Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/oyRLu7AGO0yPTAmDZ9HqpGBOi-U.roa
File: oyRLu7AGO0yPTAmDZ9HqpGBOi-U.roa (raw, json)
Hash identifier: iTzGo61I2hCFFoIAyz+i4EuSD7vzdazsRGHye5rQgfU=
Subject key identifier: A3:24:4B:BB:B0:06:3B:4C:8F:4C:09:83:67:D1:EA:A4:60:4E:8B:E5
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC8017C6B3E10BD186368031B2BEAF2EE
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/oyRLu7AGO0yPTAmDZ9HqpGBOi-U.roa
Signing time: Tue 02 Jan 2024 02:29:49 +0000
ROA not before: Tue 02 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212625
IP address blocks: 2a0c:b641:2b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7c:6b:3e:10:bd:18:63:68:03:1b:2b:ea:f2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3244bbbb0063b4c8f4c098367d1eaa4604e8be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:eb:82:fb:fd:f4:dd:0e:81:7f:3a:5a:55:a3:
fe:f1:15:67:f5:a8:c2:ff:b0:b5:f2:8e:16:57:a0:
4d:ac:d2:9e:0f:68:b9:95:02:c4:db:ca:d4:3f:6b:
e0:00:db:04:9c:c5:09:f1:d9:85:a0:18:69:f6:70:
9f:32:e3:fa:81:61:4d:17:fc:b9:e7:43:be:df:28:
2c:1f:13:b9:a5:a9:1b:27:c6:a6:71:37:5f:59:dc:
09:2c:d4:07:b8:f7:55:f8:5c:06:0a:cd:81:94:4b:
60:97:55:e7:37:44:80:d4:c5:e1:00:b5:ab:1f:2e:
99:31:58:d3:16:3f:ba:bb:fa:af:2a:2e:b8:c0:ae:
c1:3f:5b:19:72:d0:fd:96:4f:cb:7b:79:0b:4e:54:
07:a6:9c:d6:e1:e2:a8:09:59:34:b6:39:02:e5:9f:
19:37:e2:34:f5:58:87:6d:5e:16:d0:5d:8a:c2:06:
49:a8:b2:3f:eb:84:8a:ec:ae:41:ef:0e:5d:41:d9:
fa:e2:e2:fd:a7:94:fc:40:5d:2b:b7:c0:30:78:37:
2d:80:a7:31:9a:03:a6:7f:73:eb:23:99:fb:95:71:
3b:34:dd:70:e8:c3:8a:70:77:0a:0a:a6:92:37:ca:
99:bb:0b:8e:1c:08:77:9f:36:95:bb:4a:66:c4:07:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:24:4B:BB:B0:06:3B:4C:8F:4C:09:83:67:D1:EA:A4:60:4E:8B:E5
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/oyRLu7AGO0yPTAmDZ9HqpGBOi-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:2b0::/44
Signature Algorithm: sha256WithRSAEncryption
4b:03:c9:0b:32:7f:ad:ac:5e:05:4e:f3:33:8e:4a:3e:35:7e:
25:4e:ff:25:0c:60:85:94:0f:30:5d:6a:0b:3a:e6:45:a2:90:
1a:38:20:08:0a:8a:2c:eb:6d:5a:c9:07:ce:0d:e0:6d:5f:e3:
71:b7:96:ca:ae:e6:04:2d:ec:36:f4:68:38:dd:e1:01:5e:e4:
70:7b:f7:05:cb:23:25:8b:b5:84:a2:02:ad:86:32:e6:61:d6:
dd:ba:46:34:f3:d7:44:4c:a3:d1:c4:71:57:7d:1d:29:91:11:
9e:0c:0f:60:f1:bc:e8:de:c8:74:f2:53:ba:74:a7:23:f4:5d:
3e:b6:87:24:50:20:78:50:94:d4:64:01:66:b3:f4:e4:4d:43:
c1:7c:32:e8:b8:70:4b:fe:10:e6:3e:94:a5:3b:d9:02:49:1d:
0b:7a:d6:d3:8e:04:fe:5f:96:06:db:91:c4:84:22:8e:f5:fb:
e4:d9:5f:28:3e:27:46:68:42:f3:63:e5:16:09:e5:59:c8:15:
7a:ca:ea:7c:53:a7:53:87:1f:75:b6:89:ce:6d:ec:07:45:85:
bd:46:a8:1f:b4:93:ac:ae:ff:88:aa:f8:53:e4:ad:a5:27:86:
c6:52:ea:84:8b:2b:67:5f:e7:81:9c:b1:83:61:84:af:f8:3c:
df:6a:e0:1c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIAXxrPhC9GGNoAxsr6vLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQwMTAyMDIyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzI0NGJiYmIwMDYzYjRjOGY0YzA5ODM2N2QxZWFhNDYwNGU4YmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+uC+/303Q6BfzpaVaP+8RVn9ajC
/7C18o4WV6BNrNKeD2i5lQLE28rUP2vgANsEnMUJ8dmFoBhp9nCfMuP6gWFNF/y5
50O+3ygsHxO5pakbJ8amcTdfWdwJLNQHuPdV+FwGCs2BlEtgl1XnN0SA1MXhALWr
Hy6ZMVjTFj+6u/qvKi64wK7BP1sZctD9lk/Le3kLTlQHppzW4eKoCVk0tjkC5Z8Z
N+I09ViHbV4W0F2KwgZJqLI/64SK7K5B7w5dQdn64uL9p5T8QF0rt8AweDctgKcx
mgOmf3PrI5n7lXE7NN1w6MOKcHcKCqaSN8qZuwuOHAh3nzaVu0pmxAd9bwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKMkS7uwBjtMj0wJg2fR6qRgTovlMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvb3lSTHU3QUdPMHlQVEFtRFo5SHFwR0JPaS1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQKw
MA0GCSqGSIb3DQEBCwUAA4IBAQBLA8kLMn+trF4FTvMzjko+NX4lTv8lDGCFlA8w
XWoLOuZFopAaOCAICoos621ayQfODeBtX+Nxt5bKruYELew29Gg43eEBXuRwe/cF
yyMli7WEogKthjLmYdbdukY089dETKPRxHFXfR0pkRGeDA9g8bzo3sh08lO6dKcj
9F0+tockUCB4UJTUZAFms/TkTUPBfDLouHBL/hDmPpSlO9kCSR0LetbTjgT+X5YG
25HEhCKO9fvk2V8oPidGaELzY+UWCeVZyBV6yup8U6dThx91tonObewHRYW9Rqgf
tJOsrv+IqvhT5K2lJ4bGUuqEiytnX+eBnLGDYYSv+DzfauAc
-----END CERTIFICATE-----
Generated at Sat May 4 18:14:04 2024 by rpki-client on console-fra.rpki-client.org