Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/8cgFHgKrViGRpdetsCb3_-rHkhU.roa
File: 8cgFHgKrViGRpdetsCb3_-rHkhU.roa (raw, json)
Hash identifier: fxeo7Binks7aw8CoGq8ogWU8IdDkmudsGBfzMnZickI=
Subject key identifier: F1:C8:05:1E:02:AB:56:21:91:A5:D7:AD:B0:26:F7:FF:EA:C7:92:15
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A138B692CFFE1B097A1DBC337970A
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/8cgFHgKrViGRpdetsCb3_-rHkhU.roa
Signing time: Mon 01 Jan 2024 18:29:52 +0000
ROA not before: Mon 01 Jan 2024 18:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216401
IP address blocks: 2a12:bec0:e20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:13:8b:69:2c:ff:e1:b0:97:a1:db:c3:37:97:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1c8051e02ab562191a5d7adb026f7ffeac79215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:73:0c:4b:48:2e:a9:d2:57:ef:38:f7:22:
2f:ea:d2:fa:2b:0b:c9:b4:1a:45:bb:a7:2c:0d:9e:
4d:94:a5:5b:26:51:7a:ba:37:91:cc:9e:3f:bc:56:
dd:2d:b3:e5:d2:d2:be:4d:85:b6:28:78:5a:e9:7a:
e2:d8:7b:c7:3f:16:cf:0e:f9:db:b7:ba:da:20:1b:
64:73:bb:4e:56:a8:02:e9:b3:35:fc:ec:3f:2b:d7:
65:56:f2:c4:25:14:3b:62:2e:d3:8c:17:c0:17:5c:
86:af:32:9b:60:d0:fd:57:4e:e7:37:d1:45:c2:83:
82:ef:b9:ef:b4:1c:3b:b9:b8:cb:79:bc:af:a7:2d:
f2:4e:f6:b5:ef:08:b1:4b:df:27:47:13:8e:1f:51:
23:a0:ed:c9:44:7c:82:07:25:76:d4:17:ec:c0:3f:
5e:cb:b5:8b:61:1f:f0:64:a9:d3:71:3d:47:98:38:
c2:47:8f:b0:7d:4f:4d:5b:d8:7e:fe:f6:44:d6:ec:
50:21:51:91:04:ef:9d:8d:3e:0b:8f:78:1a:d3:bb:
3f:2f:8b:64:91:4d:53:82:e5:1a:bc:2c:4f:1e:fe:
02:b2:c0:72:f8:bd:8a:b9:60:08:a4:2c:b1:e1:c6:
eb:0c:85:ec:aa:76:a7:0f:fc:b7:8f:85:8e:20:87:
d0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C8:05:1E:02:AB:56:21:91:A5:D7:AD:B0:26:F7:FF:EA:C7:92:15
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/8cgFHgKrViGRpdetsCb3_-rHkhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:e20::/44
Signature Algorithm: sha256WithRSAEncryption
13:25:f3:3d:69:07:0a:70:d2:27:68:15:09:67:ac:4c:f6:53:
f9:51:34:4c:0c:91:46:50:17:92:3d:62:9c:8b:bd:8c:27:18:
46:69:a4:e2:5f:6a:89:76:72:d9:78:9e:4a:d5:0f:e5:c9:00:
26:b4:d1:1c:bd:09:75:cb:14:ad:bf:85:d5:ad:c3:ae:b2:50:
a3:8c:f2:75:7f:42:c6:9a:f7:70:a7:c1:b9:88:f7:3a:70:5e:
69:d2:68:78:c3:0a:c7:be:50:51:5c:c1:06:d7:2a:33:88:c9:
c6:e0:18:f4:d3:84:cf:2a:b0:ca:61:e8:01:d4:00:80:7a:e0:
f6:30:be:2f:33:ce:22:34:1e:21:d2:cb:36:c5:e1:df:fe:37:
b7:ae:8b:42:0c:5d:2c:93:8e:a7:38:69:5a:56:63:24:2c:87:
6f:c4:17:99:fd:a9:43:c1:ee:2f:d4:e4:51:13:d3:1a:c1:b1:
0e:27:89:95:ea:4f:fc:8a:ff:1b:22:13:3f:03:64:b0:14:6b:
53:4a:34:94:65:9a:8e:be:bf:9a:c0:e7:de:57:ca:82:16:40:
58:c1:37:43:81:7f:19:69:87:72:32:f5:26:e7:aa:38:56:fb:
e8:29:1e:2b:37:2a:c0:ac:c8:7d:0b:e2:2b:06:79:1f:0a:71:
e5:cc:62:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:53:39 2024 by rpki-client on console-ams.rpki-client.org