Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/L3AfFC7LrAG1ELtYkiFaf5P1EaA.roa
File: L3AfFC7LrAG1ELtYkiFaf5P1EaA.roa (raw, json)
Hash identifier: hdM4upx7/yffX3HAzan/Bs8+Rwo2IeU2nCqTyfdoxvU=
Subject key identifier: 2F:70:1F:14:2E:CB:AC:01:B5:10:BB:58:92:21:5A:7F:93:F5:11:A0
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A0A064613BF30D1212A519F8F9086
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/L3AfFC7LrAG1ELtYkiFaf5P1EaA.roa
Signing time: Mon 01 Jan 2024 18:29:50 +0000
ROA not before: Mon 01 Jan 2024 18:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208453
IP address blocks: 2a12:bec0:2d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:0a:06:46:13:bf:30:d1:21:2a:51:9f:8f:90:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f701f142ecbac01b510bb5892215a7f93f511a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:6d:28:63:19:a8:34:c5:1e:1f:1a:dc:d5:
53:e3:61:50:8f:35:1d:9e:ae:af:fd:6d:15:39:83:
68:9d:dd:ae:cb:10:7f:0c:29:55:da:8e:1a:6d:2f:
6f:7d:bb:a6:57:c5:a3:e0:38:22:90:82:8c:a7:48:
23:e7:88:a4:22:13:1b:cd:18:2a:3a:fa:84:0f:82:
b3:dd:f4:29:fa:e2:d2:86:5f:3f:13:c1:e8:e0:bf:
3e:5f:34:00:ae:d7:01:47:bc:0a:a4:7c:42:24:7b:
33:f5:26:5c:f6:55:f0:1b:a5:94:15:a2:ca:1a:f1:
67:30:ad:2e:13:b9:0a:6c:f9:ac:e4:23:b7:95:e7:
66:04:f3:37:8a:71:de:10:ce:07:88:11:ec:d0:a7:
f4:f3:61:68:ed:e0:2e:71:66:0b:f9:cd:52:70:62:
eb:4d:d2:a4:a3:e9:f8:da:94:16:c5:5b:51:cb:bd:
30:10:70:7c:7e:dd:17:bf:c1:1e:7d:82:95:79:49:
fe:b9:8b:6b:0d:a9:9d:0e:7f:b5:c9:0f:b3:80:6f:
af:5e:1a:13:d2:f5:e8:85:99:f2:a9:39:7c:07:59:
a4:b5:02:33:33:d0:d2:ff:6e:22:e7:b1:3d:47:10:
3f:16:18:a5:97:cd:a7:90:48:b1:48:28:c7:53:c2:
04:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:70:1F:14:2E:CB:AC:01:B5:10:BB:58:92:21:5A:7F:93:F5:11:A0
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/L3AfFC7LrAG1ELtYkiFaf5P1EaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:2d0::/44
Signature Algorithm: sha256WithRSAEncryption
a5:09:27:b5:47:b3:4c:b0:0a:96:2a:66:31:62:9f:45:ad:ed:
8a:dd:0d:d1:4a:f0:25:6d:f7:bd:9c:5e:6d:b6:53:78:2f:e1:
7b:be:6c:ae:21:33:08:0d:e8:fc:0b:05:9d:2c:bf:54:fa:99:
07:04:bd:b5:f1:93:09:b9:33:05:32:9b:e4:6e:2f:06:4d:4c:
ac:3f:06:5c:15:ed:c2:52:de:a3:28:4e:c6:6b:d0:ea:62:7f:
21:e8:9b:ac:d2:14:7b:4c:c6:c2:3c:48:8f:8e:c0:c7:4d:fa:
d2:f9:c9:ad:a7:ea:db:b4:c7:ee:1e:61:0d:38:ed:d8:1f:df:
46:5f:18:80:b5:ce:28:99:25:2d:a4:24:ca:d1:85:b5:30:b5:
4e:88:0b:5a:7b:ae:0f:b2:46:f3:b7:ae:54:af:18:2e:e1:20:
6b:55:f5:bd:dc:6b:06:b2:6b:20:6b:17:d2:ca:39:04:56:d9:
bc:23:18:7b:80:fa:31:08:cd:26:dd:20:00:7d:0a:a0:72:d8:
50:84:27:9d:ae:76:ce:14:08:50:eb:38:bb:a7:b5:86:96:a5:
ab:ed:61:d8:2e:c9:eb:65:3b:eb:b3:69:da:9f:18:c0:36:73:
80:04:e2:51:38:d6:55:7a:47:ec:ed:63:26:16:be:66:53:4c:
5c:3d:37:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 03:24:16 2024 by rpki-client on console-fra.rpki-client.org