Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/TaDIb5jPq8Dfqw55WrdPa_wRYfE.roa
File: TaDIb5jPq8Dfqw55WrdPa_wRYfE.roa (raw, json)
Hash identifier: A834pYY3kBdbNJUhONCqDbuG0AgCoR0qzqyb3wFZ6GY=
Subject key identifier: 4D:A0:C8:6F:98:CF:AB:C0:DF:AB:0E:79:5A:B7:4F:6B:FC:11:61:F1
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 018CC3B7447D8466E861D2ED61CDBD48361D
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/TaDIb5jPq8Dfqw55WrdPa_wRYfE.roa
Signing time: Mon 01 Jan 2024 06:30:16 +0000
ROA not before: Mon 01 Jan 2024 06:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16097
IP address blocks: 2a12:6900:1200::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:44:7d:84:66:e8:61:d2:ed:61:cd:bd:48:36:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Jan 1 06:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4da0c86f98cfabc0dfab0e795ab74f6bfc1161f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:95:fa:18:24:5b:81:d7:0b:44:60:b8:d4:
f9:07:03:7b:33:6a:e1:71:24:02:8e:28:57:4d:a4:
58:63:5a:77:4a:b7:d5:b6:2d:af:b2:da:b1:0e:6c:
d5:70:a8:4d:d9:d9:eb:ec:9c:76:a5:95:6a:85:d0:
45:10:68:46:4c:53:31:6a:1a:00:d4:b9:62:34:9e:
f9:7a:d4:20:73:11:80:66:a4:fb:39:2a:3c:b8:0e:
b7:c0:bb:bc:39:18:1d:e2:15:51:78:14:88:82:b7:
55:d9:ca:e9:ba:09:44:52:8a:e7:90:2d:48:61:ac:
20:90:ce:7c:19:f0:e0:68:91:1a:2b:f5:e1:ee:f5:
df:e4:47:ab:f4:85:4b:4a:8b:fe:d6:cd:48:7f:84:
cb:d4:6e:54:72:4d:ad:29:5f:08:db:e5:73:cf:77:
a7:2b:ab:cd:9e:ed:93:5d:38:35:a8:d7:e9:eb:42:
00:97:92:26:c9:cd:23:e8:78:44:05:28:1a:80:47:
c8:d0:9a:25:7f:8a:70:cb:34:94:b8:56:47:a0:68:
a3:b2:eb:aa:3b:a6:f9:ef:a8:a9:77:58:ae:0a:bd:
83:ba:3d:c2:7f:d8:2f:ff:7a:17:25:49:1d:3b:d3:
11:e0:40:40:c2:f2:ca:70:83:1f:46:4f:75:93:55:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A0:C8:6F:98:CF:AB:C0:DF:AB:0E:79:5A:B7:4F:6B:FC:11:61:F1
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/TaDIb5jPq8Dfqw55WrdPa_wRYfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6900:1200::/40
Signature Algorithm: sha256WithRSAEncryption
56:ae:a9:8a:35:5a:b8:39:f3:5a:d2:48:e9:8e:7d:71:3d:53:
d1:c0:62:71:1c:3c:eb:15:d8:1f:fe:a9:38:a7:b9:65:af:bf:
90:a5:b1:89:e2:7d:6e:90:24:ae:28:db:2a:a3:21:05:b4:3c:
ae:10:5a:c1:6d:56:14:a2:7b:53:d0:27:86:e2:d8:c7:79:32:
af:78:7b:57:aa:ab:aa:f9:ab:d9:ea:cd:33:43:be:3d:be:81:
38:fb:98:12:64:3d:3f:64:69:b0:4d:2d:11:d5:94:98:6f:9c:
e0:e1:72:78:01:0c:4e:96:57:c4:c3:7b:6b:f0:1f:48:04:b0:
e5:19:31:0b:f4:0f:07:c7:8d:bd:d7:1d:64:10:a2:87:f7:72:
eb:2c:8a:db:cd:b5:3f:76:d6:43:5d:1e:76:7e:0c:b0:d9:54:
67:c7:26:c9:71:ba:da:c2:35:9e:25:07:fb:d8:c5:b9:3a:1e:
36:ad:65:48:9b:d8:e8:4f:f8:9d:6e:99:a6:e9:1d:ba:84:a8:
c8:9d:3b:f5:71:24:39:f4:0b:9e:15:55:15:d4:07:e4:9d:d5:
07:1d:80:1f:c3:d2:d6:93:60:39:97:48:6f:16:db:b8:3c:78:
38:e2:56:eb:0c:ce:2d:64:e7:62:4e:19:7a:78:f3:88:5a:1e:
97:cc:95:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:17:08 2024 by rpki-client on console-fra.rpki-client.org