Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/dvNZUNi07IsllI2Oo6txC-HCL0E.roa
File: dvNZUNi07IsllI2Oo6txC-HCL0E.roa (raw, json)
Hash identifier: dXNKIsUJHpYKCwRb0r7LRZB+qRcy9R7ePRPuZiY1QHE=
Subject key identifier: 76:F3:59:50:D8:B4:EC:8B:25:94:8D:8E:A3:AB:71:0B:E1:C2:2F:41
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC8015292CD94003CF5DB697CC76972E1
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/dvNZUNi07IsllI2Oo6txC-HCL0E.roa
Signing time: Tue 02 Jan 2024 02:29:39 +0000
ROA not before: Tue 02 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141694
IP address blocks: 2a0c:b641:240::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:52:92:cd:94:00:3c:f5:db:69:7c:c7:69:72:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76f35950d8b4ec8b25948d8ea3ab710be1c22f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:65:21:ff:b1:38:6e:53:c3:7c:da:69:e0:70:
e2:e9:45:83:13:b5:bf:ed:b7:42:b3:3e:a3:0d:89:
0c:fe:7d:3f:05:8f:ca:3b:eb:a3:e7:a9:6f:f8:b7:
85:00:c4:cb:a2:46:75:84:83:3a:6a:d0:7f:5b:29:
aa:e1:b8:17:65:43:14:03:1f:b9:ab:cb:f5:d6:20:
63:92:90:64:6f:7d:45:fb:fc:49:0b:4e:8c:c8:6d:
69:55:6f:b5:b6:c6:1d:93:77:88:9d:1c:d8:80:db:
de:31:ac:34:2e:01:52:cc:ba:d8:5f:91:2b:78:94:
93:fb:62:a1:a8:22:f6:97:08:01:ac:b4:bc:61:35:
fe:f5:43:4f:74:29:f7:e1:75:28:b0:de:98:31:65:
c9:4b:60:f5:ef:c3:df:e2:71:76:54:55:68:f1:15:
d0:a4:ab:2c:b1:ed:bf:8c:83:95:81:02:90:61:73:
7a:ea:ee:99:42:b6:d3:e0:98:13:29:27:1c:03:5c:
1d:42:a0:97:46:1c:ad:1a:5b:b5:d0:58:fd:b0:6c:
ef:28:33:3a:d9:86:2a:e9:6a:a9:96:63:a9:80:bb:
de:94:2f:56:04:0f:b0:e0:18:d1:8e:65:30:52:5b:
7e:5c:dd:b9:23:ab:c8:83:9d:e4:51:53:70:78:b1:
3f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F3:59:50:D8:B4:EC:8B:25:94:8D:8E:A3:AB:71:0B:E1:C2:2F:41
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/dvNZUNi07IsllI2Oo6txC-HCL0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:240::/44
Signature Algorithm: sha256WithRSAEncryption
0d:59:be:3c:c9:f3:7c:0f:04:0c:4c:fb:ef:22:93:4a:19:b8:
14:71:8f:81:74:66:b7:ac:c2:9f:e8:d4:50:a2:1c:e8:a3:e4:
79:69:c7:4f:2d:3e:01:cb:b0:34:4e:b9:41:35:6f:57:ba:9e:
77:16:28:f7:77:82:af:ff:3a:c0:f7:cd:8a:8d:83:e3:ee:ca:
be:e9:12:1f:a5:54:f2:f7:96:5b:a4:fb:a9:ed:14:6f:e2:1e:
ce:8c:e5:10:9d:05:d1:f2:01:c5:12:a6:a5:0c:e3:ce:0b:dc:
97:2d:16:dd:7f:7f:ab:ba:50:75:8e:70:ad:45:c0:d7:44:88:
e7:63:16:73:ba:09:c6:71:64:c0:81:20:40:6c:39:9f:73:b6:
ea:23:c9:1b:34:1c:f3:27:8f:75:0b:66:9e:3a:99:2e:37:27:
bb:53:2a:9e:3d:29:66:57:52:80:bc:8a:05:c3:7d:5e:c4:d6:
3b:6e:d0:44:60:23:c4:54:8a:1e:51:a8:c2:5c:ee:3c:27:20:
39:84:09:4e:41:06:1d:db:23:ec:76:84:bd:df:66:7b:92:82:
0b:8f:08:45:95:3d:95:3a:5b:43:4c:58:e1:ab:2c:49:47:22:
23:0c:e7:8f:65:b6:ac:de:08:2f:95:d9:64:9a:4f:10:4d:ea:
10:1d:20:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:45:26 2024 by rpki-client on console-fra.rpki-client.org