Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/yO5b_yRvKaITitex54_99CNYWf4.roa
File: yO5b_yRvKaITitex54_99CNYWf4.roa (raw, json)
Hash identifier: 58cnvQJ7I32yMSRN92osnPO3G+Wo+EpbOBCR1k1+Qzg=
Subject key identifier: C8:EE:5B:FF:24:6F:29:A2:13:8A:D7:B1:E7:8F:FD:F4:23:58:59:FE
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC8018414C65652C4E06A8DAC6E94B4D6
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/yO5b_yRvKaITitex54_99CNYWf4.roa
Signing time: Tue 02 Jan 2024 02:29:51 +0000
ROA not before: Tue 02 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215932
IP address blocks: 2a0c:b641:b50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:84:14:c6:56:52:c4:e0:6a:8d:ac:6e:94:b4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8ee5bff246f29a2138ad7b1e78ffdf4235859fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:d9:b3:d4:02:da:b2:ea:df:88:85:4c:0c:
b4:35:66:f8:c9:39:3e:b8:49:b1:13:f1:63:b8:b9:
20:16:c8:36:89:07:74:b7:63:90:73:5f:6d:b1:2a:
3f:21:4b:35:52:46:d9:39:c2:88:1b:ce:5a:c8:57:
f9:8a:2f:58:b3:24:03:f6:5e:0f:cb:66:e1:bc:04:
28:b4:97:b9:66:9a:d8:4d:04:a0:c9:bd:60:02:7c:
00:a6:85:a5:6b:52:66:b9:62:45:aa:2d:44:eb:c9:
09:07:d2:0d:82:00:5c:b7:27:ed:fa:6c:30:08:d8:
a5:f1:9f:1c:da:e9:d2:1d:ac:a4:a0:db:c1:cb:25:
e6:27:29:02:37:4f:13:a8:b2:17:6f:65:9a:a6:40:
ce:4d:13:89:8a:77:bb:8b:ff:73:ce:2f:b5:ff:6e:
c4:62:61:a6:aa:0f:82:a2:93:ed:49:fc:00:af:ce:
d2:db:1f:be:3b:87:a7:c0:f3:2d:a4:c0:e0:26:9a:
80:b0:94:33:de:fb:13:2b:be:dc:a6:12:28:91:1e:
54:3d:df:b7:02:4f:40:01:9c:2f:31:9a:81:e3:42:
75:41:27:b3:b7:b3:a9:e0:a5:9b:2e:ad:b2:1d:65:
d0:63:22:9e:a3:b0:4d:a6:53:09:04:b8:1e:25:24:
f0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EE:5B:FF:24:6F:29:A2:13:8A:D7:B1:E7:8F:FD:F4:23:58:59:FE
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/yO5b_yRvKaITitex54_99CNYWf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:b50::/44
Signature Algorithm: sha256WithRSAEncryption
3e:a7:1e:f7:07:e7:dc:d9:9b:f8:32:31:f2:e8:f4:5b:23:5e:
d5:b9:27:ca:5c:76:c1:ce:f5:1d:c3:58:24:80:8f:13:80:c1:
ad:df:06:17:f9:cb:d0:00:d9:3f:27:95:6c:60:21:a8:00:bb:
1d:7e:0d:5c:7d:87:52:19:73:9f:1b:97:55:9a:05:cd:75:50:
f2:f9:10:25:8a:d8:db:b9:d5:8a:3f:c5:95:74:83:30:cd:9b:
05:dd:66:a3:69:a8:c2:b4:44:ea:a7:01:02:25:ee:e1:35:a6:
44:07:89:b9:6c:5c:4c:50:57:81:b8:d9:6d:19:b4:8a:e6:b7:
26:65:82:ab:b9:6a:ca:ca:e6:d6:2b:d5:06:35:23:07:ea:a6:
a9:04:5f:cc:9b:0b:a6:f6:c9:80:2d:7d:bd:2c:9e:76:b4:0f:
e0:18:e4:ac:25:64:70:a4:90:53:ff:3d:b7:a8:ed:99:f4:c9:
18:c7:0e:04:a8:02:b4:19:a2:9c:bc:3c:d9:14:45:02:c1:a7:
cc:fa:d4:c1:61:ff:48:33:13:59:ec:d0:6d:46:68:97:51:d7:
74:a6:0a:14:ec:19:20:ed:f7:58:60:09:49:55:41:6c:73:b4:
bc:4e:b4:6c:da:aa:b5:38:7e:4d:27:ea:8c:28:3e:66:1d:c5:
b7:05:8f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:03:10 2024 by rpki-client on console-ams.rpki-client.org