Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/b_N0TmgyFn4nxtsiw2SAHOov8_8.roa
File: b_N0TmgyFn4nxtsiw2SAHOov8_8.roa (raw, json)
Hash identifier: zWKc3uih3GbGQw4yJcvgK3riIEmsYLJcr+CJCdmmfM8=
Subject key identifier: 6F:F3:74:4E:68:32:16:7E:27:C6:DB:22:C3:64:80:1C:EA:2F:F3:FF
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 018CC500A40A8690E485FCBC7C15283F2E6C
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/b_N0TmgyFn4nxtsiw2SAHOov8_8.roa
Signing time: Mon 01 Jan 2024 12:30:02 +0000
ROA not before: Mon 01 Jan 2024 12:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202559
IP address blocks: 2a12:4946:4010::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 22:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:a4:0a:86:90:e4:85:fc:bc:7c:15:28:3f:2e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Jan 1 12:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ff3744e6832167e27c6db22c364801cea2ff3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a0:38:0a:dd:8d:37:ea:98:49:cc:bd:64:27:
2b:32:96:99:94:a5:d2:3e:15:72:c6:26:68:3b:89:
23:35:aa:5d:44:c5:88:8c:70:5a:0a:3f:62:a6:43:
73:8d:7a:8e:b6:cc:81:35:9e:a8:f0:b4:12:f2:b7:
4d:5e:ca:d2:53:66:67:1d:b8:63:37:47:10:b8:fa:
29:ed:83:b8:08:5f:85:96:5a:98:cf:e3:5c:a5:86:
fd:fe:2c:df:a7:eb:42:9b:d3:07:d2:8b:f5:66:c2:
e0:db:4e:49:e9:a2:ab:de:11:45:66:59:9f:04:9f:
0c:78:35:58:e4:8f:35:41:02:76:d5:61:ee:c8:54:
4a:3f:6f:56:42:f5:d3:75:8c:7b:84:e4:62:c1:ba:
d1:b4:29:a6:4b:c4:08:b1:79:56:2a:5e:f2:60:75:
85:fb:fd:a8:4a:ce:96:bf:7f:8e:85:09:c7:1b:e2:
13:ec:a6:8c:e9:87:8d:ee:e8:bb:b6:82:1b:e0:a6:
a6:ce:91:c7:2d:b4:d8:53:dd:30:4c:2c:58:03:36:
4f:48:7d:a1:a0:aa:28:14:c2:bd:55:00:26:bf:17:
47:6b:15:3a:00:26:6b:88:10:34:ab:4e:66:b2:70:
33:5c:83:d8:b7:47:9e:31:65:88:bf:21:06:1b:41:
f5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F3:74:4E:68:32:16:7E:27:C6:DB:22:C3:64:80:1C:EA:2F:F3:FF
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/b_N0TmgyFn4nxtsiw2SAHOov8_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4946:4010::/44
Signature Algorithm: sha256WithRSAEncryption
15:b0:cb:70:72:0f:5a:7d:89:d4:91:cf:8c:68:16:70:d3:6d:
2c:37:f1:e2:c8:51:ef:e0:2f:98:4e:9c:da:4b:72:42:e4:49:
ee:af:fa:1d:a5:b8:05:a6:ee:7c:f8:97:dc:49:1e:09:e4:72:
0c:69:9f:fe:34:58:f0:eb:cf:54:72:38:ac:54:e8:07:76:6e:
f0:4b:f5:ce:22:41:e6:b6:5a:d5:ee:12:6b:9d:ac:41:44:db:
48:ed:21:8f:61:de:51:f7:7a:de:68:bd:08:0a:12:5d:fd:d3:
4a:ed:43:55:dc:da:f4:5c:21:1e:0c:89:93:85:21:36:fd:3b:
1a:52:7b:e2:c7:8e:5a:30:32:06:99:2f:e5:c7:15:3f:48:c9:
68:69:39:bd:bd:7c:89:d8:50:73:bd:57:a6:79:90:02:67:ff:
a7:0d:ca:06:34:f7:f5:2c:ba:3c:0e:ee:12:25:e1:2e:c5:65:
d6:fa:43:94:c0:52:4c:b8:e0:15:6d:cd:e1:d5:67:28:99:dc:
36:8c:58:0e:58:b8:f7:a7:f8:05:a8:3e:d6:eb:ea:d0:80:db:
84:b8:7c:c7:76:94:83:7f:2b:5e:0c:e3:14:51:eb:06:db:85:
f6:91:41:b0:80:98:92:37:93:2e:a9:53:ed:4b:d1:f8:09:05:
69:3a:d9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:49:39 2024 by rpki-client on console-fra.rpki-client.org