Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TtlmXOUTYF52A-DI4jleFdJNfHU.roa
File: TtlmXOUTYF52A-DI4jleFdJNfHU.roa (raw, json)
Hash identifier: Rwun7SdctMAca+eOZosbPz5dH8DCG4XDikgZzpydgOU=
Subject key identifier: 4E:D9:66:5C:E5:13:60:5E:76:03:E0:C8:E2:39:5E:15:D2:4D:7C:75
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC80167E6B8D8C809ED9953142DF518BC
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TtlmXOUTYF52A-DI4jleFdJNfHU.roa
Signing time: Tue 02 Jan 2024 02:29:44 +0000
ROA not before: Tue 02 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208460
IP address blocks: 2a0c:b641:a80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:67:e6:b8:d8:c8:09:ed:99:53:14:2d:f5:18:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ed9665ce513605e7603e0c8e2395e15d24d7c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5d:eb:ae:e1:30:88:a4:f1:23:3e:84:e1:c6:
a2:32:0e:2a:13:8f:55:0e:4f:81:a0:b0:6e:62:c9:
b2:81:26:9c:4c:18:6e:56:de:0b:c9:c2:a1:a1:f1:
4f:5f:a0:20:53:89:05:84:cd:0e:dc:75:ca:69:24:
7d:36:ae:8f:62:cd:7c:3f:5d:63:0a:fa:e6:18:33:
5b:43:b9:03:d8:05:ac:d2:d2:47:cf:6b:e6:c3:50:
4e:e0:e4:4e:83:5f:73:f1:24:c6:f2:8a:e3:e5:f7:
25:e8:65:d2:a9:e3:9f:55:66:b4:50:ab:e0:76:76:
46:44:1d:1a:e1:a3:70:c5:fc:e1:5f:e6:d2:e5:23:
f5:61:7f:c0:dd:76:c7:58:9c:0c:cb:27:ef:d0:2f:
91:3a:f8:dd:1e:13:73:a3:a7:3d:b5:ef:d4:c6:d4:
85:47:1d:15:d1:d6:c1:a8:89:fb:8c:62:c5:66:d0:
15:4e:c7:50:b4:bf:7d:78:0f:f6:74:9e:20:54:10:
ab:c5:0e:b0:6b:06:c8:a6:03:9f:8e:9b:d2:00:fa:
84:f1:f2:92:2b:6b:cd:23:47:45:8f:a3:c7:d6:87:
0d:47:bd:d3:d3:f3:a2:40:91:f5:a1:d1:1a:ac:fa:
50:ab:12:b0:80:85:56:fb:85:0d:dd:c4:37:e0:03:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D9:66:5C:E5:13:60:5E:76:03:E0:C8:E2:39:5E:15:D2:4D:7C:75
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TtlmXOUTYF52A-DI4jleFdJNfHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:a80::/44
Signature Algorithm: sha256WithRSAEncryption
14:09:1d:01:92:e8:73:8a:dd:44:cb:43:44:dc:89:e3:00:02:
bf:97:4f:c7:99:74:a5:a5:38:f3:6e:e4:37:6c:17:7d:7f:c5:
2d:06:79:13:bc:9b:40:c9:48:ad:e7:5f:81:05:e9:45:12:50:
5c:93:d1:b3:91:52:c6:77:c8:7b:97:54:1d:a7:52:a8:4e:18:
c8:97:ea:c0:17:f9:54:5b:c2:d1:e0:22:f3:13:6a:1e:15:c1:
d7:54:6c:5d:c6:77:5a:41:e8:60:84:0a:fb:da:6f:25:b1:e6:
85:d0:50:cf:e2:84:16:88:29:83:27:e4:be:ec:b9:ed:de:ce:
9b:09:67:d3:45:d1:28:cf:da:76:f4:79:fb:3a:e7:b4:17:96:
db:45:34:61:26:0f:3d:4f:9e:5a:ec:f3:56:98:dd:70:1f:94:
27:83:8e:75:36:d3:0a:b7:45:19:d9:58:fa:f5:87:fc:bb:23:
79:5c:a4:4f:0e:79:3c:86:95:65:78:0d:c8:cc:6f:ba:e2:6e:
33:01:53:5d:da:06:cf:b5:35:ef:82:e4:8c:f5:1c:1e:10:0d:
d1:f4:f0:dc:e5:86:d8:7d:f0:74:44:ad:8e:28:3d:e4:e5:ab:
0b:47:c3:c4:35:01:11:76:f2:b8:32:ba:88:82:28:e5:02:ea:
31:f1:99:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:02:37 2024 by rpki-client on console-ams.rpki-client.org