Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/cq7rUUMfxdr_hVCExbpm6FbvGR0.roa
File: cq7rUUMfxdr_hVCExbpm6FbvGR0.roa (raw, json)
Hash identifier: aQtiAKxrhx3VicFHPb1a1GQ+Zy9N3K8Vh8qxnEPdbzs=
Subject key identifier: 72:AE:EB:51:43:1F:C5:DA:FF:85:50:84:C5:BA:66:E8:56:EF:19:1D
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC80178A0FC42AF8D42793A145D90A3F8
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/cq7rUUMfxdr_hVCExbpm6FbvGR0.roa
Signing time: Tue 02 Jan 2024 02:29:48 +0000
ROA not before: Tue 02 Jan 2024 02:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211754
IP address blocks: 2a0c:b641:890::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:78:a0:fc:42:af:8d:42:79:3a:14:5d:90:a3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72aeeb51431fc5daff855084c5ba66e856ef191d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4f:7d:03:cb:b4:b6:2b:98:eb:fa:d8:9b:0d:
7b:22:73:ab:47:2e:0b:aa:99:b9:91:48:4c:3b:a4:
0b:cc:8a:39:1b:92:f1:6f:d3:83:1c:94:ad:7f:cc:
04:24:0b:c7:d2:1c:0e:62:dc:ea:22:27:ca:6d:61:
a0:ff:26:22:d3:b4:13:c9:53:3c:e2:f5:dc:7e:32:
ef:cc:32:04:6c:f1:31:f4:bd:e6:05:e5:f4:cb:16:
52:2a:dc:a0:bf:f8:3b:90:07:1a:45:9c:b7:a8:77:
c6:fc:ba:bf:46:15:31:cf:0d:de:bb:b7:e8:02:44:
32:6e:d3:05:fc:76:41:df:05:fb:2b:6d:1e:84:d3:
50:49:f6:72:8a:f9:a8:03:8a:ed:5d:b5:29:75:61:
df:1a:9e:64:7a:06:85:29:0b:2b:c8:e3:18:82:71:
a2:66:3e:8f:01:23:54:3a:18:64:26:82:fc:81:8e:
03:60:0e:93:90:1e:38:8d:95:f7:e1:05:d2:f7:f2:
e7:c4:3f:02:b1:23:f7:e4:92:7d:e2:a6:f7:90:79:
61:98:47:bb:f4:c4:df:92:d4:17:12:34:97:ea:67:
48:dd:c9:30:ab:66:ca:7f:a0:ba:f1:cd:e2:92:ca:
29:d1:58:ae:db:9a:19:35:09:d6:79:2e:90:02:41:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AE:EB:51:43:1F:C5:DA:FF:85:50:84:C5:BA:66:E8:56:EF:19:1D
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/cq7rUUMfxdr_hVCExbpm6FbvGR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:890::/44
Signature Algorithm: sha256WithRSAEncryption
76:f3:56:26:4b:0a:bf:81:b9:65:5a:c6:12:cd:8c:85:a6:f0:
a6:0b:68:a8:ab:db:de:5a:18:f8:f8:3a:11:22:6d:0e:9d:87:
6b:59:eb:38:82:54:0d:fc:18:bd:4d:2f:30:3b:c9:6c:1f:8e:
00:4d:44:90:61:b5:14:95:01:f7:93:c7:a8:c7:db:0e:04:2d:
8e:5b:19:25:c0:01:ba:2c:66:21:e9:25:09:3c:d8:90:86:51:
ab:63:66:b8:fd:f1:49:48:e0:b2:6d:b3:5a:de:fa:e3:4a:2e:
1a:e1:bb:d0:e1:3c:4e:a9:81:ba:32:ea:3d:e3:11:82:50:42:
ce:b4:ad:d6:b8:52:fc:62:54:46:28:03:4e:98:a1:4c:51:9f:
9f:f7:47:ca:f4:49:28:4a:89:48:03:8c:51:fb:f1:e0:30:62:
ae:6f:cd:02:ec:63:a0:51:83:8d:c7:30:b6:80:96:0c:73:f0:
c2:b0:5a:6c:05:86:45:5d:0d:8d:f1:ee:89:2e:f3:04:e4:a0:
c9:ad:ec:a4:33:81:e9:8a:53:09:19:e1:27:f7:55:55:0b:df:
8f:b3:d5:6a:d3:0f:e5:ff:00:cd:26:83:71:a5:21:70:e8:ed:
c8:37:d1:45:a5:82:c5:eb:10:95:d8:0f:93:a3:ed:2f:a2:97:
d3:14:25:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:03:10 2024 by rpki-client on console-ams.rpki-client.org