Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/v2siL-pk3-pwyIeD-CL9BH2vbig.roa
File: v2siL-pk3-pwyIeD-CL9BH2vbig.roa (raw, json)
Hash identifier: gS8bRy3jM5EwWmwj1vqWvwETsftjWmlA+I+vO73u+j8=
Subject key identifier: BF:6B:22:2F:EA:64:DF:EA:70:C8:87:83:F8:22:FD:04:7D:AF:6E:28
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC8017E7EF907B22F112B9CC4803188A5
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/v2siL-pk3-pwyIeD-CL9BH2vbig.roa
Signing time: Tue 02 Jan 2024 02:29:50 +0000
ROA not before: Tue 02 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212912
IP address blocks: 2a0c:b641:5e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7e:7e:f9:07:b2:2f:11:2b:9c:c4:80:31:88:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf6b222fea64dfea70c88783f822fd047daf6e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:26:5f:80:d3:85:12:4e:ff:95:0a:b0:0c:
89:a0:66:81:fc:ec:f9:16:20:55:00:1e:c5:01:37:
17:eb:97:6e:56:fd:52:4c:36:d0:d5:45:d0:13:20:
76:a7:b8:df:a8:72:d9:b6:3f:9b:bc:7e:4b:fa:b4:
25:2b:02:7a:96:44:53:5f:90:d1:43:24:aa:66:fb:
28:6b:39:48:72:ac:ae:32:70:91:f2:bb:66:56:45:
70:98:bf:75:70:96:de:a9:30:c0:d8:ba:05:c3:67:
90:af:97:7b:0b:57:58:6e:e3:b2:26:40:3c:87:28:
55:a8:1d:e0:b3:61:c0:64:53:ec:2f:8d:bc:5f:bb:
63:c6:56:54:24:19:23:81:3f:32:2d:95:23:de:06:
fb:88:a6:96:ba:73:e0:b3:a6:25:df:47:4a:4d:e9:
ca:a5:4c:8a:f8:d5:1d:22:ac:29:fe:18:36:2c:f0:
e7:21:92:1d:97:e5:4c:c6:e7:a4:1c:3d:7a:31:ee:
d9:fc:5d:a1:62:91:90:d3:46:bc:44:31:b1:d0:80:
9a:58:a0:e3:60:7f:a9:09:5a:c0:f3:30:82:fa:6a:
f6:98:10:fc:62:17:39:19:f8:5f:e6:93:ea:c1:18:
c0:f0:0c:ae:18:60:58:9e:19:bf:43:bf:ea:b6:82:
2b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6B:22:2F:EA:64:DF:EA:70:C8:87:83:F8:22:FD:04:7D:AF:6E:28
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/v2siL-pk3-pwyIeD-CL9BH2vbig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:5e0::/44
Signature Algorithm: sha256WithRSAEncryption
49:ef:f0:33:86:0e:fd:27:f9:72:23:23:9f:bf:3b:f5:0d:b7:
3e:17:5e:6b:e3:46:11:f3:72:42:92:dd:bc:00:d1:73:97:c1:
b9:a6:ce:b6:74:06:a7:21:45:ee:c0:c8:d8:c7:f5:8b:0c:39:
6c:c9:9f:be:0c:02:c5:0c:48:92:fc:eb:bb:2f:05:8b:01:e4:
ea:67:9a:98:26:fa:f4:4a:f7:78:a0:eb:f2:cd:74:0b:69:24:
89:ec:52:7c:0e:c4:27:23:56:21:d4:c1:97:4d:ad:08:80:ef:
62:c8:af:50:0c:52:a6:4d:4c:d0:73:61:c5:1b:db:0c:79:33:
2a:25:3f:58:47:b4:c8:85:13:bf:65:75:6d:39:a9:2a:2e:4d:
b5:05:ad:31:95:b6:03:ad:d7:8e:65:35:41:4b:79:6e:94:81:
28:9d:a8:1d:72:79:17:06:8b:f8:45:1a:e1:7b:cc:e5:83:1d:
f9:a2:c6:d2:6c:8b:0d:6d:2f:c2:e5:10:98:fc:62:a7:db:65:
59:58:7c:35:0d:ab:80:37:c8:18:8b:51:5e:45:f1:01:d0:be:
42:5a:dc:54:45:5e:04:df:cb:fb:3a:3b:ad:62:4f:65:17:5e:
ec:89:0e:bc:b8:25:c4:86:53:3c:ef:1a:59:6e:6d:cc:f4:fe:
82:cb:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:36:37 2024 by rpki-client on console-fra.rpki-client.org