Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/mkePU5aiVtTaAQeXZHaF83zG2hk.roa
File: mkePU5aiVtTaAQeXZHaF83zG2hk.roa (raw, json)
Hash identifier: /YDg1w0tsdkTs2WO0e2t9CwPMUcV3hUN6DA3TGLtoTk=
Subject key identifier: 9A:47:8F:53:96:A2:56:D4:DA:01:07:97:64:76:85:F3:7C:C6:DA:19
Certificate issuer: /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial: 0190FE70D149AED502EBBE41D8E1A3E09C29
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/mkePU5aiVtTaAQeXZHaF83zG2hk.roa
Signing time: Mon 29 Jul 2024 12:22:04 +0000
ROA not before: Mon 29 Jul 2024 12:22:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214458
IP address blocks: 2a12:99c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fe:70:d1:49:ae:d5:02:eb:be:41:d8:e1:a3:e0:9c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Validity
Not Before: Jul 29 12:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a478f5396a256d4da010797647685f37cc6da19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:36:f1:68:d1:f9:eb:76:c5:90:9b:8f:16:
8a:7d:b6:7b:a2:b0:c5:6c:50:2d:88:7f:5c:3d:6f:
2f:85:27:f7:40:2b:9d:59:d4:96:ea:9d:80:bc:3c:
f7:ee:c8:db:6f:8b:45:50:88:e0:5d:ae:19:c2:9b:
dc:2c:c3:f9:7c:07:c7:1c:ae:20:3a:cd:ab:bd:93:
8b:44:49:c7:d5:af:39:fd:81:da:34:6e:00:02:59:
a6:e9:07:10:1d:37:33:98:dc:f3:34:92:6d:0d:22:
de:30:1b:d0:e0:5d:8c:d2:0e:ff:40:3a:b3:5e:f4:
4c:61:c5:56:05:57:90:db:c2:b4:8e:c3:50:e7:8d:
82:e6:83:e6:ef:bf:3e:5f:7e:3b:c4:0f:05:86:1a:
fb:6f:9d:44:be:1a:17:91:f8:7e:ec:10:09:b2:44:
1a:86:f8:d0:fc:56:51:85:9d:7d:01:80:5e:f2:fb:
55:e1:81:c8:48:a7:b2:db:85:be:b4:53:07:48:66:
14:c7:fe:53:69:3a:be:9c:06:37:c4:fb:c9:bd:20:
f3:2e:6e:c4:16:ba:ea:7b:eb:7f:06:c9:86:43:a2:
8c:8d:36:64:7b:b5:24:45:10:aa:a2:69:3a:46:bb:
b2:ae:40:6a:53:aa:ec:36:05:ba:17:81:ba:39:14:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:47:8F:53:96:A2:56:D4:DA:01:07:97:64:76:85:F3:7C:C6:DA:19
X509v3 Authority Key Identifier:
keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/mkePU5aiVtTaAQeXZHaF83zG2hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:99c7::/32
Signature Algorithm: sha256WithRSAEncryption
58:0b:0c:12:f1:25:ff:42:17:ab:aa:ac:1f:52:ac:a3:25:ec:
c6:84:5e:73:39:52:aa:03:e7:8f:cc:db:b1:38:6e:0b:93:47:
9a:7e:f1:e9:a0:10:24:8c:48:19:59:b2:8f:eb:d2:bf:da:63:
4f:d8:38:e7:42:1f:4a:eb:12:37:b1:5a:e7:13:47:eb:1b:c2:
60:bd:23:52:7d:48:ba:25:22:bb:c1:83:72:88:2f:6f:49:a1:
af:df:04:a0:0c:18:b9:b9:2c:2c:12:92:79:35:f5:d6:0e:6a:
28:e7:c0:6d:82:74:57:7a:dd:9f:08:21:94:da:79:1e:dd:b1:
9a:fa:71:ab:e7:ce:bd:53:09:50:cd:b4:ab:86:d0:c7:cf:09:
0a:b6:b7:6b:c2:73:84:92:52:ee:30:d6:b3:e2:24:f5:de:2d:
ac:1a:c1:79:d3:1e:0c:03:cd:99:dd:54:e9:95:4d:2f:36:58:
79:cb:05:01:90:81:76:5e:d7:28:a6:c0:bb:7d:7f:68:8d:66:
6b:70:1a:11:6d:5c:21:47:0a:95:87:db:18:ca:e5:d3:42:5f:
9d:c5:7f:8f:72:01:a4:d4:fe:a5:a5:e8:d9:5a:64:0b:14:5f:
1c:47:69:d9:3f:7e:49:77:b4:b8:9a:2c:e8:af:f8:63:f8:fb:
22:33:b2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 18:30:18 2024 by rpki-client on console-fra.rpki-client.org