Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/GP4nkxdJBhoHw8zRoYJES80oCY0.roa
File: GP4nkxdJBhoHw8zRoYJES80oCY0.roa (raw, json)
Hash identifier: g2FExQvO4y2KvymxXYRcarb+RJW0ct8ZUDa1tlm1IyU=
Subject key identifier: 18:FE:27:93:17:49:06:1A:07:C3:CC:D1:A1:82:44:4B:CD:28:09:8D
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 018CC500A52CA0595C49E9F2B71C6D55CA8B
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/GP4nkxdJBhoHw8zRoYJES80oCY0.roa
Signing time: Mon 01 Jan 2024 12:30:02 +0000
ROA not before: Mon 01 Jan 2024 12:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209958
IP address blocks: 2a12:4940::/32 maxlen: 48
2a12:4946:4940::/44 maxlen: 48
2a12:4946:6960::/44 maxlen: 48
2a12:4946:3000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:a5:2c:a0:59:5c:49:e9:f2:b7:1c:6d:55:ca:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Jan 1 12:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18fe27931749061a07c3ccd1a182444bcd28098d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ec:ad:43:60:86:58:c2:57:92:72:63:59:06:
b1:f0:10:04:c3:22:7d:5d:f8:31:84:2e:57:d0:ad:
22:dd:db:39:3a:12:b9:9d:50:28:69:31:4b:fa:af:
37:0c:c6:33:dd:95:33:01:b0:52:6c:28:ae:54:b8:
f4:93:a8:19:ce:2b:c4:cc:78:25:33:d6:e3:97:93:
1d:7f:b3:f9:bc:d2:2e:5a:d1:a1:3c:24:30:2b:b2:
d0:6f:a3:06:37:d6:fe:b2:99:57:53:86:e5:1c:b4:
24:b4:a8:0b:3c:49:e7:1d:6f:dd:ea:28:32:51:9e:
6b:e8:08:5b:52:d5:56:2e:16:d7:7f:56:ab:a9:c1:
ac:96:4b:d8:d9:70:83:ad:66:de:b1:8f:ed:ba:b2:
13:80:b3:d7:3b:a3:f5:c8:77:4e:7c:a8:78:ad:56:
bf:57:7b:86:4d:ff:94:43:fe:47:0d:c8:73:3e:36:
36:da:e9:cb:9a:ec:8c:e3:ed:4e:09:2a:1a:c6:90:
d7:f6:10:99:e9:cd:7b:ae:28:3b:00:95:19:bd:12:
35:e8:47:f9:5e:06:8c:3f:46:f6:80:62:46:ec:48:
a3:c2:15:3a:5b:81:51:88:35:3a:1d:f2:4c:d3:80:
d0:05:b5:49:3c:e6:f6:c5:9b:0a:1a:76:ca:85:36:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FE:27:93:17:49:06:1A:07:C3:CC:D1:A1:82:44:4B:CD:28:09:8D
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/GP4nkxdJBhoHw8zRoYJES80oCY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4940::/32
2a12:4946:3000::/48
2a12:4946:4940::/44
2a12:4946:6960::/44
Signature Algorithm: sha256WithRSAEncryption
9b:eb:70:ca:5b:3e:9c:22:9a:86:97:d5:68:6d:94:a5:cb:4d:
b5:ba:71:11:95:83:4a:c4:09:ed:0a:f4:89:5f:c5:6f:87:84:
64:bf:6e:70:23:07:a1:a6:e1:75:4c:5c:1e:e0:44:26:b5:99:
f2:c4:51:25:5a:f8:db:7e:20:c7:c1:87:19:4c:64:d5:82:73:
a0:7a:3e:47:6c:f3:64:5a:42:09:b2:6b:44:36:ff:13:5d:66:
e1:1d:87:7d:bf:5c:22:7c:07:10:5d:f7:99:d1:38:6f:bb:3a:
1c:4c:72:04:a4:15:2c:fd:1f:4b:5d:4f:4a:51:c0:a5:4c:f1:
11:30:4e:02:6d:74:b3:dd:76:4a:a3:b4:5c:25:e4:e9:27:46:
c6:8f:e4:e3:f6:55:00:1a:bc:11:4e:42:d9:a0:6d:67:7f:94:
79:a2:35:e9:f1:86:cb:ff:7c:a1:72:d3:e9:c9:a2:e8:25:2d:
b4:7b:75:a8:47:e6:93:27:79:30:18:90:bd:5a:65:3a:57:ca:
02:4b:35:17:85:ca:82:2f:ab:29:ec:b7:7c:0c:d7:5a:8f:49:
ab:45:c6:09:e2:6e:3e:2c:2c:9e:46:7d:e5:f9:32:49:1b:89:
58:16:ed:78:e4:c9:04:6b:20:98:56:78:39:78:d7:a8:7d:96:
13:1a:dd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:57:54 2024 by rpki-client on console-fra.rpki-client.org