Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/A-j7soD2bd-sjr_8wpMdJtS1SPs.roa
File: A-j7soD2bd-sjr_8wpMdJtS1SPs.roa (raw, json)
Hash identifier: OuUxgMyE74RLJ73xWa9AJ4hebrXuAHJ0IhzRj2AqR+I=
Subject key identifier: 03:E8:FB:B2:80:F6:6D:DF:AC:8E:BF:FC:C2:93:1D:26:D4:B5:48:FB
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 0191D4B34187439FEF76F686B6FBF1B7DED1
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/A-j7soD2bd-sjr_8wpMdJtS1SPs.roa
Signing time: Mon 09 Sep 2024 02:53:23 +0000
ROA not before: Mon 09 Sep 2024 02:53:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63801
IP address blocks: 2a12:f8c2:200::/40 maxlen: 40
2a12:f8c3:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d4:b3:41:87:43:9f:ef:76:f6:86:b6:fb:f1:b7:de:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Sep 9 02:53:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03e8fbb280f66ddfac8ebffcc2931d26d4b548fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:b5:bc:df:8c:e9:7d:aa:21:8e:dc:fe:c5:
cb:57:bf:20:82:10:69:27:59:37:c2:29:c6:8c:c7:
a1:ca:be:7d:15:ab:17:0f:61:f8:c6:9b:57:ca:8c:
9b:e6:88:c0:9e:43:f4:37:06:46:bf:29:a2:cc:09:
dc:ee:7d:81:82:28:29:fe:8b:27:98:59:ea:79:2f:
3f:d2:6e:d4:1c:47:14:fa:b2:3d:5f:58:97:fb:c8:
1c:13:c4:43:74:7a:6b:b8:00:f4:5b:c5:f3:4c:d6:
f7:d5:f5:c7:66:5b:6f:ae:81:3d:e6:4c:47:90:57:
f6:bf:29:18:3c:4b:1e:8b:97:d9:ff:36:06:93:ea:
4e:b2:ed:bb:76:a3:d2:85:06:46:e3:a8:01:19:1d:
98:3c:bb:9e:9e:74:c1:4b:d7:3d:5e:cd:2c:a9:e8:
7b:91:25:2b:0c:a4:62:64:ad:e1:65:64:c1:fb:a2:
ae:aa:d1:55:bb:ba:63:e2:86:e5:72:5d:9b:ce:52:
33:c0:7c:ed:f9:58:e5:12:c8:c7:68:67:8c:c0:bd:
bc:83:eb:29:ba:0f:82:f2:aa:31:90:b7:e0:d8:3a:
d1:bf:47:a6:e9:93:4d:8e:6d:e0:e5:f1:e3:23:e7:
3b:8f:3a:58:80:df:11:37:8f:f3:50:b2:7a:d4:71:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E8:FB:B2:80:F6:6D:DF:AC:8E:BF:FC:C2:93:1D:26:D4:B5:48:FB
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/A-j7soD2bd-sjr_8wpMdJtS1SPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c2:200::/40
2a12:f8c3:4000::/36
Signature Algorithm: sha256WithRSAEncryption
35:cc:67:23:55:03:2a:fa:97:28:ad:ba:fa:46:6f:68:9f:56:
9d:dc:5b:e1:c2:ea:25:46:42:13:f7:d4:a5:b7:e4:d2:bf:a7:
b4:36:fe:d2:df:e7:2c:61:1e:26:63:e4:fc:3b:64:12:3b:b5:
a0:2f:cc:7e:ce:3d:f5:09:ac:88:67:71:ce:e9:ea:13:01:44:
11:28:08:e4:1d:48:b9:6b:32:e5:d5:b9:50:35:1f:3c:db:2e:
47:47:9a:db:d6:03:ea:8d:b5:18:00:14:98:ca:58:18:93:02:
df:4b:ae:4e:59:37:64:23:ac:95:3f:fd:43:bf:55:be:85:b3:
ed:79:cb:4e:58:53:e2:28:b6:a2:1b:81:27:5e:80:d2:58:cb:
02:db:04:58:14:2b:04:9a:cb:05:93:83:20:2b:2e:c7:91:ce:
da:8a:34:d2:3e:f3:68:43:6b:ec:44:6f:2c:d8:9d:80:6d:a0:
e3:8d:5a:46:99:2f:50:88:28:e3:90:8a:1c:c8:da:0d:24:05:
20:0d:73:7b:2e:c0:02:fe:96:f7:53:38:cb:60:79:39:8f:3d:
27:b8:96:b3:cc:d8:fa:15:36:e0:a6:2e:f9:a6:4a:3d:a1:52:
3a:89:b0:75:45:07:0d:ea:3e:45:6e:aa:1e:16:15:cf:cd:7c:
b5:ba:bb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:41:09 2024 by rpki-client on console-fra.rpki-client.org