Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/aUTRjtveeOsFflSgeuHxbafObEA.roa
File: aUTRjtveeOsFflSgeuHxbafObEA.roa (raw, json)
Hash identifier: m4Te0cVguzYc4bJu4ReZgy87rkM5zsmrCr0A5wMN9dE=
Subject key identifier: 69:44:D1:8E:DB:DE:78:EB:05:7E:54:A0:7A:E1:F1:6D:A7:CE:6C:40
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 0191D4B342E0F3C6F962A6733D14C7F5AAA5
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/aUTRjtveeOsFflSgeuHxbafObEA.roa
Signing time: Mon 09 Sep 2024 02:53:23 +0000
ROA not before: Mon 09 Sep 2024 02:53:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150296
IP address blocks: 2a12:f8c1:30::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d4:b3:42:e0:f3:c6:f9:62:a6:73:3d:14:c7:f5:aa:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Sep 9 02:53:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6944d18edbde78eb057e54a07ae1f16da7ce6c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:ca:1e:5f:bd:25:54:35:4d:f3:4a:7d:22:
0a:89:9b:b7:41:80:32:2c:12:9f:d8:ce:3a:61:05:
73:e6:ca:20:2f:f3:86:6b:b4:bb:e8:25:54:3d:0a:
79:fe:c0:7f:a7:e1:d8:24:02:86:4e:2e:9a:3d:af:
c4:72:fd:f3:d3:6c:e4:73:2e:72:b2:90:81:71:19:
be:05:22:8f:f6:98:1f:ab:01:9f:ca:8e:06:28:cd:
6c:c3:4e:0b:c1:f5:ff:a6:c6:09:0c:b7:c3:d8:56:
b6:c2:9a:3b:07:43:b8:26:4e:49:05:8f:ce:21:53:
09:e9:47:f4:d7:79:6b:55:e7:7a:aa:b3:c4:2c:ec:
e7:ff:64:93:2a:c2:32:b0:fc:4a:ca:24:2c:35:57:
5a:e1:f2:80:67:d4:7e:5a:7c:e9:17:54:3c:15:ae:
ce:8c:f1:d9:b3:78:fe:d6:73:89:a8:0c:df:ae:42:
48:45:bd:c8:72:bd:8f:a1:4a:b1:b5:b1:ce:57:68:
e0:8e:64:50:f6:48:02:af:54:18:b8:89:a3:50:6d:
b1:27:ae:29:ae:a9:08:94:ce:10:bf:fd:1c:10:8b:
c1:84:2c:7c:6d:36:83:ed:89:16:53:23:8c:fc:ef:
30:f2:7e:95:91:e0:29:f0:df:65:de:1d:cf:f9:86:
de:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:44:D1:8E:DB:DE:78:EB:05:7E:54:A0:7A:E1:F1:6D:A7:CE:6C:40
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/aUTRjtveeOsFflSgeuHxbafObEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c1:30::/44
Signature Algorithm: sha256WithRSAEncryption
81:e2:ac:8d:91:cd:f2:3e:23:56:0b:dc:a4:64:b0:44:f1:e3:
18:23:4b:de:f2:69:51:84:49:49:7f:3b:bf:f1:d2:d2:3b:e4:
e2:f4:ef:1b:72:e0:00:21:a7:75:3e:77:15:82:e2:c4:a8:af:
fe:2f:e1:84:43:bc:5c:87:65:4b:f0:a3:cc:3d:b3:58:4d:59:
84:59:13:1a:a1:a9:e3:97:9f:44:a1:89:cf:2d:c8:3e:09:95:
71:1d:9d:d6:b0:c3:c3:8f:50:89:b0:81:9d:c2:8e:73:3d:31:
47:c0:e2:2d:5d:1f:e2:ec:7b:3b:5c:d6:e2:21:b3:f1:64:eb:
04:e0:04:2a:3e:d8:44:7c:71:5b:ac:42:f7:1e:5f:68:cc:fa:
ed:33:44:b4:bb:30:09:d7:5a:0a:1b:a5:7e:5c:9f:d4:96:38:
c1:a7:70:c2:14:06:65:40:35:18:42:7a:2b:23:f8:b3:ee:32:
df:90:dc:1c:c9:bf:71:bd:01:a2:a7:55:c7:07:f9:07:4f:08:
57:82:4a:b3:28:ce:92:24:a8:0a:b9:1b:ee:51:9c:ed:bf:0a:
92:bb:b6:24:91:92:61:54:c2:8a:87:c5:83:9e:ea:76:48:fa:
19:12:1e:aa:fe:38:45:93:dd:2a:75:7c:9e:38:0e:cd:c6:3f:
18:6c:94:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:28 2024 by rpki-client on console-fra.rpki-client.org