3Gi6NZC07rRCFPlGlMYHaUpDouwAIBEF5uE6GL4nzmXRrV2Il9H
2t8f5tdiTk/8sE628RM8YrhcU69yMJprmLm/rgXEqs3T1J1v2NU1V4IPPwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFErZxtn1aL1BphJNrSTWgftQZFPJMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvU3RuRzJmVm92VUdtRWsydEpOYUItMUJrVThrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQEw
MA0GCSqGSIb3DQEBCwUAA4IBAQBPR20+9C+Kdq55zhkjpLlyKu63UeNjBxxryQyP
zLEtTTUlapcxEu2ZrXQluAQTTfr7p8+7SjCtmQz56X3bExGOuqAoiN60LgNXPRkf
DAUL81IbH4djlaI/Na/hmeqQ84c7QfjzL0Ht2fDFMWxMOLosV7RfhazW6R9c9M6c
3GeQTSmEwIRsWHyeV0viwcuunPEw35KZbble9FYUAGpVg5gK8Zk9kVCgcQyzqyfT
t0hR8gbFxAW1Cte4b9CeSmVslGod5AhpQioWcgtYdJANmapQ9UJRnQ4WC4JCn1qX
e+dV+pgf+6V/NI318e5jf7jkUKkn3Kj/ac4czmbiyQYMZ/rI
-----END CERTIFICATE-----
Generated at Sat May 4 08:45:26 2024 by rpki-client on console-fra.rpki-client.org