Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TesE6sv2mbXMMJA6VSRXYa0bPqI.roa
File: TesE6sv2mbXMMJA6VSRXYa0bPqI.roa (raw, json)
Hash identifier: IDKAoA+duU64n7ih0FR/oS1SuCJ0n2oM+3v6wHluMYc=
Subject key identifier: 4D:EB:04:EA:CB:F6:99:B5:CC:30:90:3A:55:24:57:61:AD:1B:3E:A2
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC8017450D85EA85D9522460ABEA8D512
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TesE6sv2mbXMMJA6VSRXYa0bPqI.roa
Signing time: Tue 02 Jan 2024 02:29:47 +0000
ROA not before: Tue 02 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210821
IP address blocks: 2a0c:b641:250::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:74:50:d8:5e:a8:5d:95:22:46:0a:be:a8:d5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4deb04eacbf699b5cc30903a55245761ad1b3ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:a5:08:67:32:f3:70:bc:22:10:6d:9c:b8:
16:73:0c:ab:8d:fa:ff:5b:57:31:a1:93:53:c8:b1:
b3:c2:5c:63:15:1b:80:45:50:67:da:90:c5:00:dd:
36:a7:ab:3e:be:72:a1:f0:05:f8:ef:36:6a:81:c1:
47:58:1a:a4:2f:a8:3a:f8:74:e4:fe:3d:12:e5:85:
ef:93:c8:c9:18:1e:ae:a1:1e:da:51:b5:71:17:8d:
d1:79:cc:c9:82:26:c9:ef:26:eb:4c:67:63:f8:d9:
2b:02:2c:3a:82:49:ae:12:14:7d:34:8c:f3:54:95:
e4:28:70:a6:55:77:e8:d2:ce:4b:b6:7e:6e:89:74:
fa:01:5a:c3:34:96:eb:08:f8:e2:ee:51:ba:de:03:
7c:9d:eb:37:50:a2:b0:52:59:60:49:7a:e9:05:4f:
83:72:d4:98:9f:53:c4:ad:22:b5:98:e6:19:1a:1f:
66:26:2d:07:cb:73:f8:94:99:e4:53:4f:0f:ec:32:
21:32:07:99:d7:4c:38:4e:a1:e4:56:66:ae:c9:df:
44:03:92:92:59:a9:8a:93:6e:16:16:ea:9f:30:7c:
19:11:fe:e1:24:10:2f:c6:e2:1e:10:1c:a9:5c:ff:
fe:ce:82:dd:f0:01:57:ab:73:95:af:94:8d:e4:0a:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EB:04:EA:CB:F6:99:B5:CC:30:90:3A:55:24:57:61:AD:1B:3E:A2
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TesE6sv2mbXMMJA6VSRXYa0bPqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:250::/44
Signature Algorithm: sha256WithRSAEncryption
37:51:cc:eb:0b:57:0b:b5:27:3e:a6:10:b8:bc:61:8b:30:05:
03:71:e2:ea:fe:ca:6a:c3:86:8a:25:9e:38:0d:54:60:eb:f4:
cc:48:ab:49:8d:51:ed:e4:9f:3c:71:d9:5a:27:5f:9e:49:eb:
7d:16:5e:52:6d:08:a1:58:94:1b:96:91:c7:02:af:79:a3:76:
75:b3:62:88:3c:b3:c8:30:75:3b:da:b9:a7:72:e5:d4:ac:cc:
3b:5a:b1:5d:19:5e:5d:97:ef:08:e6:3e:15:e8:41:97:72:8b:
98:39:77:d2:5d:c2:90:93:82:d6:6a:f3:d1:c7:cc:3d:ed:e1:
f7:02:81:11:a1:c4:e4:69:66:e7:84:fe:a3:dd:aa:21:f5:44:
51:f6:8e:99:cf:4a:03:2b:08:42:ce:ce:5b:0a:b7:de:26:e9:
d2:08:2b:d5:d6:d9:2b:55:60:2c:ff:c1:41:6b:4a:77:89:ad:
3b:49:64:18:63:49:e5:02:90:4f:53:ba:4b:9f:18:45:eb:79:
79:7d:3e:f5:46:81:03:6e:bb:65:a9:75:ce:4f:7b:b7:20:33:
aa:83:a5:06:fe:69:ad:cc:70:35:f2:a9:f6:75:ca:9a:51:20:
0e:56:d3:22:fe:5f:c0:1a:cf:65:83:9f:a6:0b:19:24:c3:24:
37:86:cd:28
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIAXRQ2F6oXZUiRgq+qNUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQwMTAyMDIyOTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGViMDRlYWNiZjY5OWI1Y2MzMDkwM2E1NTI0NTc2MWFkMWIzZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3mlCGcy83C8IhBtnLgWcwyrjfr/
W1cxoZNTyLGzwlxjFRuARVBn2pDFAN02p6s+vnKh8AX47zZqgcFHWBqkL6g6+HTk
/j0S5YXvk8jJGB6uoR7aUbVxF43ReczJgibJ7ybrTGdj+NkrAiw6gkmuEhR9NIzz
VJXkKHCmVXfo0s5Ltn5uiXT6AVrDNJbrCPji7lG63gN8nes3UKKwUllgSXrpBU+D
ctSYn1PErSK1mOYZGh9mJi0Hy3P4lJnkU08P7DIhMgeZ10w4TqHkVmauyd9EA5KS
WamKk24WFuqfMHwZEf7hJBAvxuIeEBypXP/+zoLd8AFXq3OVr5SN5ArAfwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFE3rBOrL9pm1zDCQOlUkV2GtGz6iMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvVGVzRTZzdjJtYlhNTUpBNlZTUlhZYTBiUHFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQJQ
MA0GCSqGSIb3DQEBCwUAA4IBAQA3UczrC1cLtSc+phC4vGGLMAUDceLq/spqw4aK
JZ44DVRg6/TMSKtJjVHt5J88cdlaJ1+eSet9Fl5SbQihWJQblpHHAq95o3Z1s2KI
PLPIMHU72rmncuXUrMw7WrFdGV5dl+8I5j4V6EGXcouYOXfSXcKQk4LWavPRx8w9
7eH3AoERocTkaWbnhP6j3aoh9URR9o6Zz0oDKwhCzs5bCrfeJunSCCvV1tkrVWAs
/8FBa0p3ia07SWQYY0nlApBPU7pLnxhF63l5fT71RoEDbrtlqXXOT3u3IDOqg6UG
/mmtzHA18qn2dcqaUSAOVtMi/l/AGs9lg5+mCxkkwyQ3hs0o
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:17 2024 by rpki-client on console-ams.rpki-client.org