Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/j4e5xR_G4yGGKJFVIupIWxTC-Ro.roa
File: j4e5xR_G4yGGKJFVIupIWxTC-Ro.roa (raw, json)
Hash identifier: GTwCiK1cgusAwC+aE7QDUfH8a56r64PPYsn2axcRszo=
Subject key identifier: 8F:87:B9:C5:1F:C6:E3:21:86:28:91:55:22:EA:48:5B:14:C2:F9:1A
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC80158201F5BC14B8C37495CA5DD2647
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/j4e5xR_G4yGGKJFVIupIWxTC-Ro.roa
Signing time: Tue 02 Jan 2024 02:29:40 +0000
ROA not before: Tue 02 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201106
IP address blocks: 2a0c:b642:1a0a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:58:20:1f:5b:c1:4b:8c:37:49:5c:a5:dd:26:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f87b9c51fc6e3218628915522ea485b14c2f91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:df:cf:76:e2:4c:84:fb:85:ba:73:33:1f:
5a:49:87:d2:08:1c:51:0f:43:68:70:42:bc:ae:29:
c6:2c:9d:71:61:3b:3c:36:72:a9:34:cc:ba:8f:97:
5e:91:c9:3f:76:d2:11:c8:aa:59:0b:d8:2e:96:f6:
45:af:c1:ab:96:ca:34:2e:ee:2a:5e:a2:05:cf:c3:
7f:db:b0:0e:54:84:13:16:97:e5:3c:b1:54:38:d6:
cc:6a:74:cf:54:f1:24:ef:51:4d:cb:fa:cd:20:2b:
dc:85:13:65:e4:69:58:e0:c1:70:7e:4f:36:e3:d0:
ac:9c:5c:46:f9:3b:a6:a6:45:1d:9f:26:a2:de:c9:
ad:bf:d2:fe:fb:d0:78:77:fc:4a:de:07:3b:c1:d5:
7b:20:0b:ea:54:82:58:a8:6a:89:6e:7c:12:42:bb:
90:b0:6d:74:99:e5:e2:36:37:d4:87:40:ce:3f:c2:
0f:b4:82:12:2b:eb:f0:9b:98:fb:5d:fa:90:ed:89:
fb:56:92:af:6f:2d:79:ae:6f:e2:95:19:a1:22:54:
3e:bd:a3:b2:08:69:8d:86:bd:c1:00:79:02:52:69:
ae:6f:60:ea:cb:a9:3c:ef:bb:bf:86:41:15:6b:1e:
29:d5:67:e4:96:da:ae:d0:8f:a9:5b:4b:02:67:d3:
84:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:87:B9:C5:1F:C6:E3:21:86:28:91:55:22:EA:48:5B:14:C2:F9:1A
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/j4e5xR_G4yGGKJFVIupIWxTC-Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a0a::/48
Signature Algorithm: sha256WithRSAEncryption
2c:7a:85:a2:2a:24:bf:2e:cf:9b:38:54:97:44:67:c8:6d:d0:
9a:c1:cc:65:c7:04:f7:d8:34:0f:33:e8:59:6a:17:62:ad:16:
ff:93:37:74:53:77:0b:72:44:9e:9e:82:a4:0d:49:f6:e8:44:
6f:ab:5c:fe:9f:5c:fa:cd:ef:89:7b:ca:20:5b:02:a2:52:69:
6b:84:d7:5d:fb:94:d8:b3:a7:e0:14:38:98:a0:59:9e:8d:64:
6e:e1:7b:10:91:cd:4e:8d:e4:5b:bc:03:9c:80:87:6b:8f:ff:
a1:ea:5f:35:57:ee:4c:fb:7e:b5:2f:67:36:d5:10:b0:3d:66:
98:86:4e:bc:05:71:f1:50:47:3e:cd:db:7f:a1:86:8f:da:09:
6f:cc:d1:6b:68:44:02:50:b2:de:8a:be:a1:d8:dc:d2:c4:44:
cc:68:f3:a5:9b:bb:2c:fe:b8:11:bd:f9:cf:e9:91:6f:9f:ca:
1f:c5:aa:01:8a:5b:eb:07:90:df:12:e7:0b:93:6b:4b:3f:a0:
43:1b:cc:5b:3b:16:bc:2e:09:f7:13:d2:57:07:74:5d:79:e1:
8a:92:eb:42:09:b2:5d:5e:99:bd:a7:de:bf:8a:96:65:53:d8:
41:88:8a:d3:d0:cb:89:37:79:60:89:6b:d2:10:e0:59:26:0e:
06:92:10:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:10:19 2024 by rpki-client on console-fra.rpki-client.org