Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/wh8J7RB-BmB8aELJ3lFn9XJ00zw.roa
File: wh8J7RB-BmB8aELJ3lFn9XJ00zw.roa (raw, json)
Hash identifier: OqqZhygKCmF503lAhK61n1l4VE+q41GXX/rk9zfL/YM=
Subject key identifier: C2:1F:09:ED:10:7E:06:60:7C:68:42:C9:DE:51:67:F5:72:74:D3:3C
Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial: 018E61C1F659815A857C2D214A449B1E38C3
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/wh8J7RB-BmB8aELJ3lFn9XJ00zw.roa
Signing time: Thu 21 Mar 2024 16:04:45 +0000
ROA not before: Thu 21 Mar 2024 16:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 37739
IP address blocks: 2a12:8fc6:aca::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:c1:f6:59:81:5a:85:7c:2d:21:4a:44:9b:1e:38:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Validity
Not Before: Mar 21 16:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c21f09ed107e06607c6842c9de5167f57274d33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:86:df:73:fa:a3:90:49:a9:1d:7c:6f:44:6a:
ac:f8:ea:02:8c:d9:ba:5c:1f:8f:80:a6:81:9b:cf:
2e:26:b6:16:bf:e9:8e:d4:5d:31:28:ab:13:b3:69:
b0:ae:41:e3:d5:6b:d0:63:18:4e:79:40:99:f8:9c:
58:32:3c:46:24:d9:99:8c:83:f8:44:1c:e0:16:45:
cf:72:0b:93:5f:c6:bb:5b:c6:61:f2:6d:aa:a5:80:
9d:79:f1:10:4b:ca:fb:05:b6:33:6c:01:70:27:7c:
cf:22:40:f9:06:73:69:8b:04:a2:89:a9:cb:04:70:
d2:0f:f3:54:82:49:0e:de:0f:d1:86:d9:63:0c:37:
8a:f0:68:4b:71:04:3d:c9:d9:66:ed:74:16:ac:96:
e3:1a:3d:f9:3d:dd:d3:55:5c:90:7c:44:cc:c2:35:
15:bb:1a:08:a5:b0:bc:29:12:44:bf:2e:0d:9b:24:
e7:c4:97:a2:96:7b:cb:c9:de:de:c5:9a:d1:30:ed:
78:fc:71:25:3b:26:df:f9:85:8d:19:3e:34:6a:b0:
4a:a1:fd:b3:6b:ac:6e:28:e7:89:fe:1b:ac:be:63:
fe:3f:ec:2a:d8:e7:85:c1:8e:b5:cc:cd:eb:1c:9c:
8e:9b:d2:8b:a8:c3:8b:70:55:65:32:84:f5:01:18:
77:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1F:09:ED:10:7E:06:60:7C:68:42:C9:DE:51:67:F5:72:74:D3:3C
X509v3 Authority Key Identifier:
keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/wh8J7RB-BmB8aELJ3lFn9XJ00zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8fc6:aca::/48
Signature Algorithm: sha256WithRSAEncryption
68:08:e2:4b:28:b4:8c:10:3a:ee:4f:6e:7d:fc:12:84:dd:f3:
2f:86:65:7c:e2:c9:17:b5:0e:78:7a:f2:a7:c6:ad:15:de:32:
79:ca:33:69:e3:0c:d5:18:b6:cb:c1:dd:8a:fb:ca:a0:e9:08:
d3:8a:b6:68:23:4a:ba:86:f1:e8:36:8f:68:a0:5b:42:f9:e4:
30:b6:38:0d:da:e3:ab:00:08:d2:1e:b7:5a:e1:be:8f:72:7d:
2a:a4:bc:b7:20:7b:23:98:de:4c:6e:57:63:3b:d4:36:95:02:
fc:14:cb:54:23:63:17:68:72:bd:2b:2a:ee:40:b4:96:0a:53:
ff:2a:b8:46:ee:fe:fc:f9:02:8e:6b:e4:f7:fb:80:12:46:32:
ae:0c:5c:e5:b5:79:d7:99:bb:fb:7a:6a:61:87:f8:9f:96:be:
f5:60:f5:85:85:a0:f5:c7:26:a0:db:7c:b1:1f:36:93:8e:ba:
b3:f2:f2:d6:19:08:32:b2:c2:20:39:63:5f:30:51:43:a4:e2:
75:5b:a0:bd:53:be:d1:7f:68:82:18:07:c9:4f:0d:c8:5d:22:
df:39:a8:ee:76:1f:c6:d9:9b:e7:1e:46:9b:08:c9:ca:20:c1:
a9:06:e3:ea:fc:c8:77:d6:7a:fd:96:92:d9:53:51:3f:df:b4:
62:46:56:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:28:25 2024 by rpki-client on console-fra.rpki-client.org