Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/fS7ANIyRfOFa3YsIAK58_-Z62lY.roa
File: fS7ANIyRfOFa3YsIAK58_-Z62lY.roa (raw, json)
Hash identifier: J+7WJLoCT6QiaqVGfcJXFI3E4W4qCdYgLgyaI6JeZgU=
Subject key identifier: 7D:2E:C0:34:8C:91:7C:E1:5A:DD:8B:08:00:AE:7C:FF:E6:7A:DA:56
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC8017D5D20F4813DA3DFB0D7EBF9F163
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/fS7ANIyRfOFa3YsIAK58_-Z62lY.roa
Signing time: Tue 02 Jan 2024 02:29:49 +0000
ROA not before: Tue 02 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212715
IP address blocks: 2a0c:b641:4e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7d:5d:20:f4:81:3d:a3:df:b0:d7:eb:f9:f1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d2ec0348c917ce15add8b0800ae7cffe67ada56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0b:9b:58:8f:06:b6:82:8f:3a:f7:77:37:17:
58:49:07:8e:d4:f5:85:ff:f1:f6:32:14:63:c0:5d:
d3:fd:b4:d4:17:b1:f9:8f:0c:4b:bf:31:fc:10:f9:
e5:2a:14:33:d2:3a:7f:1e:5e:de:83:dd:33:2b:60:
e1:f6:16:af:21:86:d7:5e:23:9a:d5:2c:bc:cf:73:
5f:0f:99:b3:06:60:ce:bb:ca:b9:4f:3d:02:7f:db:
fc:7a:2d:7c:ca:28:8f:d5:ab:a0:36:4c:88:8f:e9:
7b:d8:e6:64:d3:d5:b6:3a:e2:64:33:8c:41:2a:6f:
2e:45:4c:70:91:32:4a:5a:99:84:7f:33:eb:95:ac:
8a:45:73:34:0f:d8:1f:9e:97:db:04:62:b5:96:b1:
15:fd:39:26:9f:26:7e:eb:ba:12:21:a6:ad:b1:11:
b1:27:d8:57:3f:21:12:ea:57:42:92:90:5a:ea:cd:
29:e1:77:24:74:d0:9d:8e:c2:42:4e:32:61:4f:60:
e9:a3:f0:a3:0a:88:93:ac:ab:77:cc:3b:16:cb:93:
a0:a3:67:c9:e7:69:ce:4e:23:58:18:40:85:a7:f2:
0f:de:cc:c6:af:80:ec:aa:6c:0d:77:18:3c:a8:22:
78:f3:26:df:70:40:e6:90:b4:5f:3c:cb:63:ca:1c:
26:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2E:C0:34:8C:91:7C:E1:5A:DD:8B:08:00:AE:7C:FF:E6:7A:DA:56
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/fS7ANIyRfOFa3YsIAK58_-Z62lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:4e0::/44
Signature Algorithm: sha256WithRSAEncryption
5f:74:f8:d9:69:e1:87:dd:11:a3:be:2d:b1:1e:b1:a9:ab:fc:
d7:2a:ba:ac:c1:9f:73:f0:58:b1:9c:5c:e2:74:d9:7a:cb:1f:
27:9c:9d:8d:40:57:53:64:93:ab:d9:62:01:18:95:64:89:4f:
f9:05:e8:7b:63:33:c1:e6:7a:7c:ec:42:46:88:2d:c3:57:b2:
74:32:21:f8:89:1f:42:d4:ae:4e:9d:51:90:f3:e0:c8:e6:fc:
c7:75:e5:52:69:5e:72:21:7d:23:87:13:10:e8:e1:ea:e6:b7:
08:0e:22:a1:d3:e0:c6:c1:28:00:8a:ef:f6:2b:f4:1a:89:51:
98:d3:44:16:fb:1d:b1:68:17:4f:04:d2:61:bd:a4:4b:bf:e9:
b7:57:59:2f:53:b7:cf:ff:37:84:b9:ca:be:ae:04:e2:fe:a9:
d9:50:c5:a6:08:e1:de:4d:1c:3c:28:88:06:1e:b2:b9:e3:c1:
54:d9:8c:d9:8d:b3:de:38:e7:f8:5a:83:65:78:3e:61:00:15:
67:df:1a:df:e9:b0:7b:75:86:31:af:b7:89:b5:40:cd:0e:ee:
3e:91:ab:d6:a0:61:57:8d:75:df:d2:09:46:71:b5:d3:9a:0f:
84:2a:c4:62:65:16:c7:39:c3:a2:52:dd:42:f3:47:2a:e0:6a:
57:10:78:f4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIAX1dIPSBPaPfsNfr+fFjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQwMTAyMDIyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDJlYzAzNDhjOTE3Y2UxNWFkZDhiMDgwMGFlN2NmZmU2N2FkYTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigubWI8GtoKPOvd3NxdYSQeO1PWF
//H2MhRjwF3T/bTUF7H5jwxLvzH8EPnlKhQz0jp/Hl7eg90zK2Dh9havIYbXXiOa
1Sy8z3NfD5mzBmDOu8q5Tz0Cf9v8ei18yiiP1augNkyIj+l72OZk09W2OuJkM4xB
Km8uRUxwkTJKWpmEfzPrlayKRXM0D9gfnpfbBGK1lrEV/TkmnyZ+67oSIaatsRGx
J9hXPyES6ldCkpBa6s0p4XckdNCdjsJCTjJhT2Dpo/CjCoiTrKt3zDsWy5Ogo2fJ
52nOTiNYGECFp/IP3szGr4DsqmwNdxg8qCJ48ybfcEDmkLRfPMtjyhwmBQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFH0uwDSMkXzhWt2LCACufP/metpWMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvZlM3QU5JeVJmT0ZhM1lzSUFLNThfLVo2MmxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQTg
MA0GCSqGSIb3DQEBCwUAA4IBAQBfdPjZaeGH3RGjvi2xHrGpq/zXKrqswZ9z8Fix
nFzidNl6yx8nnJ2NQFdTZJOr2WIBGJVkiU/5Beh7YzPB5np87EJGiC3DV7J0MiH4
iR9C1K5OnVGQ8+DI5vzHdeVSaV5yIX0jhxMQ6OHq5rcIDiKh0+DGwSgAiu/2K/Qa
iVGY00QW+x2xaBdPBNJhvaRLv+m3V1kvU7fP/zeEucq+rgTi/qnZUMWmCOHeTRw8
KIgGHrK548FU2YzZjbPeOOf4WoNleD5hABVn3xrf6bB7dYYxr7eJtUDNDu4+kavW
oGFXjXXf0glGcbXTmg+EKsRiZRbHOcOiUt1C80cq4GpXEHj0
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:17 2024 by rpki-client on console-ams.rpki-client.org