Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/iLvQ-3BXe8enSvxcTk382UEXTsI.roa
File: iLvQ-3BXe8enSvxcTk382UEXTsI.roa (raw, json)
Hash identifier: zKft8DUElobvZDkKXXv4Kk/dNX0jDTXqH8wkTD9T8eQ=
Subject key identifier: 88:BB:D0:FB:70:57:7B:C7:A7:4A:FC:5C:4E:4D:FC:D9:41:17:4E:C2
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018E9F5DC09171DBC6D724D2320009EC8725
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/iLvQ-3BXe8enSvxcTk382UEXTsI.roa
Signing time: Tue 02 Apr 2024 15:11:45 +0000
ROA not before: Tue 02 Apr 2024 15:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215189
IP address blocks: 2a0c:b641:c20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:5d:c0:91:71:db:c6:d7:24:d2:32:00:09:ec:87:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Apr 2 15:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88bbd0fb70577bc7a74afc5c4e4dfcd941174ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c9:a0:84:b5:54:84:43:20:42:ec:3a:53:a3:
62:7e:b0:81:23:9e:40:48:47:c8:2d:46:e9:ac:2f:
46:ea:1f:83:03:03:12:dd:78:d5:10:bd:b7:bf:a9:
2f:c1:72:0e:2f:b4:d6:66:1a:c9:91:d3:63:19:dd:
11:ff:9a:27:c2:91:07:41:87:63:44:4a:12:27:96:
59:71:c0:ed:ea:8e:ca:c3:df:c0:67:62:76:f9:5f:
c9:86:f9:ac:8f:18:c5:63:4e:ca:83:65:34:93:0e:
1d:a6:67:ea:45:5b:18:0e:fb:d9:c6:3f:8d:69:2c:
b1:60:8b:f0:eb:5b:ef:3e:4d:da:44:32:eb:ae:66:
c7:90:f1:74:c0:a9:b9:ad:c8:a2:08:5b:d4:0a:0d:
45:e7:a8:d0:9f:0b:2f:2e:71:92:fe:76:d4:47:e9:
00:9c:a1:72:38:9f:15:6d:2d:df:2a:b0:1a:79:4c:
48:01:a8:42:1a:93:e8:b9:9f:fc:16:b7:ed:0e:c6:
88:94:c3:af:65:fe:ff:fa:71:01:65:ed:a8:ce:75:
5e:9c:79:98:66:79:76:b3:4b:89:f4:58:b4:d3:7c:
61:43:69:c2:22:18:60:6f:b5:7b:64:2d:4b:ad:23:
2b:87:41:0e:b2:72:ef:e3:1f:df:9d:6c:a2:a3:ef:
c3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BB:D0:FB:70:57:7B:C7:A7:4A:FC:5C:4E:4D:FC:D9:41:17:4E:C2
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/iLvQ-3BXe8enSvxcTk382UEXTsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:c20::/44
Signature Algorithm: sha256WithRSAEncryption
64:26:e4:4d:c0:17:7d:71:ec:93:b3:6e:9a:a1:57:ba:59:79:
20:db:df:2b:3b:81:d6:38:c4:39:0d:d0:97:6d:ba:48:16:b1:
2f:c7:f4:0d:24:73:02:74:b3:f8:87:d0:29:b7:dd:d8:20:89:
72:9e:6a:ae:5e:ed:8c:16:8a:6f:ab:9a:fd:a2:0e:92:71:f8:
b4:87:c8:53:5c:a8:4e:3b:38:49:35:f1:ec:a4:53:51:79:b8:
c9:a5:f3:1f:2a:b5:1a:82:f9:9e:cc:2c:9d:3e:c1:6b:84:a0:
b1:34:96:7e:d1:b1:b0:ed:ce:d4:ef:ff:74:a9:9c:8b:8d:b7:
ee:8e:6f:c6:e4:dd:0b:c2:2c:a9:7e:43:20:eb:9e:5d:bc:4f:
8c:e2:28:e6:da:fc:4a:bd:38:a0:be:4c:bc:a7:cb:1e:91:bd:
1e:40:8f:53:01:fc:fe:80:01:12:f4:2e:dc:23:f1:db:dd:1b:
d4:2a:dc:5a:dc:b3:d9:d2:34:a4:38:d7:90:c7:35:ba:b9:06:
c3:00:a3:44:88:75:84:4a:70:3f:6b:df:ba:74:f8:ec:c4:a9:
6a:5e:79:4f:5d:40:24:d3:e1:51:62:68:40:d7:3d:6e:8b:85:
ae:28:6e:8d:6f:00:07:2a:3e:bc:af:37:98:34:ad:7d:70:5f:
30:f9:f4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:17 2024 by rpki-client on console-ams.rpki-client.org