Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/uV-avjwEhJXUnJxEPBfWqSAkiic.roa
File: uV-avjwEhJXUnJxEPBfWqSAkiic.roa (raw, json)
Hash identifier: G/o6tnmxcuFVCjHQENQTBXCWN7/gwn5319+TNjfcEPc=
Subject key identifier: B9:5F:9A:BE:3C:04:84:95:D4:9C:9C:44:3C:17:D6:A9:20:24:8A:27
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 018E842B2A30D2002F7EFD53F6CB99EDBCD9
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/uV-avjwEhJXUnJxEPBfWqSAkiic.roa
Signing time: Thu 28 Mar 2024 08:26:45 +0000
ROA not before: Thu 28 Mar 2024 08:26:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216300
IP address blocks: 2a12:b3c0::/48 maxlen: 48
2a12:b3c0:2::/48 maxlen: 48
2a12:b3c0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:2b:2a:30:d2:00:2f:7e:fd:53:f6:cb:99:ed:bc:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Mar 28 08:26:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b95f9abe3c048495d49c9c443c17d6a920248a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:4f:06:94:64:e2:d2:0f:8b:fc:a0:a2:99:
f8:93:d1:67:0f:c0:fa:b6:85:79:d6:68:f2:14:d7:
b3:09:c6:e3:b2:bf:f4:a0:51:dc:57:29:39:59:7a:
f3:67:0b:a6:5d:ac:1b:24:b0:42:82:03:44:c3:50:
69:55:18:ce:a3:04:44:91:9c:9e:35:5c:91:79:4b:
6a:d6:74:74:83:af:95:17:6b:b0:7f:a5:70:12:79:
ff:2e:ae:af:36:e4:cc:2d:d2:bf:2e:84:51:1f:5d:
55:9d:7f:fc:b1:e2:f4:d4:5e:a7:1a:d2:d1:c2:52:
5c:8b:4b:8e:86:6e:99:d3:7d:04:ad:ee:d2:39:e2:
8f:4a:8e:da:23:e6:0d:41:24:ea:77:6f:8c:a3:dc:
f1:54:cf:93:a3:60:8c:99:d9:78:bd:5b:e6:49:07:
a2:30:11:5c:7d:bb:55:87:3f:0d:fd:27:84:da:ff:
71:61:44:d3:71:01:2f:db:f2:bf:c1:4d:f3:b5:d1:
92:48:b6:26:8a:57:20:86:25:5d:bb:64:46:c1:e6:
8a:34:0c:15:79:42:a2:d5:aa:f4:8d:15:3e:66:55:
fd:e2:c1:0e:f4:00:eb:68:2f:d5:7e:cb:4f:cc:98:
62:a0:fa:a5:cc:4e:4d:b6:17:21:eb:34:58:0c:07:
5f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5F:9A:BE:3C:04:84:95:D4:9C:9C:44:3C:17:D6:A9:20:24:8A:27
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/uV-avjwEhJXUnJxEPBfWqSAkiic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:b3c0::/48
2a12:b3c0:2::/47
Signature Algorithm: sha256WithRSAEncryption
a2:fe:2a:a6:6f:96:71:5c:86:a0:b1:6b:73:70:d9:a4:55:02:
65:1a:2a:04:6a:6d:73:db:51:d4:06:5c:3c:78:7e:b7:07:0e:
82:cd:c8:1a:37:ed:5e:a7:ba:9f:f2:c2:ac:9b:ac:27:6f:35:
4e:5b:14:ab:b1:e3:7e:ff:b0:02:f8:02:85:17:b1:61:33:2e:
ef:88:b4:3c:ab:87:4a:93:8f:c8:91:ac:af:1a:9e:c6:ce:fb:
5a:ec:be:6c:eb:de:b1:28:46:af:8c:57:92:bc:25:cd:27:fa:
c3:5e:74:8f:73:eb:22:53:6b:6f:12:29:b5:e8:50:a5:4f:13:
d8:23:8a:a8:ec:87:0c:61:77:f1:ba:ab:16:60:0f:0a:74:7d:
24:04:4d:17:f8:c8:bd:f1:15:99:09:25:5b:fe:30:ea:91:98:
55:19:b4:b0:80:c0:3d:cb:63:7b:fc:1c:f3:a0:e5:43:52:2e:
12:11:33:3a:d0:97:e3:74:84:de:86:ef:3f:8d:68:28:fc:72:
c4:b0:64:0a:3f:ae:6b:f5:5d:a9:14:60:a0:83:37:48:67:80:
27:b5:81:f2:c9:9b:e6:2b:13:06:7a:73:7c:6c:56:02:56:c8:
10:0b:ea:c3:0d:57:c5:84:fc:6b:ae:ea:26:fb:6a:0b:35:4c:
8f:b6:4e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:04:03 2024 by rpki-client on console-ams.rpki-client.org