Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/sY87YIYbtd2CfXoAbSmJnb54-5E.roa
File: sY87YIYbtd2CfXoAbSmJnb54-5E.roa (raw, json)
Hash identifier: CaIBin7vZ9LKot4+IcioTvLiMHzN6k17xlHaXQXSooo=
Subject key identifier: B1:8F:3B:60:86:1B:B5:DD:82:7D:7A:00:6D:29:89:9D:BE:78:FB:91
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC801653089E343306D906013B91B4B43
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/sY87YIYbtd2CfXoAbSmJnb54-5E.roa
Signing time: Tue 02 Jan 2024 02:29:43 +0000
ROA not before: Tue 02 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207363
IP address blocks: 2a0c:b641:720::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:65:30:89:e3:43:30:6d:90:60:13:b9:1b:4b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b18f3b60861bb5dd827d7a006d29899dbe78fb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:62:68:80:d6:98:23:5c:84:3a:e6:b4:f3:
11:9a:30:5b:c7:33:e9:4b:30:91:31:54:22:86:e9:
b1:5b:08:ad:d7:fa:a3:1b:43:ec:38:5a:ae:f7:36:
bc:69:f5:8b:95:57:ba:45:1b:b3:f2:de:2e:07:62:
30:f9:47:ae:5a:60:9c:3d:f8:d2:db:87:2c:66:46:
04:d2:ea:0a:c1:c8:69:68:47:d2:e5:15:e2:67:2f:
f1:10:90:6b:36:30:03:ab:53:e5:b0:e8:80:b3:7c:
67:1d:f1:8e:c6:15:07:99:3b:b8:e4:cd:a7:d1:67:
50:9b:5a:be:5f:4b:e4:a1:8a:a7:a6:5a:a1:0f:e6:
70:3d:ea:92:02:06:48:17:07:df:02:22:06:c7:52:
4b:39:31:f9:32:8b:6b:d1:d9:b9:e8:fd:a6:95:c2:
30:66:61:6f:45:8e:19:32:1d:cb:06:40:fd:cd:f0:
ea:63:8b:57:b4:c7:66:cd:a2:09:9b:fd:23:61:91:
55:eb:8f:c9:94:59:32:c7:5e:93:da:80:5d:cd:fe:
53:ff:88:73:45:11:5f:ce:87:aa:b9:58:2b:2a:d8:
ce:88:fd:6b:2e:1e:53:99:a1:97:a4:95:53:f6:85:
ac:d7:7a:6b:a3:fa:65:e7:c8:91:7a:53:13:ee:a1:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8F:3B:60:86:1B:B5:DD:82:7D:7A:00:6D:29:89:9D:BE:78:FB:91
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/sY87YIYbtd2CfXoAbSmJnb54-5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:720::/44
Signature Algorithm: sha256WithRSAEncryption
94:54:db:c8:d3:2f:f7:c4:fa:c8:a9:04:68:d4:29:6f:12:ef:
a8:17:49:e7:67:b7:ad:6f:01:28:b7:84:ef:42:02:57:9e:e2:
db:ab:01:c4:fc:a5:81:b0:a3:58:b1:eb:7c:f5:77:ec:e6:b7:
21:59:8e:b9:9d:6c:ce:da:14:54:0b:3b:1d:8c:66:9b:78:aa:
69:37:da:b3:1c:0c:bc:3c:18:49:da:06:29:cd:99:c1:31:3a:
67:a9:e2:c1:2f:b7:10:f3:08:e9:7a:1c:06:31:c5:02:fc:99:
f4:d2:86:8e:82:17:2f:6e:e5:19:02:48:a7:5f:00:d4:32:e9:
06:71:3b:6e:04:6b:39:b4:65:ed:74:39:01:18:f2:65:12:90:
70:e1:bd:30:42:7b:28:c8:9b:64:db:63:07:6e:70:cc:1b:f6:
1c:0d:be:f5:37:91:93:17:9a:ff:36:39:9b:33:0e:b6:99:3a:
24:2d:7d:c8:72:ef:a3:f5:c8:e2:df:b1:fd:3c:ea:ee:28:8d:
94:c2:94:c8:07:9d:22:fb:f9:86:3d:35:c5:25:62:7f:b0:11:
56:d1:6b:19:fe:27:9b:ff:cd:2b:94:f7:a5:9d:22:dd:2a:a0:
84:20:61:03:e5:61:3f:0f:e0:a8:0b:d5:b8:93:8e:d5:a6:12:
79:c5:da:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:45:26 2024 by rpki-client on console-fra.rpki-client.org