Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/0H4CCMUrwNDc4bs8y74d1R89GvM.roa
File: 0H4CCMUrwNDc4bs8y74d1R89GvM.roa (raw, json)
Hash identifier: dpTSyMw+kaHeJ36LeMvG6DiT/+3ClueVqiNs++kJeRE=
Subject key identifier: D0:7E:02:08:C5:2B:C0:D0:DC:E1:BB:3C:CB:BE:1D:D5:1F:3D:1A:F3
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 018CC64B29DA6C7A4E372CD51FC1A56D2EF4
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/0H4CCMUrwNDc4bs8y74d1R89GvM.roa
Signing time: Mon 01 Jan 2024 18:31:03 +0000
ROA not before: Mon 01 Jan 2024 18:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201801
IP address blocks: 2a12:f8c1:40::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:29:da:6c:7a:4e:37:2c:d5:1f:c1:a5:6d:2e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Jan 1 18:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d07e0208c52bc0d0dce1bb3ccbbe1dd51f3d1af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9b:e4:0f:00:0c:80:4f:36:1e:89:4d:9e:80:
40:67:64:24:01:00:59:33:68:aa:bf:95:bc:f3:4e:
d3:66:fe:ba:1f:36:42:b3:64:5a:84:d5:6c:48:1f:
3c:bf:04:62:b3:95:63:af:68:d7:be:b4:84:ac:51:
13:46:47:50:ff:60:83:87:76:87:a9:47:a8:a9:ea:
80:a2:33:88:5c:60:08:fa:23:30:8a:58:27:06:a8:
99:6f:e6:53:c4:98:44:8d:9e:aa:7f:eb:58:38:97:
0f:d7:5a:64:bf:94:42:63:14:70:9d:e4:81:a8:2f:
7b:68:16:53:16:55:32:08:b2:58:bb:c7:f5:24:64:
39:e0:28:57:b8:87:4e:76:76:02:16:61:ca:c8:37:
5f:0a:dc:bd:44:c0:d5:55:2a:06:b9:b1:ea:01:0f:
7a:2c:e6:61:4d:67:30:c8:5b:73:fe:b7:73:34:17:
c0:6f:a8:56:cd:d7:35:bb:61:61:7f:81:30:6d:ba:
e2:95:d5:ae:18:90:d8:b1:70:b8:df:b2:c8:eb:8d:
84:89:df:b2:b8:2d:89:8c:ed:80:11:0b:4e:79:dc:
be:e3:bf:1a:c9:c9:eb:1f:71:93:c0:b4:0f:8b:c8:
23:97:b5:13:56:7a:2a:51:6f:e4:f6:3d:d4:9d:ac:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7E:02:08:C5:2B:C0:D0:DC:E1:BB:3C:CB:BE:1D:D5:1F:3D:1A:F3
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/0H4CCMUrwNDc4bs8y74d1R89GvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c1:40::/44
Signature Algorithm: sha256WithRSAEncryption
b7:ba:97:6d:56:17:83:a0:5b:42:b5:04:f4:68:b4:05:74:a1:
fd:76:62:29:c8:f3:ad:89:16:17:cb:23:bf:e9:e0:11:2c:b1:
c3:e6:b6:d7:51:44:71:9e:6d:e5:e4:71:f9:bd:61:7b:9f:09:
6a:b0:a6:19:ad:3e:10:d5:fa:a1:67:40:ff:4f:d9:84:d3:7c:
b6:9b:72:31:c7:a9:da:4e:e6:0e:5c:01:b3:27:94:f7:22:69:
70:f0:c4:44:41:a6:6c:a6:52:d3:fb:32:27:f1:0f:4b:69:c8:
b3:d2:72:63:7d:9a:64:82:cb:79:16:8f:b4:81:24:2b:5d:50:
c3:f1:db:ac:e6:35:e5:1b:39:5a:d6:a3:74:15:d8:b4:5e:98:
f2:75:f0:04:1c:3e:03:3d:53:b0:b8:ef:53:00:ff:11:24:80:
0c:26:9a:e4:f9:fa:ff:30:d5:bf:2d:83:7a:77:cb:5f:a2:7c:
e2:95:fe:06:d3:32:11:14:b4:c0:bb:00:5d:33:47:31:9f:45:
7d:ed:2f:2a:48:ad:d4:19:d9:93:3e:45:cf:e1:9b:fa:80:80:
eb:c4:f2:7a:84:a9:1b:a8:20:0c:f1:d6:60:22:b3:06:b3:5b:
88:6a:cc:58:fe:73:78:cb:64:59:99:e8:b4:81:9d:74:4b:eb:
29:d1:24:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:28:58 2024 by rpki-client on console-fra.rpki-client.org