Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/7c07e8-3b8c-4c93-9a08-a909cb0a138f/1/vh28qrD4OgEmVbyxQvs3o0QVmr4.roa
File: vh28qrD4OgEmVbyxQvs3o0QVmr4.roa (raw, json)
Hash identifier: BUIxR3g+Fxekv9+5XEDBDUY+G6PceTAHZYzfaNmMy98=
Subject key identifier: BE:1D:BC:AA:B0:F8:3A:01:26:55:BC:B1:42:FB:37:A3:44:15:9A:BE
Certificate issuer: /CN=a802b73ef4a8b6b0e0883a9c8bc6e7f012db93a0
Certificate serial: 019330B41B1A520985FB0ECD19FBCBEE9B6A
Authority key identifier: A8:02:B7:3E:F4:A8:B6:B0:E0:88:3A:9C:8B:C6:E7:F0:12:DB:93:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAK3PvSotrDgiDqci8bn8BLbk6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/7c07e8-3b8c-4c93-9a08-a909cb0a138f/1/vh28qrD4OgEmVbyxQvs3o0QVmr4.roa
Signing time: Fri 15 Nov 2024 16:42:10 +0000
ROA not before: Fri 15 Nov 2024 16:42:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213850
IP address blocks: 2a12:8641:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/7c07e8-3b8c-4c93-9a08-a909cb0a138f/1/qAK3PvSotrDgiDqci8bn8BLbk6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/7c07e8-3b8c-4c93-9a08-a909cb0a138f/1/qAK3PvSotrDgiDqci8bn8BLbk6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAK3PvSotrDgiDqci8bn8BLbk6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:30:b4:1b:1a:52:09:85:fb:0e:cd:19:fb:cb:ee:9b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a802b73ef4a8b6b0e0883a9c8bc6e7f012db93a0
Validity
Not Before: Nov 15 16:42:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be1dbcaab0f83a012655bcb142fb37a344159abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:78:db:76:8a:f2:3d:55:6d:62:b2:bf:1c:
fa:40:ad:66:8a:2f:01:57:b3:ed:5e:54:45:16:3d:
2f:fd:2d:cb:2b:ce:1f:8e:70:0d:b2:5b:57:56:69:
60:a1:1d:16:7c:1c:d9:70:00:ee:41:31:0d:f6:b0:
f8:1c:48:ff:f5:dd:56:9e:f2:62:e3:d2:9e:07:e6:
a0:55:7d:c3:d8:df:9a:26:c5:14:59:69:45:6b:94:
20:2d:2e:91:ea:39:a5:02:9b:f3:d0:11:67:ff:08:
a1:01:50:2d:7b:b8:9d:89:85:b8:f1:5d:b8:ba:af:
57:1f:d0:39:b7:bc:04:3b:b2:79:bb:29:d3:7b:f8:
3e:53:0e:09:1c:53:fa:be:2a:69:b5:91:79:5f:d7:
78:fa:37:c6:c0:94:2e:40:6c:4b:75:f6:70:6a:5c:
d1:1e:89:07:e2:55:f6:9a:db:10:82:e0:50:b0:03:
3d:37:56:99:4a:b5:ac:e2:61:d5:99:9d:2a:9f:c6:
b9:38:3c:f6:e7:65:3c:d1:7a:77:dc:b0:7e:39:54:
dd:ea:15:ad:d9:7e:8d:89:55:c2:4e:22:79:cf:c8:
6d:d5:eb:4a:50:be:fe:d2:29:c4:c1:ad:5a:49:9a:
2c:7e:8d:f3:7a:0b:8f:1e:14:1d:13:ba:8f:2a:a3:
79:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1D:BC:AA:B0:F8:3A:01:26:55:BC:B1:42:FB:37:A3:44:15:9A:BE
X509v3 Authority Key Identifier:
keyid:A8:02:B7:3E:F4:A8:B6:B0:E0:88:3A:9C:8B:C6:E7:F0:12:DB:93:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAK3PvSotrDgiDqci8bn8BLbk6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7c07e8-3b8c-4c93-9a08-a909cb0a138f/1/vh28qrD4OgEmVbyxQvs3o0QVmr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7c07e8-3b8c-4c93-9a08-a909cb0a138f/1/qAK3PvSotrDgiDqci8bn8BLbk6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8641:5::/48
Signature Algorithm: sha256WithRSAEncryption
1c:15:f7:49:66:51:b7:ec:1d:da:89:78:58:f2:ef:03:db:a6:
ec:2d:2e:b7:c0:ff:5b:fc:0b:f2:fe:da:4c:51:d3:75:a1:e8:
19:b7:37:53:86:02:f4:d4:9a:32:d1:7f:03:d2:fe:42:c5:d1:
82:0f:fc:fe:d9:42:a9:b1:11:32:20:ef:b5:b1:1e:ab:f3:77:
5f:ca:ef:be:41:cd:e8:27:6c:6d:9b:4c:90:06:48:bb:c4:da:
2d:aa:6c:42:13:08:8e:8e:7e:c3:0a:04:27:ac:fd:86:89:c9:
ce:c1:2e:87:da:98:6e:41:55:46:ef:00:e9:fd:cb:a0:46:a6:
de:cf:ee:53:fa:bc:c2:1f:a7:90:24:3c:ab:d4:86:05:3c:ad:
08:db:6d:3c:23:5c:db:d4:40:7b:e3:e5:82:a1:9b:c8:02:4c:
d9:45:6a:e1:76:2c:cf:a6:7a:9c:c9:f2:c3:cd:4e:11:96:ae:
d2:5a:fe:32:35:de:02:3a:0e:f9:62:ac:21:ed:14:27:ae:80:
80:da:e0:11:9f:ad:cb:19:7e:18:24:0f:2b:33:82:12:b6:8b:
57:08:49:cd:5b:57:cc:a2:70:3e:59:50:86:16:ec:3d:d7:98:
00:df:d0:b4:89:0c:ed:34:94:f7:e6:ef:a8:30:c7:8a:ce:cf:
80:ca:ab:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:38 2024 by rpki-client on console-fra.rpki-client.org