Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/cT_pZ8HfLvN1i7YvBTcHBnL-grI.roa
File: cT_pZ8HfLvN1i7YvBTcHBnL-grI.roa (raw, json)
Hash identifier: KulmbA9KrM4haISTGRSMOCC0MFrriHiiL4uygvETTlg=
Subject key identifier: 71:3F:E9:67:C1:DF:2E:F3:75:8B:B6:2F:05:37:07:06:72:FE:82:B2
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC80182A81D97A225519A7D8EF5F20FEB
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/cT_pZ8HfLvN1i7YvBTcHBnL-grI.roa
Signing time: Tue 02 Jan 2024 02:29:51 +0000
ROA not before: Tue 02 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213382
IP address blocks: 2a0c:b641:830::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:82:a8:1d:97:a2:25:51:9a:7d:8e:f5:f2:0f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=713fe967c1df2ef3758bb62f0537070672fe82b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4a:d5:21:e1:4e:52:35:c0:03:3d:83:cd:f2:
22:97:ae:fb:53:ac:47:7c:9e:58:c1:2b:10:97:e4:
4c:ef:f3:b4:2e:ac:87:36:ba:0f:ee:3d:86:68:47:
0b:47:61:f3:6d:e4:79:6e:38:8d:16:ee:69:27:a2:
48:5d:50:42:d1:ec:9a:84:47:ed:4a:2b:28:5c:9e:
ca:ce:86:62:d1:d3:74:f0:32:f6:c4:d3:34:a2:f2:
35:bc:cd:7d:e3:89:ec:48:4d:25:98:fb:45:01:f8:
cf:82:5d:c1:c6:f6:1c:a3:d3:78:fb:e8:d9:0e:96:
4c:6a:0d:ae:e4:1d:d3:d2:f2:72:e8:a9:07:a4:9b:
13:76:2b:fc:cf:9c:67:be:61:a3:34:7b:51:71:14:
49:9f:27:ac:83:b8:0d:77:0a:b5:5e:c8:12:26:b2:
7a:e6:c2:c2:3f:77:80:93:71:3d:e7:c3:63:8d:2f:
82:68:8f:4a:57:3c:c5:96:68:32:33:17:54:70:43:
86:05:c8:79:cd:78:db:d3:e5:26:0e:f4:bc:c2:15:
ec:24:36:62:60:67:07:93:5e:46:b4:63:4e:7a:77:
87:3e:ba:65:af:48:53:69:d8:2f:11:90:33:f8:41:
1d:c4:50:93:0f:9e:4a:d5:bb:45:78:62:ee:27:aa:
7d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3F:E9:67:C1:DF:2E:F3:75:8B:B6:2F:05:37:07:06:72:FE:82:B2
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/cT_pZ8HfLvN1i7YvBTcHBnL-grI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:830::/44
Signature Algorithm: sha256WithRSAEncryption
5a:aa:3f:23:0a:fc:ec:a4:5e:b1:cc:49:d8:08:63:86:22:51:
f7:0d:28:aa:65:02:5f:fe:8d:41:17:eb:0e:d0:a7:ad:31:93:
29:6a:e0:08:b4:ec:42:3b:c6:17:00:78:dc:48:98:7d:86:c7:
f7:38:18:6a:5a:32:34:5d:36:a8:63:1a:37:80:0b:cc:3a:d3:
4f:59:2d:48:bd:9f:91:5b:d4:70:bb:6a:dd:8e:10:39:65:b9:
c0:14:30:26:3e:55:aa:33:d7:3b:a9:9b:0a:77:2c:7e:b8:78:
c9:50:61:80:b1:e4:ff:d9:09:b8:f3:e9:a0:6b:f0:69:dd:79:
31:e1:68:8f:65:dd:df:71:da:67:11:94:30:1a:8c:b3:44:e0:
a3:d7:1e:fc:46:c1:50:c8:dd:a4:9f:76:14:f7:c5:87:46:22:
d1:25:fb:f4:49:bc:01:66:70:f8:b2:40:3c:e9:b7:91:fd:84:
7a:d7:a7:ac:95:e4:a5:35:4b:2e:2a:40:5d:9f:94:69:eb:78:
d8:25:9d:13:a4:1f:de:10:27:d3:74:3b:24:d0:d4:90:96:20:
04:32:1c:fa:e2:3b:ea:b5:fc:c2:62:0b:4d:09:18:09:38:03:
e1:5b:f4:92:7d:f6:1e:71:1f:80:d2:19:24:15:aa:8c:af:2c:
48:38:69:5e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIAYKoHZeiJVGafY718g/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQwMTAyMDIyOTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTNmZTk2N2MxZGYyZWYzNzU4YmI2MmYwNTM3MDcwNjcyZmU4MmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0rVIeFOUjXAAz2DzfIil677U6xH
fJ5YwSsQl+RM7/O0LqyHNroP7j2GaEcLR2HzbeR5bjiNFu5pJ6JIXVBC0eyahEft
SisoXJ7KzoZi0dN08DL2xNM0ovI1vM1944nsSE0lmPtFAfjPgl3BxvYco9N4++jZ
DpZMag2u5B3T0vJy6KkHpJsTdiv8z5xnvmGjNHtRcRRJnyesg7gNdwq1XsgSJrJ6
5sLCP3eAk3E958NjjS+CaI9KVzzFlmgyMxdUcEOGBch5zXjb0+UmDvS8whXsJDZi
YGcHk15GtGNOeneHPrplr0hTadgvEZAz+EEdxFCTD55K1btFeGLuJ6p9sQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHE/6WfB3y7zdYu2LwU3BwZy/oKyMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvY1RfcFo4SGZMdk4xaTdZdkJUY0hCbkwtZ3JJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQgw
MA0GCSqGSIb3DQEBCwUAA4IBAQBaqj8jCvzspF6xzEnYCGOGIlH3DSiqZQJf/o1B
F+sO0KetMZMpauAItOxCO8YXAHjcSJh9hsf3OBhqWjI0XTaoYxo3gAvMOtNPWS1I
vZ+RW9Rwu2rdjhA5ZbnAFDAmPlWqM9c7qZsKdyx+uHjJUGGAseT/2Qm48+mga/Bp
3Xkx4WiPZd3fcdpnEZQwGoyzROCj1x78RsFQyN2kn3YU98WHRiLRJfv0SbwBZnD4
skA86beR/YR616esleSlNUsuKkBdn5Rp63jYJZ0TpB/eECfTdDsk0NSQliAEMhz6
4jvqtfzCYgtNCRgJOAPhW/SSffYecR+A0hkkFaqMryxIOGle
-----END CERTIFICATE-----
Generated at Sat May 4 08:45:26 2024 by rpki-client on console-fra.rpki-client.org