Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/UbBhef6Rh8xvyLsoxJer-uQ7Qyg.roa
File: UbBhef6Rh8xvyLsoxJer-uQ7Qyg.roa (raw, json)
Hash identifier: 4TnPNnQob6qwV5cSrgEAfdguf3RsuGUJndNPUwocysA=
Subject key identifier: 51:B0:61:79:FE:91:87:CC:6F:C8:BB:28:C4:97:AB:FA:E4:3B:43:28
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC801834812BAEDE9B719913B10CACEC9
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/UbBhef6Rh8xvyLsoxJer-uQ7Qyg.roa
Signing time: Tue 02 Jan 2024 02:29:51 +0000
ROA not before: Tue 02 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215904
IP address blocks: 2a0c:b641:b70::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:83:48:12:ba:ed:e9:b7:19:91:3b:10:ca:ce:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51b06179fe9187cc6fc8bb28c497abfae43b4328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:2d:8d:fd:fd:d0:db:34:ae:90:a0:6a:c0:
0f:7a:4f:ad:6c:a0:67:62:0d:56:31:c3:36:2c:23:
d4:6c:b5:15:b8:34:ad:3b:b7:ae:32:cf:3a:17:ca:
e2:85:68:96:80:a4:d7:60:66:ea:7a:11:0f:db:9b:
35:64:45:8a:b2:28:07:bf:04:3b:72:41:41:27:a4:
a5:52:f2:68:64:87:3c:3b:6b:01:d9:1c:d4:b8:78:
41:ee:1b:30:40:32:54:24:3f:82:05:78:d7:98:23:
11:64:d4:dc:9f:a1:b0:5c:95:c9:54:aa:35:f0:9e:
db:0d:fd:2e:64:0f:a2:c5:ae:16:c7:09:6d:27:28:
58:23:8c:cc:a4:9e:54:16:08:85:70:37:db:af:c1:
1c:1c:ba:4a:ec:1b:a8:a1:b2:bc:28:98:bd:bb:f2:
0a:11:27:8c:88:90:51:13:eb:8b:13:d2:00:77:9a:
e8:a1:b7:bb:31:0f:7b:98:df:a1:53:52:1f:1d:0d:
c4:d6:6d:44:43:a2:65:2a:00:73:31:0c:72:29:a3:
66:8b:7e:e2:4b:5f:7d:68:ca:3a:eb:8e:ec:c0:4d:
54:3a:37:2a:84:cf:64:9e:a2:75:1c:fd:04:1a:d0:
1f:36:17:f9:59:8a:7a:0a:3b:bf:12:a4:87:95:ad:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B0:61:79:FE:91:87:CC:6F:C8:BB:28:C4:97:AB:FA:E4:3B:43:28
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/UbBhef6Rh8xvyLsoxJer-uQ7Qyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:b70::/44
Signature Algorithm: sha256WithRSAEncryption
26:6c:07:6f:fe:cf:50:a1:d1:fd:9d:87:a5:93:72:dc:45:86:
15:fb:18:f8:4c:9f:35:0d:44:5b:a2:73:57:da:d5:74:1c:0d:
95:f8:84:5c:ef:9c:93:2c:d2:74:c3:19:f3:e4:e7:b5:47:08:
02:e6:da:52:a6:e5:94:c2:b0:c0:19:8e:f9:f9:c4:43:9b:57:
1b:a6:b3:4e:2e:b8:56:18:34:0c:57:29:13:b7:61:3d:13:71:
ba:ce:ad:54:0d:e5:e8:94:f3:fd:06:25:a5:06:48:1c:8a:88:
8c:2d:90:57:bd:be:e5:4c:d8:2a:f3:12:58:d0:63:a4:64:0f:
ac:f0:cd:59:71:34:4b:d9:63:49:8b:e7:0b:ed:06:49:7c:08:
e0:32:f0:29:63:56:2a:67:05:d0:cd:a2:da:c9:73:f2:6f:d5:
4b:06:a8:65:94:37:a7:ff:23:76:34:d2:13:f0:f8:5b:61:8b:
eb:ba:48:f0:fe:d2:cd:0c:2d:81:2f:a0:c9:85:ed:8e:5b:48:
05:02:82:3d:d8:c5:65:be:b8:09:21:97:c6:eb:e8:c5:49:15:
ba:af:df:65:ab:dd:bb:d0:0b:1a:a3:df:9f:f2:55:06:2c:8d:
90:d8:6d:3f:42:2d:11:53:51:54:36:c9:09:03:7c:ce:eb:92:
c5:c1:3a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:03:10 2024 by rpki-client on console-ams.rpki-client.org