Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/PIB29tFhqr6kAU-5r2SKXIJgw_I.roa
File: PIB29tFhqr6kAU-5r2SKXIJgw_I.roa (raw, json)
Hash identifier: 45yCiCUiJiaefhbKoucboeSikkZooKvfZI8peksJUqo=
Subject key identifier: 3C:80:76:F6:D1:61:AA:BE:A4:01:4F:B9:AF:64:8A:5C:82:60:C3:F2
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A10787D1C45472726C744C1D2C2EF
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/PIB29tFhqr6kAU-5r2SKXIJgw_I.roa
Signing time: Mon 01 Jan 2024 18:29:51 +0000
ROA not before: Mon 01 Jan 2024 18:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216102
IP address blocks: 2a12:bec0:560::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:10:78:7d:1c:45:47:27:26:c7:44:c1:d2:c2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c8076f6d161aabea4014fb9af648a5c8260c3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:69:ed:c0:3b:13:f2:9d:4a:92:03:a6:ff:
be:4b:4b:e9:e5:b0:98:b5:15:46:2e:8d:34:75:5c:
c4:46:dd:f0:d6:0f:36:8b:83:b9:e5:c9:6b:a1:c4:
31:49:42:0a:5d:db:28:de:36:2b:c3:e3:83:89:3f:
63:56:9f:dd:19:31:8a:1e:67:a7:c6:5b:09:aa:66:
80:e3:94:87:8b:72:b1:a9:79:02:e8:31:37:c6:8a:
66:65:bd:cd:ab:d8:50:ac:32:10:99:63:02:78:c6:
0a:34:db:84:56:67:7c:ef:95:c1:be:6d:bf:be:e1:
f5:d2:d3:3c:b0:e2:a6:a4:bc:07:a1:5d:d4:98:12:
c5:c0:90:5f:a4:54:3a:e7:ad:f4:45:69:80:a4:cc:
ad:9f:c4:84:e2:b7:d0:6e:ad:ee:26:c9:fc:32:0f:
5d:25:f3:27:b0:b5:fb:7d:99:46:6f:2e:81:cf:00:
e5:e8:08:1f:e0:b1:f3:d1:a6:79:55:51:1c:8a:29:
60:29:16:ae:ed:8e:9a:d5:d3:b5:ad:77:c2:d0:7e:
9e:91:72:2d:64:9a:e2:40:27:57:53:16:49:3b:4e:
82:48:36:fc:ce:02:c7:d1:24:9e:88:cf:3c:6e:5a:
e2:53:dd:09:19:ae:47:f6:49:21:ac:0b:1d:4b:56:
13:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:80:76:F6:D1:61:AA:BE:A4:01:4F:B9:AF:64:8A:5C:82:60:C3:F2
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/PIB29tFhqr6kAU-5r2SKXIJgw_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:560::/44
Signature Algorithm: sha256WithRSAEncryption
35:c9:99:09:b0:8f:b2:d1:13:9e:f4:97:78:7b:86:0a:ef:35:
77:18:b6:93:dc:0f:f3:a0:5e:ea:eb:78:ad:80:83:6c:ba:2e:
ce:d0:fc:ad:c7:6e:c9:d8:83:27:bb:5a:8d:bd:b7:52:8f:59:
76:06:1e:82:f6:97:0a:df:9e:9e:28:96:c5:f2:ea:4c:e6:46:
25:c2:a2:93:14:69:f6:e5:dd:2c:8f:6e:3d:4b:ce:36:2d:86:
ea:dd:5a:df:ae:81:f4:e4:c3:fe:73:7b:a1:dc:12:9e:69:21:
84:4b:fb:04:41:cf:0d:c6:b5:ab:a0:87:85:98:a0:32:43:26:
52:ed:8f:39:e0:bf:c5:d3:27:5b:a6:06:f8:9e:fa:bc:7e:59:
f9:e4:d5:ff:4e:4a:1f:a0:9b:3f:21:93:07:e9:85:cc:59:fc:
0f:b0:86:3d:b6:d2:8e:cd:3c:d5:0f:02:53:08:00:b1:bb:01:
85:2c:b8:6d:ac:c0:3e:9c:c0:49:72:d5:35:90:43:3e:63:8e:
4f:fa:e5:65:62:27:e6:cd:ed:5e:1a:15:e6:f8:33:87:d7:39:
18:8a:fe:97:74:87:df:da:8c:bc:76:9a:f3:e1:a0:5b:a9:15:
d7:e3:c2:9d:ca:59:c9:c7:b6:c6:be:9d:1d:fd:c5:bf:64:b4:
60:d5:b7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 19:52:18 2024 by rpki-client on console-fra.rpki-client.org