Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/K7c8MhcZ-9zEcVjAudaPnUwspEY.roa
File: K7c8MhcZ-9zEcVjAudaPnUwspEY.roa (raw, json)
Hash identifier: gGAwFpO2AQQlIizPZPRR8XNmmwahJY1TFjPdcHftZmE=
Subject key identifier: 2B:B7:3C:32:17:19:FB:DC:C4:71:58:C0:B9:D6:8F:9D:4C:2C:A4:46
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC649FBB67D318227412902E1089EE74A
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/K7c8MhcZ-9zEcVjAudaPnUwspEY.roa
Signing time: Mon 01 Jan 2024 18:29:46 +0000
ROA not before: Mon 01 Jan 2024 18:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51308
IP address blocks: 2a12:bec0:e03::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:fb:b6:7d:31:82:27:41:29:02:e1:08:9e:e7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bb73c321719fbdcc47158c0b9d68f9d4c2ca446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ba:65:5a:dd:41:f5:9e:08:21:1c:8c:a1:e1:
ea:f4:f6:fa:d0:95:4b:29:63:35:78:96:75:aa:d5:
85:3e:54:52:70:6f:20:93:0b:ff:d6:b7:f0:21:8e:
48:a8:46:9c:45:5a:b9:64:27:15:b3:87:f5:96:1e:
4c:26:59:78:a8:95:3f:91:75:21:48:20:ec:06:bf:
86:08:74:48:f3:14:4b:39:d2:e1:5e:7f:72:94:47:
2e:76:89:4e:72:77:78:9b:47:58:2f:2b:d2:7f:c9:
6a:1a:9c:c0:79:c5:23:46:e6:2c:ac:9e:5b:ad:bb:
e2:57:e4:0e:2f:ab:1b:ef:80:53:c9:a7:2d:3e:66:
91:76:61:44:0a:6d:2e:c9:c0:ef:be:f2:4b:ee:bb:
e7:97:a3:65:76:1e:ba:ef:92:0b:6c:64:f3:f7:b5:
ba:25:0f:10:2d:dd:96:06:0a:d3:2c:77:f0:0f:f8:
59:e3:42:f4:42:8e:a1:06:b8:d3:99:bf:2e:18:81:
2b:37:d0:3f:3c:62:87:78:14:b3:09:ca:1a:65:f9:
69:1b:ec:54:30:ec:cd:e5:de:bd:3c:73:b7:54:0c:
27:25:26:7d:17:2c:34:68:5e:fa:52:74:87:14:a9:
fc:f2:f4:f8:1e:94:72:f7:8d:1c:77:cc:1d:50:91:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B7:3C:32:17:19:FB:DC:C4:71:58:C0:B9:D6:8F:9D:4C:2C:A4:46
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/K7c8MhcZ-9zEcVjAudaPnUwspEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:e03::/48
Signature Algorithm: sha256WithRSAEncryption
5a:0e:c1:61:5b:ac:ae:78:ff:82:12:cf:e2:7b:b8:2f:4a:6f:
21:a5:ac:7c:da:f0:b7:80:6b:a5:e4:56:46:49:15:12:ed:49:
b7:bf:fe:c4:82:e5:3f:b2:02:51:eb:5f:bc:08:8a:70:6f:74:
8d:b7:6d:0d:7e:89:33:6a:38:97:b4:c3:4b:cd:84:d3:2e:0d:
31:0b:af:7b:79:eb:d7:24:af:56:03:d4:ea:ce:4b:2c:55:dc:
bb:0b:f7:9e:46:6c:61:52:a3:86:89:d0:26:bc:7c:8f:77:2b:
3b:e3:54:9a:1b:bf:e1:f4:64:ef:04:f6:f6:2e:a1:90:63:01:
bb:09:13:30:b6:90:c1:d6:52:3d:c0:e5:1c:c8:a9:c8:9c:47:
29:9b:d2:ba:52:c8:8c:f5:f7:5c:ca:82:f3:1f:f0:81:5c:35:
17:db:46:92:27:25:66:76:34:70:24:51:a1:b2:d5:5e:df:ea:
94:21:97:37:07:ca:f7:0e:d5:a9:ba:6b:69:de:10:10:93:3b:
6c:28:c9:6f:07:50:0f:63:33:18:d2:63:f4:41:4a:ac:61:3c:
60:fc:71:d7:87:6e:23:32:f4:c0:1f:7e:62:39:35:90:61:f1:
3c:44:1b:d4:62:46:40:d5:8e:b0:9e:2b:db:3b:d3:d0:98:15:
ff:a7:52:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:36:35 2024 by rpki-client on console-fra.rpki-client.org