Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YNHF5EjX9sjJ3-VqHiNxEiHDJsc.roa
File: YNHF5EjX9sjJ3-VqHiNxEiHDJsc.roa (raw, json)
Hash identifier: JMyiXZVCLsCbRyoTvmEAjdYNQlMXDUxaYWdf0ZcWd64=
Subject key identifier: 60:D1:C5:E4:48:D7:F6:C8:C9:DF:E5:6A:1E:23:71:12:21:C3:26:C7
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC8015861DB930A16D7D19449F46B3C47
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YNHF5EjX9sjJ3-VqHiNxEiHDJsc.roa
Signing time: Tue 02 Jan 2024 02:29:40 +0000
ROA not before: Tue 02 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201670
IP address blocks: 2a0c:b641:3a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:58:61:db:93:0a:16:d7:d1:94:49:f4:6b:3c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60d1c5e448d7f6c8c9dfe56a1e23711221c326c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:ae:b7:bd:4b:7a:34:3e:0a:bd:56:dd:f8:
48:a4:b9:61:91:b3:cf:3c:ce:68:10:de:37:75:b0:
93:f8:4f:15:3b:49:60:5c:57:68:63:00:5c:1d:b8:
9c:5d:a4:65:dc:c4:20:91:c6:da:35:29:f0:7e:fe:
20:f7:db:70:0c:c5:68:0f:7d:6b:7c:16:d7:24:8b:
6d:09:ca:fa:6a:07:2e:8e:44:92:1b:32:69:4c:d3:
33:63:0f:b0:92:be:2c:81:4b:14:c5:43:2a:b4:92:
11:a3:23:d3:49:b3:d1:f2:a0:91:9b:86:fd:f4:ae:
28:b1:85:a1:ed:95:d9:aa:2d:45:77:b0:cf:37:e7:
57:49:62:5f:61:44:2b:5d:e1:81:bd:84:d6:fd:7e:
cf:c6:2b:da:8e:0d:8b:b2:d0:10:dd:eb:70:f2:bd:
ce:02:e4:ad:b9:04:c1:f1:6e:a1:47:0d:5a:0c:57:
7e:b5:d0:8d:51:32:83:ae:e0:56:f6:14:c4:4a:11:
95:2e:41:fd:90:fb:d7:9b:a5:b5:d7:d4:ee:bb:04:
a1:da:d1:43:0e:c3:cb:d1:66:29:87:6e:32:f1:86:
d3:be:dd:dc:65:b2:0a:1d:29:7b:3d:0f:ba:2c:b9:
5b:39:ea:10:cb:01:3a:29:76:14:75:d2:f0:d6:06:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D1:C5:E4:48:D7:F6:C8:C9:DF:E5:6A:1E:23:71:12:21:C3:26:C7
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YNHF5EjX9sjJ3-VqHiNxEiHDJsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:3a0::/44
Signature Algorithm: sha256WithRSAEncryption
8c:cc:a2:93:c7:6a:58:13:75:03:d4:63:d9:25:96:b5:b9:fa:
5a:94:5e:5e:df:62:1d:d7:e3:74:01:80:59:77:d4:4e:f4:33:
a8:85:84:95:49:f6:8d:7c:ba:06:93:ea:65:b9:af:24:ad:a1:
cd:6b:a1:47:8a:25:6d:71:a3:04:a6:48:2b:31:13:7d:3b:f9:
fb:8e:78:59:cc:67:40:04:a9:77:59:98:87:82:af:5a:84:56:
60:67:02:08:22:76:d5:be:51:92:f6:64:b1:27:1d:0a:b4:17:
95:30:f8:a5:38:76:ee:d0:f2:2f:c9:2e:a2:cd:79:49:a7:d7:
02:df:46:b4:cb:a9:f4:b8:12:4e:ce:2c:d6:3b:d2:81:9b:ec:
2d:fe:25:f4:35:92:f3:58:b2:b7:9c:6c:f4:0c:b5:29:24:b4:
89:6b:ba:c7:66:18:ad:b6:7e:55:5d:b6:cc:4c:0a:29:8f:de:
37:51:b4:c5:9a:aa:4b:00:c9:72:02:9e:f8:18:aa:cb:1f:1e:
44:76:a5:0a:83:78:c1:a0:91:74:56:8d:ca:94:8b:99:ed:fa:
79:9b:29:9e:89:d3:7c:6a:66:5b:95:80:ee:84:ca:fa:96:f0:
2d:98:40:4d:4f:ef:a9:fb:0d:e6:1c:0a:3d:02:6e:f7:8d:0b:
06:e2:d2:ac
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIAVhh25MKFtfRlEn0azxHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQwMTAyMDIyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGQxYzVlNDQ4ZDdmNmM4YzlkZmU1NmExZTIzNzExMjIxYzMyNmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkyut71LejQ+Cr1W3fhIpLlhkbPP
PM5oEN43dbCT+E8VO0lgXFdoYwBcHbicXaRl3MQgkcbaNSnwfv4g99twDMVoD31r
fBbXJIttCcr6agcujkSSGzJpTNMzYw+wkr4sgUsUxUMqtJIRoyPTSbPR8qCRm4b9
9K4osYWh7ZXZqi1Fd7DPN+dXSWJfYUQrXeGBvYTW/X7Pxivajg2LstAQ3etw8r3O
AuStuQTB8W6hRw1aDFd+tdCNUTKDruBW9hTEShGVLkH9kPvXm6W119TuuwSh2tFD
DsPL0WYph24y8YbTvt3cZbIKHSl7PQ+6LLlbOeoQywE6KXYUddLw1gYUawIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGDRxeRI1/bIyd/lah4jcRIhwybHMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvWU5IRjVFalg5c2pKMy1WcUhpTnhFaUhESnNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQOg
MA0GCSqGSIb3DQEBCwUAA4IBAQCMzKKTx2pYE3UD1GPZJZa1ufpalF5e32Id1+N0
AYBZd9RO9DOohYSVSfaNfLoGk+plua8kraHNa6FHiiVtcaMEpkgrMRN9O/n7jnhZ
zGdABKl3WZiHgq9ahFZgZwIIInbVvlGS9mSxJx0KtBeVMPilOHbu0PIvyS6izXlJ
p9cC30a0y6n0uBJOzizWO9KBm+wt/iX0NZLzWLK3nGz0DLUpJLSJa7rHZhittn5V
XbbMTAopj943UbTFmqpLAMlyAp74GKrLHx5EdqUKg3jBoJF0Vo3KlIuZ7fp5myme
idN8amZblYDuhMr6lvAtmEBNT++p+w3mHAo9Am73jQsG4tKs
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:17 2024 by rpki-client on console-ams.rpki-client.org