Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/y6K0NEekNOi_iygwtGeRoTL5T1I.roa
File: y6K0NEekNOi_iygwtGeRoTL5T1I.roa (raw, json)
Hash identifier: t8irULhQb9gmDB+lU+AbunX+gkBoE2Ti0x57EuPl4qo=
Subject key identifier: CB:A2:B4:34:47:A4:34:E8:BF:8B:28:30:B4:67:91:A1:32:F9:4F:52
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0191696E024EE1AE1AEE686346BA7DB6DF3A
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/y6K0NEekNOi_iygwtGeRoTL5T1I.roa
Signing time: Mon 19 Aug 2024 06:58:22 +0000
ROA not before: Mon 19 Aug 2024 06:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209261
IP address blocks: 2a0c:b641:cd0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:6e:02:4e:e1:ae:1a:ee:68:63:46:ba:7d:b6:df:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Aug 19 06:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cba2b43447a434e8bf8b2830b46791a132f94f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ed:60:e5:26:21:78:5c:3f:fa:27:ca:3e:28:
61:5e:44:78:58:47:4e:17:f1:82:58:f6:4c:d9:b2:
bb:fc:08:99:41:09:62:6f:40:0f:1d:e2:02:42:89:
96:b1:5b:72:4a:04:20:9e:39:51:73:19:d5:98:3c:
e7:99:d2:be:f3:4f:99:a1:60:cb:8a:32:f7:72:0b:
9b:5b:1d:a5:d3:a5:a4:b5:8d:52:34:55:6d:e2:89:
bb:33:a1:c1:b2:75:6d:22:56:3b:d6:bc:5f:bc:df:
d4:57:61:44:fa:5a:02:9d:5b:22:01:98:6b:85:1b:
46:97:6d:b8:ad:80:9a:d6:4c:68:ac:05:e5:df:07:
f3:fa:9e:e6:de:1f:1d:53:54:af:40:11:40:f8:6c:
b4:d4:64:6d:e3:69:4d:35:9c:b5:55:bf:ed:0a:11:
64:9e:5c:d7:5e:0b:a9:bc:60:ee:49:26:c3:b6:98:
d5:4b:a2:db:c1:04:5d:67:da:ae:23:40:65:47:e5:
aa:0d:c9:fe:e3:97:eb:38:38:46:cd:1e:c2:f6:35:
46:06:db:ff:56:35:52:3e:80:7b:8e:f0:82:21:28:
24:72:e9:30:e6:00:60:7e:46:ea:69:9d:10:e3:55:
69:f3:48:a3:3a:51:83:b8:c1:4f:ab:a0:0e:d9:3d:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A2:B4:34:47:A4:34:E8:BF:8B:28:30:B4:67:91:A1:32:F9:4F:52
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/y6K0NEekNOi_iygwtGeRoTL5T1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:cd0::/44
Signature Algorithm: sha256WithRSAEncryption
3d:cc:aa:f8:f4:90:12:22:d1:8a:cd:0b:b0:de:33:ec:7c:5c:
2c:15:b4:d8:86:fa:70:2d:78:17:b2:bf:ed:69:ea:46:ba:ab:
00:4e:c0:dc:19:25:cf:31:90:53:31:5f:ad:8e:f0:a8:35:3e:
2d:08:27:8d:32:af:e9:04:b3:74:0c:de:55:67:5f:d0:dd:2a:
ec:93:4e:95:5c:0c:fe:f1:ad:8c:c6:96:a4:36:c5:4b:91:6b:
25:7b:16:7f:5c:e9:8d:de:83:a7:e0:f1:9e:45:0b:43:47:ea:
c8:8a:56:5a:32:99:13:05:59:ae:c9:f8:7e:7a:43:d5:78:01:
ca:c0:16:31:02:43:8d:d1:62:54:31:f6:c2:4e:99:c5:96:51:
22:63:05:fb:ef:4d:c6:fc:47:c5:cd:70:fa:a9:05:78:e0:8e:
81:6f:ce:fb:18:6a:21:79:45:5f:6b:45:5d:03:b5:a3:0d:ac:
5f:9e:02:ce:06:b0:f0:68:18:1c:6f:fe:8e:15:47:47:6d:8a:
e1:33:54:7e:66:c2:a2:8f:c2:aa:50:7e:7d:b2:88:c3:c3:22:
a8:7a:b8:d0:d4:38:98:70:45:6d:17:6b:97:e3:e3:41:42:86:
39:3c:25:e7:8b:88:f2:b2:d9:aa:c9:2f:98:94:ca:47:44:42:
ef:0c:64:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:17 2024 by rpki-client on console-ams.rpki-client.org