Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/gfFc8iVghu4jAFXuYyZIEIjCPWI.roa
File: gfFc8iVghu4jAFXuYyZIEIjCPWI.roa (raw, json)
Hash identifier: b8tUocgN1C2Q8aSahTGKtW2QPoTCRXCZHLjKnsMyogY=
Subject key identifier: 81:F1:5C:F2:25:60:86:EE:23:00:55:EE:63:26:48:10:88:C2:3D:62
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC801717E960A53A2AE16DF3CC5DC52E6
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/gfFc8iVghu4jAFXuYyZIEIjCPWI.roa
Signing time: Tue 02 Jan 2024 02:29:46 +0000
ROA not before: Tue 02 Jan 2024 02:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210481
IP address blocks: 2a0c:b641:560::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:71:7e:96:0a:53:a2:ae:16:df:3c:c5:dc:52:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81f15cf2256086ee230055ee6326481088c23d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:82:78:a0:0c:8f:8e:bf:32:68:95:3c:96:7b:
c9:31:6c:4a:8f:de:96:fc:78:46:31:0e:c3:1a:0b:
f7:0e:da:62:4a:6e:a0:84:99:32:73:a9:b7:fe:26:
99:c1:a7:3d:c6:1a:ed:5d:6b:e8:dc:c5:80:cb:9f:
d0:8e:50:9a:67:b1:89:73:59:77:0e:0e:15:96:4e:
a5:e8:94:86:f5:2d:00:32:a7:43:66:9b:e4:7d:b7:
be:80:10:48:6b:7e:e3:f8:25:44:e3:ec:bf:e2:08:
02:3c:de:be:f2:b4:dd:25:e7:dd:11:4e:67:12:b0:
73:22:e4:52:f9:53:38:b6:23:09:85:c0:0c:3f:e9:
91:86:8c:7e:1f:73:c6:c3:b9:e2:5d:f5:d5:f8:c9:
ab:ad:4a:01:d7:d4:1b:cd:17:be:23:85:ac:5d:66:
98:72:5f:d2:04:c4:96:8d:70:0a:d8:0e:18:73:76:
91:5a:54:2a:f1:8f:52:ec:32:4e:97:b3:74:a6:46:
40:e4:71:3a:5b:d2:63:73:84:6a:6c:90:2c:e9:be:
fd:f4:20:75:36:71:c0:88:22:95:34:ea:ce:03:13:
11:34:11:fa:be:b1:53:6a:7c:14:31:30:20:45:2e:
01:3a:65:07:f5:f4:da:72:e5:cb:da:ee:ac:53:16:
3c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F1:5C:F2:25:60:86:EE:23:00:55:EE:63:26:48:10:88:C2:3D:62
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/gfFc8iVghu4jAFXuYyZIEIjCPWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:560::/44
Signature Algorithm: sha256WithRSAEncryption
65:f7:00:b9:79:97:7a:e4:86:31:9a:64:a3:4e:91:53:97:ed:
c6:37:0c:c4:cc:fa:02:e6:c7:c4:fa:22:78:6f:4d:93:a3:14:
a7:56:f2:7d:12:54:0f:25:d1:c0:7f:99:4f:95:5a:be:e5:ba:
a1:18:6b:3e:70:c6:49:ec:6d:d7:76:01:d9:9f:a6:d2:20:50:
9a:6e:ba:6e:34:8f:66:4c:a8:a3:27:4e:fb:c9:e5:fb:1f:de:
6e:06:91:65:65:e9:bb:e1:44:4e:19:74:9b:8a:31:5f:2e:09:
31:ae:5b:f8:bb:b1:92:ea:ab:5d:91:26:47:2e:4e:95:9c:ab:
77:82:3e:00:dd:a1:e7:36:55:6f:c2:b0:e7:8f:99:b5:1d:9b:
2d:8a:00:44:2b:87:2b:d2:45:25:21:b4:91:a9:d4:f6:e6:8e:
f4:1c:a3:e4:33:7e:eb:c9:9b:fe:40:e8:9a:de:c1:a5:13:58:
94:93:66:dd:81:1c:96:1b:f2:ae:36:78:1a:85:85:95:cf:37:
9e:02:ee:31:a0:04:10:ff:f3:80:64:84:4f:a3:ae:5f:d9:95:
d7:e8:a1:37:40:d4:5a:b5:37:c6:89:d6:f5:86:d3:fe:74:93:
50:d1:65:5a:53:cf:98:2e:ac:e8:20:15:9b:b1:57:de:87:b1:
0a:b6:db:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:45:26 2024 by rpki-client on console-fra.rpki-client.org