Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/xfVcYPs_A7TkvV0m7jeS59oN71g.roa
File: xfVcYPs_A7TkvV0m7jeS59oN71g.roa (raw, json)
Hash identifier: bV4iJX7+e9ArWHrS3mLsOFxFpN4JliKUBBYqvSsy8rc=
Subject key identifier: C5:F5:5C:60:FB:3F:03:B4:E4:BD:5D:26:EE:37:92:E7:DA:0D:EF:58
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0192F7B44D3B1702D690ADDACCC601DFF6BE
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/xfVcYPs_A7TkvV0m7jeS59oN71g.roa
Signing time: Mon 04 Nov 2024 15:04:01 +0000
ROA not before: Mon 04 Nov 2024 15:04:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213920
IP address blocks: 2a0c:b641:30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f7:b4:4d:3b:17:02:d6:90:ad:da:cc:c6:01:df:f6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Nov 4 15:04:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5f55c60fb3f03b4e4bd5d26ee3792e7da0def58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bd:c8:7b:af:4d:36:05:f6:32:e7:7b:40:e1:
e3:54:31:22:87:4b:23:70:68:61:7c:53:a5:b0:56:
5c:62:02:d9:b5:ff:06:81:3a:98:f1:7e:eb:70:d4:
52:3c:e1:8c:d9:ce:f5:55:a0:20:7f:b4:5f:67:ae:
d4:98:3e:54:6f:49:98:c2:e3:ea:70:4d:b1:0f:be:
d4:f4:2c:8a:9c:ca:35:7c:e5:d4:e6:56:ce:d2:a9:
77:4e:fb:ef:02:90:1e:78:24:eb:6c:11:63:f5:82:
98:b4:f6:30:1a:4b:81:e1:e0:e3:49:bb:80:79:ce:
33:60:22:8a:b4:f3:b0:66:56:ab:97:d7:82:1e:77:
6b:e4:e5:16:dc:d4:1f:53:0c:80:5a:86:a5:94:30:
cd:ab:12:fd:a7:b9:6c:cf:93:b1:40:f4:7c:96:94:
4d:b1:51:65:21:71:27:60:17:dd:35:f1:5b:40:5f:
d4:00:96:21:a0:a3:71:2a:32:92:9f:0f:48:df:76:
b4:2e:8e:8f:f2:b3:af:b0:5a:01:9f:8c:06:60:e2:
b1:56:10:36:44:3e:82:84:96:64:fb:75:a9:4e:b6:
14:f2:09:75:08:75:e0:71:ef:ee:77:a3:a7:d7:7f:
41:06:8f:ef:54:8c:0d:4b:4c:97:47:a7:47:28:d0:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F5:5C:60:FB:3F:03:B4:E4:BD:5D:26:EE:37:92:E7:DA:0D:EF:58
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/xfVcYPs_A7TkvV0m7jeS59oN71g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:30::/44
Signature Algorithm: sha256WithRSAEncryption
6a:5e:2b:3c:f2:d9:ef:34:6b:51:05:87:90:93:79:6e:2b:38:
a3:d2:a1:62:5b:44:ab:f6:3c:18:ce:33:99:d3:bd:0b:bb:81:
39:b8:2c:86:8f:53:0e:0a:0e:7f:e6:b0:27:77:d9:94:e2:c9:
2b:c8:c2:17:7f:fa:a9:f0:25:34:bc:4c:e0:78:22:d3:f1:7b:
5f:55:62:cd:d4:e8:03:7f:43:af:a9:39:90:52:1d:b1:33:a5:
4f:f7:2f:48:ac:72:e7:56:4a:45:d4:28:e2:81:0a:54:06:a6:
16:0d:a2:8b:86:d2:83:02:22:3f:18:9e:d5:93:cf:ed:8f:77:
84:9e:f7:b2:48:09:60:ce:00:fb:2d:f1:6a:a0:af:ba:35:5c:
d6:2c:8f:ad:0b:86:5f:5f:7b:d0:01:72:cf:19:38:a4:88:cd:
65:b6:da:fe:14:56:77:d9:80:8f:dc:7d:53:3b:59:aa:ee:aa:
f2:94:91:cd:ca:f0:97:9d:b1:f1:1b:66:9f:fb:48:1b:2f:03:
74:38:45:40:36:c9:28:81:f3:06:1e:d3:c5:f4:9f:7a:48:37:
a0:fc:c0:56:c8:e2:5f:67:96:3b:e2:81:a5:ac:10:5c:13:1f:
c3:ad:5d:ea:ac:41:c3:2e:8b:cc:67:58:20:27:db:d7:b3:8e:
04:c9:8f:8a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZL3tE07FwLWkK3azMYB3/a+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQxMTA0MTUwNDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWY1NWM2MGZiM2YwM2I0ZTRiZDVkMjZlZTM3OTJlN2RhMGRlZjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4L3Ie69NNgX2Mud7QOHjVDEih0sj
cGhhfFOlsFZcYgLZtf8GgTqY8X7rcNRSPOGM2c71VaAgf7RfZ67UmD5Ub0mYwuPq
cE2xD77U9CyKnMo1fOXU5lbO0ql3TvvvApAeeCTrbBFj9YKYtPYwGkuB4eDjSbuA
ec4zYCKKtPOwZlarl9eCHndr5OUW3NQfUwyAWoallDDNqxL9p7lsz5OxQPR8lpRN
sVFlIXEnYBfdNfFbQF/UAJYhoKNxKjKSnw9I33a0Lo6P8rOvsFoBn4wGYOKxVhA2
RD6ChJZk+3WpTrYU8gl1CHXgce/ud6On139BBo/vVIwNS0yXR6dHKND51wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMX1XGD7PwO05L1dJu43kufaDe9YMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEveGZWY1lQc19BN1RrdlYwbTdqZVM1OW9ONzFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQAw
MA0GCSqGSIb3DQEBCwUAA4IBAQBqXis88tnvNGtRBYeQk3luKzij0qFiW0Sr9jwY
zjOZ070Lu4E5uCyGj1MOCg5/5rAnd9mU4skryMIXf/qp8CU0vEzgeCLT8XtfVWLN
1OgDf0OvqTmQUh2xM6VP9y9IrHLnVkpF1CjigQpUBqYWDaKLhtKDAiI/GJ7Vk8/t
j3eEnveySAlgzgD7LfFqoK+6NVzWLI+tC4ZfX3vQAXLPGTikiM1lttr+FFZ32YCP
3H1TO1mq7qrylJHNyvCXnbHxG2af+0gbLwN0OEVANskogfMGHtPF9J96SDeg/MBW
yOJfZ5Y74oGlrBBcEx/DrV3qrEHDLovMZ1ggJ9vXs44EyY+K
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:36:37 2024 by rpki-client on console-fra.rpki-client.org