Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/12EEJ5KVzN0eOAfpthVUYAOcQLI.roa
File: 12EEJ5KVzN0eOAfpthVUYAOcQLI.roa (raw, json)
Hash identifier: dXZ65F4bk5hqkAwWzXex++kBSLWjPuev8JMoWM0++JE=
Subject key identifier: D7:61:04:27:92:95:CC:DD:1E:38:07:E9:B6:15:54:60:03:9C:40:B2
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 018CC94D0038033027ECA4C26568D189ED89
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/12EEJ5KVzN0eOAfpthVUYAOcQLI.roa
Signing time: Tue 02 Jan 2024 08:31:55 +0000
ROA not before: Tue 02 Jan 2024 08:31:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44817
IP address blocks: 2a0a:280:3300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:00:38:03:30:27:ec:a4:c2:65:68:d1:89:ed:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 08:31:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d76104279295ccdd1e3807e9b6155460039c40b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:26:ec:8e:c5:a9:52:7b:62:18:f7:37:ae:
04:42:3b:d3:ea:3c:43:42:32:6e:16:b0:de:3e:11:
07:85:61:c7:f5:f6:a5:3a:db:66:6c:1a:fd:fe:b8:
71:67:2b:c2:1d:2d:1c:8c:ba:ae:77:19:96:ab:3f:
01:22:12:5c:99:8c:84:10:6c:f7:ea:ee:d4:d8:0e:
b0:e5:fd:12:b7:78:75:70:f8:b1:f4:0a:06:b5:13:
67:55:60:c8:dc:5d:19:cf:b7:9c:4a:b0:58:34:1e:
72:7a:f4:f9:d2:a1:a0:6d:28:f2:ce:8c:64:87:0a:
ee:12:c2:ab:63:23:6e:e2:61:c6:7c:3f:2b:0e:1a:
59:ef:f6:dc:dc:75:75:1a:93:e5:bf:6b:95:ed:16:
77:28:05:f8:aa:1e:75:49:c9:58:dc:20:64:80:63:
d9:99:39:09:b7:62:c5:d4:6a:88:0b:1b:55:8d:4d:
76:19:4d:0c:6e:bd:5e:9f:7b:ff:5c:48:66:6b:4b:
eb:4a:fc:0d:b9:7a:22:0b:b2:4f:d9:bb:2f:18:8d:
e4:6a:34:54:34:45:67:11:2e:f2:44:a9:e2:02:dc:
31:98:64:37:62:04:37:dd:d4:c8:17:6e:7e:98:d7:
3a:7c:16:df:53:6d:9e:03:71:cc:e4:78:ea:ab:7a:
b6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:61:04:27:92:95:CC:DD:1E:38:07:E9:B6:15:54:60:03:9C:40:B2
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/12EEJ5KVzN0eOAfpthVUYAOcQLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:3300::/40
Signature Algorithm: sha256WithRSAEncryption
7e:ec:ec:2f:17:b4:f6:f9:9c:a4:0f:52:b0:67:31:80:76:d8:
72:59:f8:73:c0:26:33:4b:4e:37:7c:bc:56:86:5e:21:af:86:
d1:c0:e5:a4:62:21:ef:ee:11:92:0c:da:77:b8:7f:4f:0e:1b:
a6:2b:6f:a9:e6:e8:f0:12:1f:db:8a:0a:0f:5f:a3:1e:fc:e4:
e8:41:6d:b0:88:8c:0f:bd:92:e1:5f:42:f4:72:e8:a7:d9:e9:
99:d2:bb:cd:81:51:51:c2:a4:d8:94:7a:69:d6:5a:e8:ba:30:
6f:8b:c5:b7:67:ce:4b:69:c1:07:09:09:14:a5:6f:93:e6:35:
e3:ba:8b:8f:cb:f2:96:7f:82:da:b2:3d:07:c3:a0:f1:e1:68:
5e:01:18:13:53:f4:60:e0:b7:31:7f:52:e5:e2:c3:d8:7b:0b:
94:0c:4d:fa:01:03:0c:6c:80:70:e9:b5:d4:01:f6:6c:82:db:
49:33:ba:43:dd:07:39:4d:86:da:22:ab:28:88:ab:12:e1:b9:
33:fb:43:ee:d5:d1:d2:e7:63:f0:91:e6:a6:01:47:20:07:56:
b9:97:1c:be:c9:c8:b2:e1:c3:76:2f:6c:12:29:cc:ee:62:ab:
53:a1:d7:bc:6d:4a:f5:64:cc:2d:f5:da:62:0c:0a:2f:f4:67:
83:fa:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 23:05:35 2024 by rpki-client on console-ams.rpki-client.org