Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/xw85QrvC0ZOyFeOo62N3Qq8h1_U.roa
File: xw85QrvC0ZOyFeOo62N3Qq8h1_U.roa (raw, json)
Hash identifier: guCTlV9NEX7ht+9JjaMxNRYmiEjc43jpt0GFUnGQ+yY=
Subject key identifier: C7:0F:39:42:BB:C2:D1:93:B2:15:E3:A8:EB:63:77:42:AF:21:D7:F5
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC8016234F822C1D73BC8A33A19DAECB9
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/xw85QrvC0ZOyFeOo62N3Qq8h1_U.roa
Signing time: Tue 02 Jan 2024 02:29:43 +0000
ROA not before: Tue 02 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207036
IP address blocks: 2a0c:b641:3d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:62:34:f8:22:c1:d7:3b:c8:a3:3a:19:da:ec:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c70f3942bbc2d193b215e3a8eb637742af21d7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:a2:83:ff:fe:90:7b:8d:5f:90:b8:b0:b9:
d0:80:f2:d3:c3:d0:ce:93:22:b3:16:7b:73:94:99:
73:41:c9:59:76:70:fc:4c:e2:2b:f2:67:ff:34:da:
be:35:fa:d6:35:0e:ca:50:ef:23:a0:66:31:0d:84:
e9:4b:89:bf:e9:7d:8f:9f:63:e6:6c:32:9a:e2:f3:
51:1f:2c:fa:41:ca:ef:df:cf:42:5e:db:33:20:68:
01:04:72:44:a6:eb:07:51:83:df:92:76:c6:6b:cd:
91:0b:71:75:13:fd:3b:b4:21:9e:3f:9a:23:8e:2d:
7e:de:74:be:78:82:5d:d8:05:c0:aa:27:45:e2:6d:
52:b0:d2:c1:fa:a2:15:da:1b:76:18:40:56:69:82:
5f:da:bd:7c:e4:4b:e8:99:5d:09:eb:f8:c3:b0:a6:
41:7b:f0:bc:78:4a:c5:16:f3:20:11:29:61:51:50:
1f:9a:9b:94:20:ac:18:b1:ad:94:6d:6d:16:5a:37:
58:a8:b2:82:cf:6c:02:7d:1b:bd:1b:93:fb:f5:65:
00:cc:f4:0c:ac:2c:68:f3:c0:76:08:15:8f:65:9d:
4b:d5:1e:0a:a3:a9:96:d9:8f:ed:54:ba:40:1e:d9:
d6:bc:6b:ed:b1:86:25:07:89:83:c5:e9:cc:a5:74:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0F:39:42:BB:C2:D1:93:B2:15:E3:A8:EB:63:77:42:AF:21:D7:F5
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/xw85QrvC0ZOyFeOo62N3Qq8h1_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:3d0::/44
Signature Algorithm: sha256WithRSAEncryption
93:7f:5e:29:57:f4:03:e6:c0:c6:51:02:56:07:58:4b:12:00:
35:0c:5e:28:c5:fc:3f:e7:8c:63:ce:00:10:e6:c8:a4:03:89:
3c:25:3f:e7:fa:dc:95:b6:91:63:39:b6:16:d2:97:83:70:47:
d9:e3:62:27:8f:73:4a:4c:ed:cd:d2:8a:ea:b5:83:49:63:95:
b8:dd:b9:44:fd:e7:39:dd:a6:8c:36:84:85:d8:9e:a7:7d:32:
a0:27:4b:0a:fd:57:39:4d:7f:8c:3d:db:3b:db:9c:12:12:fa:
44:de:7b:10:3e:fd:07:d6:44:45:5a:83:a9:fe:45:92:3c:26:
11:4d:85:16:96:40:57:9f:72:2b:8c:f4:e7:43:4a:6b:61:92:
75:1a:dd:5e:0d:25:e7:c9:b3:f8:5e:f2:1e:02:9e:ef:3b:86:
73:e1:52:fb:3d:3f:8f:4b:9c:72:2d:f1:1e:e9:9b:b5:ef:38:
03:5d:81:8e:f9:f6:64:c2:e1:99:5a:6f:58:bd:22:50:0b:0f:
72:21:a5:ab:6e:93:78:b1:7f:ce:a2:4a:e7:fb:fe:1c:80:bf:
b9:5a:ab:23:37:a7:b4:e8:b5:b6:53:6d:a1:58:29:7e:5e:75:
ca:60:7f:00:08:5d:fc:26:26:4c:1a:3c:27:29:d0:f9:3d:8e:
92:3c:02:d8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIAWI0+CLB1zvIozoZ2uy5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQwMTAyMDIyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzBmMzk0MmJiYzJkMTkzYjIxNWUzYThlYjYzNzc0MmFmMjFkN2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwyig//+kHuNX5C4sLnQgPLTw9DO
kyKzFntzlJlzQclZdnD8TOIr8mf/NNq+NfrWNQ7KUO8joGYxDYTpS4m/6X2Pn2Pm
bDKa4vNRHyz6Qcrv389CXtszIGgBBHJEpusHUYPfknbGa82RC3F1E/07tCGeP5oj
ji1+3nS+eIJd2AXAqidF4m1SsNLB+qIV2ht2GEBWaYJf2r185EvomV0J6/jDsKZB
e/C8eErFFvMgESlhUVAfmpuUIKwYsa2UbW0WWjdYqLKCz2wCfRu9G5P79WUAzPQM
rCxo88B2CBWPZZ1L1R4Ko6mW2Y/tVLpAHtnWvGvtsYYlB4mDxenMpXREeQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMcPOUK7wtGTshXjqOtjd0KvIdf1MB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEveHc4NVFydkMwWk95RmVPbzYyTjNRcThoMV9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQPQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCTf14pV/QD5sDGUQJWB1hLEgA1DF4oxfw/54xj
zgAQ5sikA4k8JT/n+tyVtpFjObYW0peDcEfZ42Inj3NKTO3N0orqtYNJY5W43blE
/ec53aaMNoSF2J6nfTKgJ0sK/Vc5TX+MPds725wSEvpE3nsQPv0H1kRFWoOp/kWS
PCYRTYUWlkBXn3IrjPTnQ0prYZJ1Gt1eDSXnybP4XvIeAp7vO4Zz4VL7PT+PS5xy
LfEe6Zu17zgDXYGO+fZkwuGZWm9YvSJQCw9yIaWrbpN4sX/Ookrn+/4cgL+5Wqsj
N6e06LW2U22hWCl+XnXKYH8ACF38JiZMGjwnKdD5PY6SPALY
-----END CERTIFICATE-----
Generated at Sat May 4 18:14:05 2024 by rpki-client on console-fra.rpki-client.org