Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mUIyKEjrZhxRDEql-Fr0wfdY1_M.roa
File: mUIyKEjrZhxRDEql-Fr0wfdY1_M.roa (raw, json)
Hash identifier: QDSyrFO3kHWvYX+BsmxMDG5vuvq4I9f03tpjA3obvus=
Subject key identifier: 99:42:32:28:48:EB:66:1C:51:0C:4A:A5:F8:5A:F4:C1:F7:58:D7:F3
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A0B451464D3B8946DAA429D67EDE8
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mUIyKEjrZhxRDEql-Fr0wfdY1_M.roa
Signing time: Mon 01 Jan 2024 18:29:50 +0000
ROA not before: Mon 01 Jan 2024 18:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210269
IP address blocks: 2a12:bec0:100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:0b:45:14:64:d3:b8:94:6d:aa:42:9d:67:ed:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9942322848eb661c510c4aa5f85af4c1f758d7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:10:68:58:2b:1b:34:e3:18:5b:c8:b9:f7:
4d:ee:2f:00:64:05:8e:72:3f:a9:cc:4f:48:e9:63:
d9:02:e8:f8:80:c5:b6:59:8c:79:bc:c4:5f:8a:2e:
ec:46:d7:f0:6c:40:a4:4f:61:35:dc:d7:3d:48:e9:
e9:49:98:ce:1e:c2:f6:e7:f4:ce:27:21:5b:5f:ab:
f6:36:44:78:0f:8f:f9:fd:10:dc:fb:89:ea:44:94:
ee:7d:bf:94:5c:e1:6e:c0:66:bb:c7:03:77:4a:8c:
9c:95:a7:56:58:cb:4a:4f:02:4a:49:ee:74:23:8a:
35:da:3e:6f:0a:0d:17:1a:5a:1f:e2:d2:20:da:3d:
d5:1d:a9:29:25:94:30:a6:83:f2:54:eb:b7:d8:9f:
5b:60:21:00:f0:85:07:87:32:04:a5:57:b1:d3:23:
85:87:a1:2f:ba:fc:f6:8c:b9:1d:31:6e:da:5f:5c:
50:36:a1:0f:0a:a7:1a:d4:31:e8:40:12:1f:2d:cc:
86:57:9d:5c:2c:91:50:e5:7a:dc:6f:74:08:a1:a6:
71:ec:96:1d:f7:63:98:5d:b5:c7:99:5a:d8:9b:b8:
45:e8:e5:26:03:5c:22:28:d6:6d:8b:73:47:13:08:
b7:22:d0:43:66:89:14:29:d3:1a:0f:0e:3a:2e:95:
23:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:42:32:28:48:EB:66:1C:51:0C:4A:A5:F8:5A:F4:C1:F7:58:D7:F3
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mUIyKEjrZhxRDEql-Fr0wfdY1_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:100::/44
Signature Algorithm: sha256WithRSAEncryption
7a:ae:b9:d0:57:f4:85:5f:a7:76:f3:35:dd:cd:bb:d5:3b:bc:
bf:b5:ab:70:23:43:84:3b:1e:85:31:cf:b8:c3:66:3e:f4:16:
44:af:6e:e4:72:6d:80:bd:af:46:15:f6:af:c0:26:80:71:67:
44:3a:d8:65:5f:4a:63:ca:8a:80:46:b8:a9:e2:e9:72:4c:d8:
d1:e6:0b:fa:1d:d9:84:cd:32:16:11:0b:c5:02:c6:7e:fe:70:
4f:60:bf:3b:6c:23:90:16:2a:1e:e0:70:de:c5:47:ac:92:66:
fa:44:9e:5e:92:0d:e6:a5:f9:f5:cf:d1:b4:fa:13:30:d2:66:
5d:b7:c0:92:4c:56:77:77:41:df:95:b3:ff:2f:bc:5b:b7:76:
03:c1:f0:dd:1e:0c:db:38:91:65:92:08:13:c2:42:24:3b:6b:
7e:6e:5c:78:87:00:5a:1d:20:e9:69:82:fb:fa:22:60:e2:3a:
2e:2c:47:b3:a6:f7:b3:0a:a5:d2:e6:8a:f8:12:3b:df:42:40:
be:f4:b7:18:9e:64:d7:ec:09:3a:4d:0d:79:1b:26:ff:79:92:
26:15:e9:66:3a:b9:31:bc:20:ec:35:04:13:5f:ad:00:eb:93:
41:1f:ab:4b:04:5b:82:a6:ff:d4:17:df:82:60:55:7f:97:9d:
44:81:96:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 15:19:32 2024 by rpki-client on console-ams.rpki-client.org