Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/p6w56tZfHOP_ZGcBHF9QKvsy6F4.roa
File: p6w56tZfHOP_ZGcBHF9QKvsy6F4.roa (raw, json)
Hash identifier: nIR9beM3z0SQIE8U74il0g9rsOeSSgY90BzU/EhLIZk=
Subject key identifier: A7:AC:39:EA:D6:5F:1C:E3:FF:64:67:01:1C:5F:50:2A:FB:32:E8:5E
Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial: 018E47C2136B492AEB9FBCEBC1BE0F03C7BC
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/p6w56tZfHOP_ZGcBHF9QKvsy6F4.roa
Signing time: Sat 16 Mar 2024 14:54:45 +0000
ROA not before: Sat 16 Mar 2024 14:54:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 329386
IP address blocks: 2a12:8fc6:1386::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:47:c2:13:6b:49:2a:eb:9f:bc:eb:c1:be:0f:03:c7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Validity
Not Before: Mar 16 14:54:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7ac39ead65f1ce3ff6467011c5f502afb32e85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b0:a2:12:fd:58:8e:05:f8:57:6e:43:e2:d7:
bc:82:04:6f:b8:42:5e:40:41:75:4c:2b:a8:4f:7c:
6f:91:65:c2:61:82:29:c9:f5:91:d4:2e:2e:df:dd:
68:44:65:09:3d:b5:d1:bf:37:08:45:bd:d2:b2:cd:
9e:87:18:1a:26:6a:b8:d2:99:6d:ab:96:95:82:ed:
18:1d:61:ed:28:f9:b2:4c:d7:35:ea:c9:b5:5e:83:
cf:0c:b2:94:24:ec:b0:bf:2f:58:84:52:45:84:33:
7f:ba:d1:7b:80:51:7c:03:de:95:a6:18:5b:d6:54:
ab:25:0a:ef:e3:2d:c8:b8:8a:1b:79:e1:06:27:ed:
52:49:4b:19:48:62:93:3a:bd:26:10:c4:cf:fc:bd:
ba:ed:0a:e5:5c:fb:29:38:74:c6:78:e0:97:ce:70:
ce:9e:c2:f7:cd:0a:db:4a:26:29:64:2e:fd:08:89:
06:e9:de:78:58:68:ca:54:3f:42:00:8a:13:21:3b:
d0:a6:22:9c:a0:83:55:56:8c:2b:51:63:fa:22:2a:
dc:b4:0c:e9:19:ec:d6:f9:a9:52:6f:ab:46:10:9a:
cc:d6:14:a0:61:74:21:9d:b9:05:8a:0b:27:3a:bc:
f1:e7:ca:8b:73:fc:e8:5f:f1:ce:ae:c9:46:b7:1f:
7e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AC:39:EA:D6:5F:1C:E3:FF:64:67:01:1C:5F:50:2A:FB:32:E8:5E
X509v3 Authority Key Identifier:
keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/p6w56tZfHOP_ZGcBHF9QKvsy6F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8fc6:1386::/48
Signature Algorithm: sha256WithRSAEncryption
19:4f:09:3b:49:6a:53:a8:fc:b6:78:1d:1d:8b:55:75:d5:fe:
48:90:41:1c:68:68:b5:87:29:91:b1:5b:d5:dc:d3:f9:45:8e:
2c:0e:37:83:56:15:1f:bf:05:30:0c:51:1b:ac:8b:0b:ad:1e:
ce:5f:19:fb:e3:90:aa:1f:5f:ba:75:4a:43:d6:12:ed:51:bd:
75:1b:a9:f3:25:07:83:72:f2:b1:6b:08:af:d9:61:a0:67:90:
3b:76:37:9d:e9:6a:09:ef:7a:0a:14:8e:fb:b4:33:8a:aa:55:
8d:96:7e:23:0d:53:55:e5:01:46:a5:dd:34:67:40:bb:46:fc:
3f:1b:a0:e4:c8:cd:6d:40:98:97:88:1e:37:0b:7d:2a:fc:82:
19:90:96:5b:8c:e9:c9:9d:f8:39:77:2d:2d:a2:f4:c7:c1:23:
1d:3d:8a:79:e8:45:d3:ec:aa:48:65:74:81:0a:d6:96:26:b9:
9f:c4:46:fd:14:1e:69:bf:34:93:57:db:fb:ba:7e:39:d8:34:
47:46:f8:74:0d:51:9a:00:0b:b7:e8:d7:7a:32:a5:ec:7c:c7:
67:f1:e2:c4:dc:1d:f9:21:e2:7e:25:d3:8e:2c:94:cb:bd:82:
02:45:f1:50:bd:54:08:99:25:3c:d1:13:5d:04:b4:66:0e:b3:
01:d6:24:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:08:31 2024 by rpki-client on console-fra.rpki-client.org