Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/T0TpL1gt1OffZImZKTejT91WlcA.roa
File: T0TpL1gt1OffZImZKTejT91WlcA.roa (raw, json)
Hash identifier: Cjer86EE7lGtPUJ1Q1sqvQdfIGVPP8jt97xmXpJlx9Y=
Subject key identifier: 4F:44:E9:2F:58:2D:D4:E7:DF:64:89:99:29:37:A3:4F:DD:56:95:C0
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 018CC3B74406CF91982766FA563B65E8C110
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/T0TpL1gt1OffZImZKTejT91WlcA.roa
Signing time: Mon 01 Jan 2024 06:30:16 +0000
ROA not before: Mon 01 Jan 2024 06:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12337
IP address blocks: 2a12:6900:1100::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:44:06:cf:91:98:27:66:fa:56:3b:65:e8:c1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Jan 1 06:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f44e92f582dd4e7df6489992937a34fdd5695c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3d:a8:45:89:68:4a:16:bb:d4:8d:ae:0d:02:
a0:6f:6f:57:bf:78:2c:13:ef:27:3b:e3:98:8f:36:
43:92:d9:e8:d7:82:7c:e4:41:0a:a5:61:83:97:75:
9b:54:35:f1:fe:2e:76:e6:be:9b:8d:b6:cb:76:76:
c7:76:45:09:18:79:18:89:66:51:38:49:d2:ca:34:
f0:4b:56:12:9c:e0:d5:cf:4b:82:fd:58:c3:16:9d:
ed:bd:eb:ce:ea:49:fc:b5:bc:2e:64:7b:3e:7d:3c:
a0:c7:4e:17:3d:6c:cf:0b:aa:b6:11:a1:3d:08:b5:
1c:65:0d:1a:48:63:75:79:fd:55:ce:65:87:47:cf:
30:19:c8:e3:f4:55:46:dd:47:62:d4:4d:c5:88:64:
45:4e:5e:4e:e7:ce:40:92:66:b4:50:87:c1:09:6a:
fb:b7:b8:3c:d6:5d:d7:c6:ef:d9:8c:02:97:d3:10:
76:35:bb:05:7b:85:0e:8c:57:7d:b9:95:dc:4d:f8:
32:1b:88:27:0a:4c:1e:ad:a0:0d:ee:4e:0c:ce:d4:
4d:c2:69:ee:94:ff:52:c4:34:a1:7d:db:ad:8b:98:
0e:57:1e:38:2d:99:42:67:27:4e:22:96:b3:33:b7:
cc:b1:93:be:2c:58:41:de:b5:f2:0a:4b:de:2d:20:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:44:E9:2F:58:2D:D4:E7:DF:64:89:99:29:37:A3:4F:DD:56:95:C0
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/T0TpL1gt1OffZImZKTejT91WlcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6900:1100::/40
Signature Algorithm: sha256WithRSAEncryption
62:34:19:2b:56:cc:0a:f9:37:0e:a2:6c:9a:1b:2e:67:d3:5c:
2f:15:18:95:d5:aa:43:36:47:df:13:d6:7e:01:03:e1:c2:b6:
1f:7a:35:30:37:9c:18:2f:2f:01:1f:73:5c:b9:95:53:cc:22:
64:5f:20:f7:38:81:06:cb:0a:c8:5e:8b:1f:22:6b:ea:62:f1:
1e:50:fa:15:41:fe:bf:0e:e1:50:4c:03:51:13:39:62:9a:b5:
a2:dd:06:31:2f:8f:08:57:6d:e1:8e:e4:62:ba:06:af:87:6f:
5e:d9:9b:69:f7:b4:78:e4:69:1b:85:94:7e:21:ee:aa:9f:2a:
f1:c4:92:b9:4d:ba:cb:18:6d:c8:0c:0f:67:05:e0:db:f7:1f:
77:65:6c:28:3c:16:ca:27:8d:e8:8c:df:f3:5e:55:38:23:dd:
29:8b:15:47:2f:d8:8f:55:f2:dc:19:86:80:91:f4:99:cc:b5:
2f:57:dc:c3:e4:a1:95:21:1e:e6:cb:35:de:e0:d6:75:38:ec:
de:87:b0:43:03:d3:99:01:0a:ee:b7:09:e0:57:be:d6:cc:1b:
a9:e0:66:e6:4b:71:30:46:3d:be:7f:0e:d8:21:2d:9d:ca:4d:
29:ec:27:48:35:c1:6a:bf:ac:ec:f8:ec:9a:00:e1:6f:2f:36:
54:30:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:11:12 2024 by rpki-client on console-ams.rpki-client.org