Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TU_k-bO87fLWm9LWhEPioZMe_l8.roa
File: TU_k-bO87fLWm9LWhEPioZMe_l8.roa (raw, json)
Hash identifier: 8KXsXRHuvK5lf5Ho37SEqBiBvWxOCukLgwXnX4gDwiE=
Subject key identifier: 4D:4F:E4:F9:B3:BC:ED:F2:D6:9B:D2:D6:84:43:E2:A1:93:1E:FE:5F
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0192B41216E48DE4EB54D6E6E47918413466
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TU_k-bO87fLWm9LWhEPioZMe_l8.roa
Signing time: Tue 22 Oct 2024 11:52:17 +0000
ROA not before: Tue 22 Oct 2024 11:52:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213984
IP address blocks: 2a0c:b641:d50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:12:16:e4:8d:e4:eb:54:d6:e6:e4:79:18:41:34:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 22 11:52:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d4fe4f9b3bcedf2d69bd2d68443e2a1931efe5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:c9:39:d1:b5:18:10:71:ac:f0:4b:b8:5a:
f3:31:0f:f7:6e:1c:9f:6b:ca:bf:18:48:c8:72:6f:
83:1a:be:fa:4f:f8:96:d4:92:3d:a8:df:51:8f:d4:
ce:29:fa:66:35:46:2a:63:21:c1:ad:b4:87:d9:6c:
a1:68:bd:f3:1b:d1:1e:9a:ba:c6:81:78:93:e9:48:
3a:33:4c:0e:9d:24:2d:b7:36:6f:14:78:f9:73:d9:
19:8b:0c:05:ee:df:b5:60:d2:b5:e6:f8:fe:42:92:
1d:30:7b:25:08:ab:ea:0b:dd:03:dc:1a:4b:e6:f4:
7a:ce:cf:a3:93:a1:21:dd:f8:08:6a:65:30:ac:d3:
c8:e8:f9:fb:2b:f6:33:ca:77:bf:46:48:73:37:eb:
9c:47:f4:68:2c:0c:b3:5d:d3:03:db:fc:f7:6f:26:
45:f2:6b:32:75:db:69:41:bd:83:66:45:bd:57:39:
d6:f4:e5:57:1c:c5:eb:cf:dc:b5:3f:06:a0:61:94:
e8:fe:ee:14:3a:be:bd:f9:d5:b8:a0:5b:09:df:07:
23:0a:58:26:49:aa:42:9f:6c:af:a6:2d:15:b1:d2:
98:81:87:3b:73:a8:9e:1b:ad:87:3e:a6:f7:47:24:
67:b8:d7:19:58:9e:e2:8d:53:6d:cf:0d:e5:5a:f6:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4F:E4:F9:B3:BC:ED:F2:D6:9B:D2:D6:84:43:E2:A1:93:1E:FE:5F
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TU_k-bO87fLWm9LWhEPioZMe_l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:d50::/44
Signature Algorithm: sha256WithRSAEncryption
73:ff:c4:de:74:9d:86:da:09:6e:10:f7:38:ed:f5:71:c6:a6:
f4:ba:a6:da:89:c3:1f:e0:50:d7:e8:96:be:32:9c:0e:d0:5f:
30:60:43:2e:4b:17:a1:09:53:d7:00:8a:cc:49:ec:9d:d8:1a:
83:34:9f:a7:35:8f:b7:2f:b9:03:82:1a:2d:b2:e9:99:a0:7a:
57:63:86:0e:b8:be:90:29:fa:f7:d1:69:2c:1c:2d:1c:ee:5a:
6b:f3:39:07:d1:cf:79:09:2e:3b:f0:5a:34:c0:c8:75:51:ee:
80:e5:a0:49:6e:b1:dd:e5:9a:6a:7e:9a:97:b7:a4:a3:c9:2e:
99:f9:bb:44:ac:14:19:c9:9b:1c:cf:80:a3:df:45:f3:f6:4a:
5e:61:f9:f6:a5:bd:cd:a5:b1:39:d0:90:8b:25:0a:b7:c2:e4:
16:45:69:45:99:f6:7b:ad:33:0f:4b:0b:d8:70:49:b7:51:cd:
9e:6c:16:45:c8:47:5f:5d:33:43:97:fa:6d:8d:be:54:71:15:
a5:cd:11:c0:45:77:9a:7c:1c:27:14:27:76:23:80:35:c9:f9:
a5:b1:6d:d5:a8:17:97:e8:d0:9d:53:ef:0b:79:18:0c:58:5e:
ef:79:a5:34:7c:1f:74:9e:2b:b7:63:3d:cc:0b:99:df:f6:b7:
96:c0:83:fe
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZK0EhbkjeTrVNbm5HkYQTRmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQxMDIyMTE1MjE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDRmZTRmOWIzYmNlZGYyZDY5YmQyZDY4NDQzZTJhMTkzMWVmZTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcPJOdG1GBBxrPBLuFrzMQ/3bhyf
a8q/GEjIcm+DGr76T/iW1JI9qN9Rj9TOKfpmNUYqYyHBrbSH2WyhaL3zG9EemrrG
gXiT6Ug6M0wOnSQttzZvFHj5c9kZiwwF7t+1YNK15vj+QpIdMHslCKvqC90D3BpL
5vR6zs+jk6Eh3fgIamUwrNPI6Pn7K/Yzyne/RkhzN+ucR/RoLAyzXdMD2/z3byZF
8msyddtpQb2DZkW9VznW9OVXHMXrz9y1PwagYZTo/u4UOr69+dW4oFsJ3wcjClgm
SapCn2yvpi0VsdKYgYc7c6ieG62HPqb3RyRnuNcZWJ7ijVNtzw3lWvbABwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFE1P5PmzvO3y1pvS1oRD4qGTHv5fMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvVFVfay1iTzg3ZkxXbTlMV2hFUGlvWk1lX2w4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQ1Q
MA0GCSqGSIb3DQEBCwUAA4IBAQBz/8TedJ2G2gluEPc47fVxxqb0uqbaicMf4FDX
6Ja+MpwO0F8wYEMuSxehCVPXAIrMSeyd2BqDNJ+nNY+3L7kDghotsumZoHpXY4YO
uL6QKfr30WksHC0c7lpr8zkH0c95CS478Fo0wMh1Ue6A5aBJbrHd5ZpqfpqXt6Sj
yS6Z+btErBQZyZscz4Cj30Xz9kpeYfn2pb3NpbE50JCLJQq3wuQWRWlFmfZ7rTMP
SwvYcEm3Uc2ebBZFyEdfXTNDl/ptjb5UcRWlzRHARXeafBwnFCd2I4A1yfmlsW3V
qBeX6NCdU+8LeRgMWF7veaU0fB90niu3Yz3MC5nf9reWwIP+
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:17 2024 by rpki-client on console-ams.rpki-client.org