Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/qThaS8Ja8T0GekDuxlzZ3vYWlWw.roa
File: qThaS8Ja8T0GekDuxlzZ3vYWlWw.roa (raw, json)
Hash identifier: LsBz5GnIpoL/qZSxbeUgyqnkIC2b5/VV1/+l0wizmO4=
Subject key identifier: A9:38:5A:4B:C2:5A:F1:3D:06:7A:40:EE:C6:5C:D9:DE:F6:16:95:6C
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0190A233FE8AB874E6FB1BBE2C22C2909834
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/qThaS8Ja8T0GekDuxlzZ3vYWlWw.roa
Signing time: Thu 11 Jul 2024 14:30:34 +0000
ROA not before: Thu 11 Jul 2024 14:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214542
IP address blocks: 2a0c:b641:c90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a2:33:fe:8a:b8:74:e6:fb:1b:be:2c:22:c2:90:98:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jul 11 14:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9385a4bc25af13d067a40eec65cd9def616956c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:97:91:81:d7:0b:54:fd:f2:db:12:59:35:
cf:e7:21:73:93:12:40:49:ea:a6:47:0c:b7:52:66:
45:e9:9c:60:80:c3:96:b6:a5:ab:2c:1c:c8:51:0b:
d7:75:80:09:95:26:3f:96:3d:34:0e:64:e8:4c:d6:
5a:ec:64:eb:ca:62:17:9a:76:69:56:47:84:a1:aa:
b7:06:06:91:d8:58:01:b3:64:37:3e:83:12:8c:75:
71:3b:8e:07:71:77:82:9f:e8:6f:78:46:de:dc:43:
eb:e2:84:f8:fe:50:61:02:c8:7a:a3:af:b4:e4:8a:
0f:88:4f:86:c2:dc:77:a0:ac:24:7a:bb:ec:b7:34:
e4:5c:4b:a0:07:22:e0:86:18:d5:49:ff:6f:f1:28:
b2:fa:00:2d:29:0c:0a:54:3d:db:0c:f1:39:a2:f7:
b8:67:f3:fd:7e:42:30:78:69:ec:fb:72:77:57:0f:
ec:81:8c:39:00:1f:48:46:b3:3d:19:11:e5:ca:7c:
0d:d3:9c:2c:a5:c4:56:36:c5:9e:c7:e9:03:bc:ab:
99:5b:7c:e4:bc:62:35:3f:a0:d0:e4:be:f0:e5:92:
8b:9c:99:95:cc:92:b5:59:c1:73:45:66:5b:00:7d:
9c:92:59:69:2f:78:6b:92:8a:55:2f:41:ee:f4:c2:
67:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:38:5A:4B:C2:5A:F1:3D:06:7A:40:EE:C6:5C:D9:DE:F6:16:95:6C
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/qThaS8Ja8T0GekDuxlzZ3vYWlWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:c90::/44
Signature Algorithm: sha256WithRSAEncryption
43:47:0e:5d:5a:68:23:2e:87:c2:3e:35:2d:d7:3d:33:dc:2f:
00:1b:78:41:e7:76:ae:54:8e:9a:3a:5b:28:15:61:58:8e:5d:
a2:00:fb:c4:2e:4b:9d:fc:76:af:83:ea:1b:fb:24:d4:18:76:
4b:5e:43:78:d3:50:76:33:a2:5b:ec:84:8f:a5:8b:ca:56:5e:
db:ae:08:99:b4:51:94:24:f1:df:0a:00:58:62:fd:53:0e:3e:
4d:49:cb:c8:69:8a:58:c1:6d:b6:33:9a:9c:80:12:c5:38:de:
8a:cb:d4:d9:5c:3f:4f:1a:b2:a8:0a:a0:81:d4:c8:38:f8:72:
05:29:8c:ca:f6:cd:74:7c:c3:5e:d0:12:ec:e8:f7:b7:0c:73:
6b:59:27:c1:d8:c6:a9:b7:a3:4a:b0:79:f6:a2:06:71:a6:84:
ce:ce:6c:0b:de:2b:4d:7f:af:bc:85:45:e9:96:d6:36:5a:59:
4b:09:be:19:f5:64:b5:a8:ba:de:9a:1b:27:8b:5e:24:f7:40:
73:c4:b2:6b:e3:cb:42:92:3f:ae:a1:e6:51:b2:2f:fd:69:ae:
85:e9:34:09:5c:db:95:1f:b8:5c:59:aa:9e:48:f0:9b:3e:20:
b0:da:0a:d8:18:7b:42:db:14:8b:7d:4e:8a:c4:cd:e4:85:cb:
52:de:02:fb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZCiM/6KuHTm+xu+LCLCkJg0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQwNzExMTQzMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTM4NWE0YmMyNWFmMTNkMDY3YTQwZWVjNjVjZDlkZWY2MTY5NTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi+XkYHXC1T98tsSWTXP5yFzkxJA
SeqmRwy3UmZF6ZxggMOWtqWrLBzIUQvXdYAJlSY/lj00DmToTNZa7GTrymIXmnZp
VkeEoaq3BgaR2FgBs2Q3PoMSjHVxO44HcXeCn+hveEbe3EPr4oT4/lBhAsh6o6+0
5IoPiE+Gwtx3oKwkervstzTkXEugByLghhjVSf9v8Siy+gAtKQwKVD3bDPE5ove4
Z/P9fkIweGns+3J3Vw/sgYw5AB9IRrM9GRHlynwN05wspcRWNsWex+kDvKuZW3zk
vGI1P6DQ5L7w5ZKLnJmVzJK1WcFzRWZbAH2ckllpL3hrkopVL0Hu9MJnRwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKk4WkvCWvE9BnpA7sZc2d72FpVsMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvcVRoYVM4SmE4VDBHZWtEdXhselozdllXbFd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQyQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBDRw5dWmgjLofCPjUt1z0z3C8AG3hB53auVI6a
OlsoFWFYjl2iAPvELkud/Havg+ob+yTUGHZLXkN401B2M6Jb7ISPpYvKVl7brgiZ
tFGUJPHfCgBYYv1TDj5NScvIaYpYwW22M5qcgBLFON6Ky9TZXD9PGrKoCqCB1Mg4
+HIFKYzK9s10fMNe0BLs6Pe3DHNrWSfB2Mapt6NKsHn2ogZxpoTOzmwL3itNf6+8
hUXpltY2WllLCb4Z9WS1qLremhsni14k90BzxLJr48tCkj+uoeZRsi/9aa6F6TQJ
XNuVH7hcWaqeSPCbPiCw2grYGHtC2xSLfU6KxM3khctS3gL7
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:17 2024 by rpki-client on console-ams.rpki-client.org