Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/abBTH7-OnoOLyqSOYXfz9VMKSek.roa
File: abBTH7-OnoOLyqSOYXfz9VMKSek.roa (raw, json)
Hash identifier: kLQiFq3GcWihwHn82CVV6rVnLeJxh2vxukQ2WcCYDvI=
Subject key identifier: 69:B0:53:1F:BF:8E:9E:83:8B:CA:A4:8E:61:77:F3:F5:53:0A:49:E9
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CFBCC0488648074CD4EC33EA2D7DE640E
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/abBTH7-OnoOLyqSOYXfz9VMKSek.roa
Signing time: Fri 12 Jan 2024 03:51:40 +0000
ROA not before: Fri 12 Jan 2024 03:51:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215791
IP address blocks: 2a12:bec0:630::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fb:cc:04:88:64:80:74:cd:4e:c3:3e:a2:d7:de:64:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 12 03:51:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69b0531fbf8e9e838bcaa48e6177f3f5530a49e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4a:3b:6b:dc:ea:a4:15:8c:93:ee:ca:70:cc:
e3:02:39:72:8d:85:29:ef:ae:45:d9:ac:30:7d:54:
1e:b0:c0:78:cc:30:1e:23:3c:8a:c0:e4:22:bc:4c:
44:f4:d9:be:58:9d:24:e0:b6:33:e6:39:fe:76:60:
ce:da:64:f8:53:5e:ea:36:73:b0:05:6d:b7:43:e0:
92:38:82:3e:5f:8f:46:20:da:72:8b:11:1f:2d:57:
9a:92:7c:aa:ef:46:6a:b8:25:4c:4f:a8:cc:56:0f:
db:e3:8a:87:81:fe:4a:4f:4b:8a:18:0b:c6:c1:70:
d7:0a:c0:c7:d6:8a:69:07:73:5b:be:09:13:f0:67:
a8:c1:02:d5:4b:32:3d:f3:5e:bd:ff:b4:87:fe:e9:
bc:d5:b1:54:5f:39:59:6f:35:cf:c8:f3:a0:e5:98:
70:1d:80:4e:b0:82:fa:e7:14:77:db:b7:5d:1a:43:
49:a9:66:f8:48:fd:0f:b7:57:91:36:c4:bf:5f:64:
b2:b2:51:08:db:6d:cd:e9:4e:f6:4d:7a:52:35:59:
16:d6:42:a8:c9:8e:cb:b3:de:fe:15:84:56:c3:76:
20:81:9b:af:02:39:08:98:b7:1c:86:0a:3b:f0:37:
98:a8:92:74:20:b2:af:e5:cf:f6:b8:a5:26:e0:cf:
20:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B0:53:1F:BF:8E:9E:83:8B:CA:A4:8E:61:77:F3:F5:53:0A:49:E9
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/abBTH7-OnoOLyqSOYXfz9VMKSek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:630::/44
Signature Algorithm: sha256WithRSAEncryption
95:d4:47:0c:b9:dd:69:cd:50:7a:cd:be:e1:e5:e5:86:51:8a:
21:9f:c3:f1:45:94:d7:da:4b:03:80:f1:26:e6:0d:92:8f:b1:
78:55:46:47:75:fc:53:b9:95:cb:3b:71:db:3e:20:ad:49:ff:
2e:90:41:1d:ae:a9:3c:fd:10:81:7d:35:a9:4a:e4:87:8c:5b:
9e:05:db:b7:42:4d:53:a5:3c:51:f3:9f:3f:1b:e8:5a:8b:3d:
2e:96:33:90:54:13:aa:74:4f:0e:5f:d1:2c:22:76:60:4d:a3:
57:82:4b:60:12:ae:12:b0:fa:4a:10:14:ec:ae:15:e6:76:ef:
98:04:ca:5c:e4:88:b3:4b:a8:ef:90:ea:7c:bd:eb:eb:70:2a:
7e:a3:8c:6f:ac:76:0e:4d:05:00:2e:29:53:5f:9e:59:33:86:
a5:4d:5c:5a:78:b3:3d:08:49:15:45:a5:69:0a:d1:4c:b7:07:
9e:ad:d4:23:f9:86:39:10:79:03:2b:6d:dd:b5:61:ba:ef:4b:
ef:52:ec:f9:5d:c9:a8:bf:a7:0d:50:61:8f:7e:18:38:fd:18:
04:84:34:53:33:51:17:fd:c7:af:2c:63:e5:fb:30:fb:24:93:
dd:81:e2:3a:64:b3:ac:b3:5b:27:0f:fc:0c:ef:c1:85:91:2a:
67:08:98:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 04:40:13 2024 by rpki-client on console-fra.rpki-client.org