Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/Giw2zPYz15CNqpkPPAMsi0U0rzI.roa
File: Giw2zPYz15CNqpkPPAMsi0U0rzI.roa (raw, json)
Hash identifier: LAJp/SO3hKNVkKQIE7WfySNcVrrR9bpuBH9VmmavAXQ=
Subject key identifier: 1A:2C:36:CC:F6:33:D7:90:8D:AA:99:0F:3C:03:2C:8B:45:34:AF:32
Certificate issuer: /CN=0c053554c818674cd546b799dd44785a564c56cb
Certificate serial: 018CC9BC7AAB1D2ED26EDC21BFC6C8E240D1
Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/Giw2zPYz15CNqpkPPAMsi0U0rzI.roa
Signing time: Tue 02 Jan 2024 10:33:41 +0000
ROA not before: Tue 02 Jan 2024 10:33:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205884
IP address blocks: 2a13:5100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:7a:ab:1d:2e:d2:6e:dc:21:bf:c6:c8:e2:40:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb
Validity
Not Before: Jan 2 10:33:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a2c36ccf633d7908daa990f3c032c8b4534af32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:e2:7a:f4:ed:aa:0f:bd:82:6d:26:2b:3f:
f9:16:a4:a8:89:da:e1:2b:f1:ac:9a:53:60:ac:d5:
ba:ad:20:33:0d:8f:ee:42:79:5c:10:07:76:12:00:
0a:58:60:c3:c6:dd:f6:91:1a:8d:f0:84:c5:72:93:
67:81:3c:f1:32:d8:44:b6:6d:0b:8b:bf:57:65:8c:
18:af:2a:4a:70:c5:af:62:51:f1:3c:84:29:7e:bc:
a2:2e:70:67:10:d9:b5:d4:b5:7c:13:31:5b:47:2c:
9f:c0:77:70:6b:3d:8e:84:ac:40:1c:9d:18:91:26:
82:39:6b:98:03:88:02:dd:7f:6f:bf:21:b1:8e:be:
70:f5:bd:2f:fc:07:37:53:f1:ea:74:ed:52:17:33:
1f:af:7f:00:d6:57:a8:09:86:1a:76:6c:5a:65:ca:
e5:4b:6c:c8:25:14:a5:c6:88:c7:2b:55:e5:09:86:
3a:75:6b:c0:6f:67:53:4e:e7:96:77:a3:9d:8a:61:
19:d7:27:3b:2b:c6:75:5f:cd:49:fa:4f:b7:1f:86:
e3:6a:9b:30:84:57:cd:cb:17:9b:18:11:a9:6a:c0:
7e:94:50:20:39:4a:c4:3b:ea:b4:7b:f0:0f:4a:90:
6a:e4:94:eb:0b:e5:1c:0e:2f:6f:6f:00:82:7f:db:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2C:36:CC:F6:33:D7:90:8D:AA:99:0F:3C:03:2C:8B:45:34:AF:32
X509v3 Authority Key Identifier:
keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/Giw2zPYz15CNqpkPPAMsi0U0rzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5100::/29
Signature Algorithm: sha256WithRSAEncryption
5d:a6:c1:21:10:17:fa:b9:70:a3:95:2d:17:da:1d:91:2d:de:
be:55:97:33:40:b5:1e:a0:15:a7:dd:d8:2e:13:5f:7f:41:6f:
55:6a:04:51:d9:30:0d:57:39:74:16:39:30:cc:2b:8a:f9:66:
85:e1:86:97:9c:e1:a0:17:02:ac:b3:45:f8:1d:19:14:ef:7b:
16:fd:63:b5:c7:09:05:06:a0:55:5e:78:20:d9:61:1d:5c:ee:
fd:0a:6f:8b:5f:8e:be:4a:fd:06:d8:b2:64:ce:f9:52:7a:96:
23:08:de:dd:3e:e6:76:a3:22:2d:e8:6e:1a:4e:51:f3:27:03:
08:0c:bf:37:ac:1b:ea:fa:12:db:91:b7:c7:80:4e:a1:2f:36:
1c:b6:31:8b:27:9e:dd:92:10:6a:c4:bb:35:6f:25:14:47:65:
21:cb:19:71:20:3e:4d:26:cc:a0:50:dc:81:ec:96:48:72:6e:
5a:a1:8c:67:c2:b7:ff:7a:8e:10:fc:8b:92:ae:75:b5:34:4b:
96:6f:33:57:78:43:60:6b:c4:c8:02:d6:f0:58:32:d6:e3:c6:
a4:d8:5d:2b:cc:43:b5:07:b5:bc:9a:72:bd:91:19:40:1c:7f:
dd:87:aa:ad:6d:be:4d:fe:c1:49:dd:b5:b5:40:6e:9c:0e:94:
76:4e:b7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 22:12:43 2024 by rpki-client on console-ams.rpki-client.org