Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/oAcd1Vcv2fVGwPqhIRn6HSsQeTU.roa
File: oAcd1Vcv2fVGwPqhIRn6HSsQeTU.roa (raw, json)
Hash identifier: ZiAChwY38ZajW9PHVIk0zs+RL5AcfKH+yPsE7v0d7kI=
Subject key identifier: A0:07:1D:D5:57:2F:D9:F5:46:C0:FA:A1:21:19:FA:1D:2B:10:79:35
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018D5A2A051276363891ADB8A9F171215820
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/oAcd1Vcv2fVGwPqhIRn6HSsQeTU.roa
Signing time: Tue 30 Jan 2024 11:38:39 +0000
ROA not before: Tue 30 Jan 2024 11:38:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215680
IP address blocks: 2a12:bec0:650::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:2a:05:12:76:36:38:91:ad:b8:a9:f1:71:21:58:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 30 11:38:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0071dd5572fd9f546c0faa12119fa1d2b107935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:aa:4a:aa:0a:78:33:9b:45:03:4b:30:ce:
c8:7c:f2:db:2d:58:d1:f9:b5:87:e2:63:da:5d:1c:
ee:52:84:4a:dd:c4:97:50:db:34:fc:f7:f8:28:26:
2b:62:fd:ed:3b:cc:61:ef:b5:91:4f:44:e9:d5:5b:
e0:67:3c:1b:e3:ab:e7:fa:31:e4:4d:9b:40:8e:76:
c4:9d:4e:65:83:e6:f1:b7:ee:83:40:62:df:3c:4c:
d9:cd:f5:b7:79:49:46:bf:7c:88:34:c9:f1:58:9a:
dd:6a:fd:8c:72:14:92:d4:dc:a0:11:4f:ff:f2:a9:
38:5d:2b:09:7f:31:94:75:0d:aa:4d:8f:74:69:39:
ff:9e:e2:e4:66:c1:9d:4c:72:28:27:aa:00:8d:d1:
ee:cf:36:0e:77:64:69:0c:c0:17:9a:2e:b4:04:d8:
a3:f3:18:7d:e2:8d:7f:6c:5b:cf:2c:ed:64:a0:3f:
50:d8:fc:7b:9b:68:eb:5e:46:05:8c:e3:f4:f8:e9:
12:95:18:4d:17:2a:12:e5:23:d3:d6:88:fe:4d:c0:
11:c6:cc:3c:ce:40:9c:8e:58:1a:fd:ee:b9:3f:60:
f3:bb:bf:02:e6:b1:4d:a9:d6:53:92:b3:ec:a2:bb:
89:83:5e:46:95:b5:79:41:48:f7:e5:3b:5e:3b:15:
99:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:07:1D:D5:57:2F:D9:F5:46:C0:FA:A1:21:19:FA:1D:2B:10:79:35
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/oAcd1Vcv2fVGwPqhIRn6HSsQeTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:650::/44
Signature Algorithm: sha256WithRSAEncryption
c3:6a:5e:4d:33:7b:3c:78:04:85:67:52:01:cb:f7:58:e3:2d:
09:71:bd:28:ad:71:2b:65:91:de:55:4b:b7:d4:3a:f5:37:63:
7c:41:75:ac:31:34:17:6d:35:a1:f2:27:6e:f5:97:e8:79:17:
11:1c:3e:b5:b6:e0:06:18:11:2f:0b:ed:40:9d:7f:0f:e4:c8:
a5:5f:a4:31:7e:79:7b:13:36:7d:f2:c3:ef:9d:74:77:74:ea:
e3:8d:09:9c:9d:ab:b5:40:e8:ec:8d:a8:57:7e:49:35:aa:af:
36:01:d7:6c:59:7e:72:5e:81:72:31:ca:d9:63:ea:98:ae:b0:
60:77:98:d1:e2:8b:20:fa:46:3c:22:65:2b:74:8b:f9:33:f7:
1e:06:11:7b:2a:36:bc:d8:1f:b3:f9:a3:36:13:2b:e9:c1:e5:
57:4b:ca:1f:44:f1:8d:e2:bc:77:50:1c:f2:47:70:71:68:f0:
98:21:63:c1:8a:53:f8:16:11:ba:b4:2a:f8:c2:8b:c1:bd:88:
39:be:83:0d:58:3f:2f:24:88:39:43:ec:9b:04:84:d7:78:ab:
e5:0b:b4:d0:d1:9a:4b:26:5a:3b:6a:f0:11:7a:77:e9:70:58:
cf:8d:ce:7b:84:c2:41:e0:d9:2e:45:cc:62:50:e8:b8:76:d2:
07:2e:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:40:31 2024 by rpki-client on console-fra.rpki-client.org