Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/jS7ZkDLjn1CSQjfOmjentxjhBSI.roa
File: jS7ZkDLjn1CSQjfOmjentxjhBSI.roa (raw, json)
Hash identifier: VtuzSG7GMuwUcGMLwECMM58kHfQ443ChQbTsRypoV3U=
Subject key identifier: 8D:2E:D9:90:32:E3:9F:50:92:42:37:CE:9A:37:A7:B7:18:E1:05:22
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC8017D8CCD90377E56AFB19C6E46294E
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/jS7ZkDLjn1CSQjfOmjentxjhBSI.roa
Signing time: Tue 02 Jan 2024 02:29:50 +0000
ROA not before: Tue 02 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212740
IP address blocks: 2a0c:b641:4d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7d:8c:cd:90:37:7e:56:af:b1:9c:6e:46:29:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d2ed99032e39f50924237ce9a37a7b718e10522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:22:11:ec:f0:83:93:ef:b3:7b:60:96:71:9e:
09:cb:dc:5b:85:dd:5c:d2:17:a5:07:6c:62:b1:74:
75:18:55:af:3c:fc:7e:02:43:63:ee:20:f7:29:11:
cd:c0:7d:ba:e1:dd:a6:84:b8:70:1b:d1:73:0e:f2:
22:2e:43:c2:11:ae:6e:63:e2:74:2f:aa:89:9e:e3:
bf:df:7a:2d:2d:1f:f3:51:01:9d:62:3e:85:68:d3:
93:97:1e:87:e2:85:45:b5:42:51:9f:6f:c7:00:2c:
03:d9:d4:37:f1:71:34:96:5e:0b:06:bc:ff:43:40:
78:57:db:6e:d9:35:98:f0:b1:17:6a:ab:c2:f4:50:
f3:d8:26:af:bc:3c:eb:7b:ca:cb:f7:e0:aa:89:db:
58:26:13:df:04:c7:06:de:46:6f:48:c5:c2:87:24:
26:71:2c:88:1b:cf:7b:6a:cc:9e:df:6d:c1:b8:e9:
d3:ae:28:c5:0e:1f:0b:aa:f8:64:9a:52:47:b9:0b:
5a:d4:74:db:8a:f4:ab:9f:f3:34:54:9f:a9:f8:9a:
07:a9:b8:41:92:fe:9c:fa:64:0c:09:43:0d:e5:f8:
22:bf:6a:94:69:03:c5:2d:07:ee:59:9d:88:dd:1d:
9d:ac:40:27:3e:02:1c:bc:d4:20:dc:8b:82:cc:cb:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2E:D9:90:32:E3:9F:50:92:42:37:CE:9A:37:A7:B7:18:E1:05:22
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/jS7ZkDLjn1CSQjfOmjentxjhBSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:4d0::/44
Signature Algorithm: sha256WithRSAEncryption
55:90:2c:cc:9e:6e:c4:a7:48:43:99:1b:5d:47:e1:f7:66:29:
45:0c:db:c7:ca:07:de:19:8a:19:f8:d2:95:74:91:51:b4:e2:
9d:6e:92:63:cc:6d:5f:aa:16:9b:83:2c:f5:ce:7e:2b:e9:84:
bc:99:b0:d9:0a:87:82:68:c9:0b:d5:7e:30:f2:e3:39:2c:e1:
ea:e1:11:dc:39:fc:54:31:d1:75:89:34:51:e5:1f:e8:f7:09:
50:cd:90:c6:93:eb:0c:1f:ad:00:5f:a8:89:54:66:ba:35:d9:
c1:99:c9:dd:4a:0f:e0:43:37:69:6c:24:a6:b9:06:4d:a2:7c:
9b:f2:bf:c1:c5:27:ca:6e:bc:96:cd:00:cb:fb:50:d9:b4:99:
17:31:a7:90:16:6e:f9:87:73:52:ad:a6:52:68:8d:97:15:b7:
bc:a9:3a:6a:27:c8:a8:97:83:e8:df:de:03:b2:66:60:2d:a5:
dd:23:d6:13:7e:37:34:de:f3:97:97:94:cf:78:34:cd:86:cd:
07:db:57:c5:e3:e9:34:97:b0:42:2f:55:8b:ce:25:09:1b:c9:
6b:47:9f:98:1a:84:58:50:53:fb:d9:91:8a:ab:29:89:da:92:
6d:26:1c:cc:b6:18:e4:ad:64:b8:17:2c:80:62:59:46:0c:94:
15:04:ef:58
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIAX2MzZA3flavsZxuRilOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQwMTAyMDIyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDJlZDk5MDMyZTM5ZjUwOTI0MjM3Y2U5YTM3YTdiNzE4ZTEwNTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yIR7PCDk++ze2CWcZ4Jy9xbhd1c
0helB2xisXR1GFWvPPx+AkNj7iD3KRHNwH264d2mhLhwG9FzDvIiLkPCEa5uY+J0
L6qJnuO/33otLR/zUQGdYj6FaNOTlx6H4oVFtUJRn2/HACwD2dQ38XE0ll4LBrz/
Q0B4V9tu2TWY8LEXaqvC9FDz2CavvDzre8rL9+CqidtYJhPfBMcG3kZvSMXChyQm
cSyIG897asye323BuOnTrijFDh8LqvhkmlJHuQta1HTbivSrn/M0VJ+p+JoHqbhB
kv6c+mQMCUMN5fgiv2qUaQPFLQfuWZ2I3R2drEAnPgIcvNQg3IuCzMuHkwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI0u2ZAy459QkkI3zpo3p7cY4QUiMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvalM3WmtETGpuMUNTUWpmT21qZW50eGpoQlNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQTQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBVkCzMnm7Ep0hDmRtdR+H3ZilFDNvHygfeGYoZ
+NKVdJFRtOKdbpJjzG1fqhabgyz1zn4r6YS8mbDZCoeCaMkL1X4w8uM5LOHq4RHc
OfxUMdF1iTRR5R/o9wlQzZDGk+sMH60AX6iJVGa6NdnBmcndSg/gQzdpbCSmuQZN
onyb8r/BxSfKbryWzQDL+1DZtJkXMaeQFm75h3NSraZSaI2XFbe8qTpqJ8iol4Po
394DsmZgLaXdI9YTfjc03vOXl5TPeDTNhs0H21fF4+k0l7BCL1WLziUJG8lrR5+Y
GoRYUFP72ZGKqymJ2pJtJhzMthjkrWS4FyyAYllGDJQVBO9Y
-----END CERTIFICATE-----
Generated at Sat May 4 00:10:19 2024 by rpki-client on console-fra.rpki-client.org