Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/l55Z3iKADntomMs_0FKsqXSIgis.roa
File: l55Z3iKADntomMs_0FKsqXSIgis.roa (raw, json)
Hash identifier: OuZYwtpXf3ijENRG5or+Aq8HuYMOopjtvWhGML0z1Rc=
Subject key identifier: 97:9E:59:DE:22:80:0E:7B:68:98:CB:3F:D0:52:AC:A9:74:88:82:2B
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018FA631311BAA7A8809DAEE96CDAC184AA0
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/l55Z3iKADntomMs_0FKsqXSIgis.roa
Signing time: Thu 23 May 2024 16:03:12 +0000
ROA not before: Thu 23 May 2024 16:03:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215614
IP address blocks: 2a12:bec4:1200::/44 maxlen: 44
2a12:bec4:1201::/48 maxlen: 48
2a12:bec4:1202::/48 maxlen: 48
2a12:bec4:1203::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a6:31:31:1b:aa:7a:88:09:da:ee:96:cd:ac:18:4a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: May 23 16:03:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=979e59de22800e7b6898cb3fd052aca97488822b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d4:2c:91:13:0c:e7:7e:e2:a0:e1:4b:6e:fb:
6f:91:9f:4c:3c:8f:a1:91:2f:9d:57:92:a1:63:f2:
7a:27:a5:44:ac:b3:ca:cc:d8:da:5c:e6:d9:1a:5c:
9a:5d:1d:1c:1d:9a:60:21:7a:78:d3:08:be:ba:88:
a2:31:9b:dc:61:1e:22:9a:3f:01:ae:cb:8a:a3:a9:
5a:47:90:ac:19:7a:7a:99:0c:b6:d8:f0:08:72:ff:
10:85:47:12:79:4d:29:24:72:1f:16:05:bd:be:ce:
35:84:66:15:54:3b:04:f0:63:fb:6b:0c:18:64:5f:
d4:7a:a9:7f:6a:1d:e6:84:d6:73:df:77:a3:35:69:
e8:ee:b5:99:e3:6e:ac:7f:84:09:86:65:93:5a:03:
5f:81:ce:9a:64:08:01:ab:59:0f:56:36:59:62:d9:
37:aa:bf:25:64:4c:43:45:df:71:d3:3b:1f:01:5d:
fe:48:64:a6:97:46:1b:ed:49:87:fb:bb:3c:ab:24:
f3:7e:45:51:24:24:49:d8:ef:40:2e:72:66:a4:20:
55:8c:0f:4e:22:68:2c:54:4f:7b:1c:96:87:83:d9:
b8:51:d4:f3:7e:3e:e1:5d:db:74:15:c6:0d:85:85:
08:9f:6b:c0:60:f0:35:72:79:1a:d2:29:53:e8:46:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9E:59:DE:22:80:0E:7B:68:98:CB:3F:D0:52:AC:A9:74:88:82:2B
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/l55Z3iKADntomMs_0FKsqXSIgis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1200::/44
Signature Algorithm: sha256WithRSAEncryption
77:db:94:31:39:8f:db:a8:12:ba:74:cb:a2:3a:1d:dd:3a:2f:
76:d7:05:01:e1:4d:8f:b5:55:87:6c:cf:3d:2f:06:ac:cd:5f:
c0:a4:3f:51:71:40:7f:b8:10:89:ef:b4:e3:5d:3d:99:02:23:
c2:ec:4a:f0:e0:03:3e:b4:8c:7c:35:bc:09:70:36:b6:e5:35:
c4:17:3a:62:9e:bd:31:23:70:69:c4:8a:11:9e:09:de:d9:b9:
97:01:5d:c9:60:94:79:e5:9e:69:a9:fa:e8:9e:3a:f4:f2:1c:
da:cb:86:26:d8:99:3c:66:97:97:2c:b7:b9:1d:70:e2:8d:e3:
e6:d1:21:68:3b:40:0d:f7:a2:2f:5c:f8:2a:2e:d2:eb:97:f9:
ba:99:07:a1:d1:bc:6b:d2:16:2f:49:a3:91:96:2f:2d:59:90:
10:62:e7:c7:b3:a2:1d:07:84:55:63:45:6c:2c:07:f2:ba:fe:
e6:e6:ed:32:ed:78:c5:ad:0c:8d:44:ab:74:2f:e0:12:b1:9f:
ca:97:36:e2:d2:fa:9a:0d:7d:66:b0:54:09:3f:92:6f:da:45:
e8:e6:c4:aa:7f:69:42:d7:66:93:04:f8:2b:fe:1b:a7:22:8f:
0a:9e:ec:82:9f:aa:6a:a5:59:d3:ef:d9:5d:7c:63:cb:b0:8b:
9b:68:63:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 13:32:37 2024 by rpki-client on console-ams.rpki-client.org