Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ao1KMcCGnDL-QOiJfdT5uCelGDM.roa
File: ao1KMcCGnDL-QOiJfdT5uCelGDM.roa (raw, json)
Hash identifier: mpQ+z8TniByvENDiaSh7Ax8OhO93/pWlbn5n+HSPfY8=
Subject key identifier: 6A:8D:4A:31:C0:86:9C:32:FE:40:E8:89:7D:D4:F9:B8:27:A5:18:33
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018D479A7052C30473898E35F1B2BBC873E1
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ao1KMcCGnDL-QOiJfdT5uCelGDM.roa
Signing time: Fri 26 Jan 2024 21:08:40 +0000
ROA not before: Fri 26 Jan 2024 21:08:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215637
IP address blocks: 2a0c:b641:bb0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:47:9a:70:52:c3:04:73:89:8e:35:f1:b2:bb:c8:73:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 26 21:08:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a8d4a31c0869c32fe40e8897dd4f9b827a51833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:c8:a7:be:8c:96:03:be:88:e3:1c:1b:42:
97:ef:54:25:ec:e5:a4:3d:61:21:ea:db:b9:3c:f6:
8b:a7:c4:2e:89:88:16:58:62:3d:54:a4:38:81:1d:
20:3f:06:1a:20:35:cb:62:75:5a:e3:1d:bb:39:41:
60:ad:78:c4:47:6f:a3:b8:bb:64:03:8f:f5:b7:4a:
ac:b7:e2:75:b2:48:16:0e:d8:5d:c5:1c:aa:db:07:
e4:5e:61:f0:14:94:1d:94:5b:93:73:ee:15:aa:2b:
f5:27:5f:b4:dc:00:ea:13:0e:0a:d5:4e:18:bc:21:
0b:1b:0d:c9:9c:12:ce:45:9f:e2:5f:5a:61:03:2a:
aa:51:ff:1a:46:3d:85:64:1e:43:35:f3:0d:86:c1:
e3:1e:e0:88:ac:df:1f:8c:ea:11:16:f1:b0:46:d5:
24:57:fb:45:f1:f1:fc:84:10:dc:7e:5b:73:a7:24:
60:df:36:f6:6e:99:13:36:2f:5f:37:81:14:95:e6:
e1:04:3c:3e:0c:d1:6f:6d:43:01:22:54:75:e7:be:
b6:38:22:24:1a:8d:a6:4e:4f:88:c3:74:f3:b8:f1:
30:38:c6:69:fc:fa:cf:17:82:47:a4:0d:93:9f:6b:
7b:62:3d:c7:08:e4:fc:c2:f7:66:c9:c0:16:69:2f:
48:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8D:4A:31:C0:86:9C:32:FE:40:E8:89:7D:D4:F9:B8:27:A5:18:33
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ao1KMcCGnDL-QOiJfdT5uCelGDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:bb0::/44
Signature Algorithm: sha256WithRSAEncryption
58:d5:cf:bf:0e:b7:1a:74:5f:08:cc:83:8c:f9:8c:ec:75:2d:
b2:e3:52:54:a3:dd:d0:23:f2:c8:ba:ae:b4:ed:18:9b:1d:22:
b9:16:0a:90:7d:2b:e7:95:91:a1:5e:fd:e6:23:50:3d:cf:73:
b5:79:97:51:40:8d:07:d0:57:68:0c:7f:24:fa:3a:80:00:fb:
9b:b4:ee:db:bd:ee:5d:05:c0:ee:f5:e7:c1:3e:94:e1:14:d5:
4c:43:a0:20:5d:86:e0:bb:61:3d:80:33:d2:cc:84:fd:c5:25:
57:2e:ab:65:22:b6:dd:13:1d:89:40:8e:a3:ff:c3:a0:61:a8:
66:59:82:e5:77:ba:a4:c6:3c:db:8d:68:8f:51:8b:b6:27:67:
7c:b7:22:39:03:56:61:8e:d9:61:45:3e:95:bd:1b:4f:fa:13:
ee:7c:d7:20:92:e8:b0:69:4b:69:8f:24:fe:b9:3b:d5:a7:70:
e3:b8:11:b7:fd:18:12:d4:d9:49:2f:d1:30:9a:13:35:a4:85:
af:5a:db:b7:76:a6:51:01:e4:50:1b:3e:d1:1a:de:5c:8b:f9:
6a:a8:2e:dc:ff:68:ec:61:59:33:56:54:eb:bf:60:75:00:f4:
6f:37:36:66:7a:7a:dd:f3:01:2d:60:f8:9a:39:b8:5e:71:41:
58:14:10:6f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1HmnBSwwRziY418bK7yHPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQwMTI2MjEwODQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YThkNGEzMWMwODY5YzMyZmU0MGU4ODk3ZGQ0ZjliODI3YTUxODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKnIp76MlgO+iOMcG0KX71Ql7OWk
PWEh6tu5PPaLp8QuiYgWWGI9VKQ4gR0gPwYaIDXLYnVa4x27OUFgrXjER2+juLtk
A4/1t0qst+J1skgWDthdxRyq2wfkXmHwFJQdlFuTc+4Vqiv1J1+03ADqEw4K1U4Y
vCELGw3JnBLORZ/iX1phAyqqUf8aRj2FZB5DNfMNhsHjHuCIrN8fjOoRFvGwRtUk
V/tF8fH8hBDcfltzpyRg3zb2bpkTNi9fN4EUlebhBDw+DNFvbUMBIlR15762OCIk
Go2mTk+Iw3TzuPEwOMZp/PrPF4JHpA2Tn2t7Yj3HCOT8wvdmycAWaS9IxwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGqNSjHAhpwy/kDoiX3U+bgnpRgzMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvYW8xS01jQ0duREwtUU9pSmZkVDV1Q2VsR0RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQuw
MA0GCSqGSIb3DQEBCwUAA4IBAQBY1c+/DrcadF8IzIOM+YzsdS2y41JUo93QI/LI
uq607RibHSK5FgqQfSvnlZGhXv3mI1A9z3O1eZdRQI0H0FdoDH8k+jqAAPubtO7b
ve5dBcDu9efBPpThFNVMQ6AgXYbgu2E9gDPSzIT9xSVXLqtlIrbdEx2JQI6j/8Og
YahmWYLld7qkxjzbjWiPUYu2J2d8tyI5A1ZhjtlhRT6VvRtP+hPufNcgkuiwaUtp
jyT+uTvVp3DjuBG3/RgS1NlJL9EwmhM1pIWvWtu3dqZRAeRQGz7RGt5ci/lqqC7c
/2jsYVkzVlTrv2B1APRvNzZmenrd8wEtYPiaObhecUFYFBBv
-----END CERTIFICATE-----
Generated at Sat May 4 00:02:37 2024 by rpki-client on console-ams.rpki-client.org