Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/bu4HzWomidWsWTIGt-BraMj2lZM.roa
File: bu4HzWomidWsWTIGt-BraMj2lZM.roa (raw, json)
Hash identifier: QwgPYIrawC60Tkmjkd8J4u9OvIBUsyIACcPDCUQFZcM=
Subject key identifier: 6E:EE:07:CD:6A:26:89:D5:AC:59:32:06:B7:E0:6B:68:C8:F6:95:93
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC8016D3634B0309F3E21442BE6E8C338
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/bu4HzWomidWsWTIGt-BraMj2lZM.roa
Signing time: Tue 02 Jan 2024 02:29:45 +0000
ROA not before: Tue 02 Jan 2024 02:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209861
IP address blocks: 2a0c:b641:80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:6d:36:34:b0:30:9f:3e:21:44:2b:e6:e8:c3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6eee07cd6a2689d5ac593206b7e06b68c8f69593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:da:7c:59:33:5f:c9:7d:c1:2a:a5:85:1e:
14:64:5b:4e:ef:cd:38:15:cb:73:4b:e1:6d:f9:64:
76:a4:96:7a:bd:08:37:24:14:7a:de:1a:b9:a8:c2:
7b:e5:e4:e0:17:02:b2:bf:c8:c6:b3:61:1d:01:2b:
f7:de:21:b5:4d:00:2b:b8:6c:60:24:0a:f8:66:59:
16:fb:05:10:47:5e:d8:d0:dc:1a:f3:f1:02:a1:aa:
a2:b7:de:b6:60:b4:b8:ee:f1:83:15:9b:d3:6c:d7:
d6:01:4e:7e:77:39:b8:83:e1:fb:ee:76:e8:8f:fa:
c2:19:5d:32:e1:dc:99:a4:21:f8:d2:79:9d:fe:f1:
44:60:a9:9f:bb:e4:dd:3a:d9:62:90:6c:31:1d:3c:
c6:25:0f:70:8e:43:10:08:98:40:f1:d1:2f:1a:1c:
12:f9:22:f7:4e:8f:2f:17:cc:de:da:50:82:5e:85:
2e:26:f3:df:cf:ef:aa:67:5f:73:51:99:80:9a:f0:
a6:ff:cc:9b:d5:db:1c:18:1b:d3:d9:1b:50:bc:38:
3a:a1:a7:bd:37:7f:ea:21:f2:12:fc:2e:5b:c3:96:
ba:e4:a0:9d:a0:fd:37:50:46:3f:d8:a9:3b:7f:59:
70:82:b1:de:8c:d7:85:9a:b5:a5:fc:d5:a5:4b:d6:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EE:07:CD:6A:26:89:D5:AC:59:32:06:B7:E0:6B:68:C8:F6:95:93
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/bu4HzWomidWsWTIGt-BraMj2lZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:80::/44
Signature Algorithm: sha256WithRSAEncryption
02:df:f2:a3:78:2f:c5:ed:72:7f:f5:12:f4:75:89:0f:ea:be:
72:c1:66:e1:b0:0e:ba:7d:41:ce:c7:37:c5:ca:49:9a:5a:3e:
13:03:33:b4:59:89:d2:18:10:ab:5a:75:8c:3b:37:d5:6e:2b:
5b:be:61:3a:3b:21:88:a2:c5:b5:ed:ae:a3:ca:c3:09:26:cd:
3a:eb:77:68:14:46:42:e3:5b:0a:93:0a:ff:18:88:71:9f:6c:
81:55:08:c0:b6:a6:be:32:75:56:4d:2f:c5:91:4e:28:0f:64:
cf:fe:99:ae:29:30:7c:ff:3e:4d:ed:2a:63:18:0b:fe:e2:97:
95:3e:bc:bc:7c:bf:16:b1:3b:18:6f:94:89:3f:77:a6:99:13:
a0:a0:d2:fe:54:81:ca:22:59:93:f3:93:05:9a:00:6d:ef:66:
d6:fb:75:63:da:54:bd:74:d7:11:18:fa:20:f5:f0:6e:79:52:
ac:e1:d5:fe:85:1c:53:d4:0e:99:c6:71:a7:1e:3f:44:a3:fb:
02:f8:71:1d:fd:d6:f8:35:82:2a:e9:cb:3b:32:76:30:7c:a3:
42:5d:ba:87:da:11:55:cc:d1:1f:5c:9f:39:89:91:f9:f7:30:
7b:60:2d:93:82:40:4f:db:33:3c:21:46:94:ab:11:41:47:dd:
b5:5d:0c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:45:26 2024 by rpki-client on console-fra.rpki-client.org