Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/tblgrNo8wgog6QKBxfAgOyEF-Cc.roa
File: tblgrNo8wgog6QKBxfAgOyEF-Cc.roa (raw, json)
Hash identifier: XUCk9N0vRZNn1v55c59lJXML9/2fV/MhTpZ+waFPpXY=
Subject key identifier: B5:B9:60:AC:DA:3C:C2:0A:20:E9:02:81:C5:F0:20:3B:21:05:F8:27
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 018CC500A660D308779C0CBEE21510D443D6
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/tblgrNo8wgog6QKBxfAgOyEF-Cc.roa
Signing time: Mon 01 Jan 2024 12:30:03 +0000
ROA not before: Mon 01 Jan 2024 12:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212123
IP address blocks: 2a12:4944::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 22:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:a6:60:d3:08:77:9c:0c:be:e2:15:10:d4:43:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Jan 1 12:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5b960acda3cc20a20e90281c5f0203b2105f827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:0c:6b:48:52:45:c5:ef:2b:bb:ad:fd:e8:
13:5d:78:30:13:32:5f:a9:08:5f:a9:50:b5:3d:a6:
de:b6:56:4b:37:ba:12:4d:cf:3e:68:0b:bb:fc:7c:
8a:7f:ac:52:b8:4f:7b:77:db:49:0d:65:64:3f:fb:
ee:f3:52:30:ee:21:f7:90:5f:4c:f9:7c:26:a9:48:
04:51:f5:8a:e3:f2:b4:d9:4f:e3:da:4e:7c:d3:cf:
61:1f:3a:fa:63:af:05:7b:f1:47:76:0d:69:18:de:
ec:e8:c5:60:14:fc:dc:45:95:fc:66:42:c1:7c:5a:
10:d9:81:8f:a4:a1:f6:b0:2c:34:6a:8f:56:50:4d:
54:f1:af:14:9c:71:a3:3a:85:29:25:16:68:4f:b0:
0b:52:00:4e:d9:8c:88:a0:a5:56:b2:8f:39:4c:24:
54:80:8c:12:59:ef:85:85:2e:9d:90:e4:1d:e7:fd:
43:c7:4b:7b:81:d9:13:68:f5:e9:f9:1f:ae:45:60:
66:38:6b:dd:80:c8:45:71:e4:6f:a1:0b:4d:1f:2b:
c0:b1:df:ec:89:3b:bd:14:df:af:33:21:8d:9a:66:
0e:04:bc:35:32:2d:14:1b:b0:de:08:82:7e:38:7f:
2a:11:83:0c:b7:a6:44:7f:9d:2a:00:f7:ff:76:ee:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B9:60:AC:DA:3C:C2:0A:20:E9:02:81:C5:F0:20:3B:21:05:F8:27
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/tblgrNo8wgog6QKBxfAgOyEF-Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4944::/32
Signature Algorithm: sha256WithRSAEncryption
6f:36:7c:b6:65:76:df:28:1e:fc:d7:5a:71:c2:cd:8d:3b:4a:
66:85:31:4a:6c:28:bf:64:1f:e8:6b:4b:97:a7:02:68:0a:58:
87:ba:55:15:bb:17:ff:9c:6e:c9:8d:4c:c7:49:1a:4b:d0:c3:
38:1a:c7:a2:3b:3e:2e:34:99:f5:3d:8f:96:a2:d4:35:96:ae:
90:9d:19:08:b3:f7:53:d4:a5:73:b6:10:33:92:1c:8a:89:86:
e1:ac:0c:23:85:43:d2:82:4e:d9:bc:e5:4f:eb:12:0b:66:de:
78:13:6a:0b:f3:65:86:a8:79:62:cb:7d:04:da:94:42:9b:42:
3f:fd:a7:f5:0c:dc:ee:0b:a7:67:0d:22:06:47:4a:44:2f:dc:
61:f9:7a:12:a8:e4:8d:22:ec:e1:08:3d:2b:24:14:2f:38:8e:
f2:6d:32:aa:f1:19:24:3a:4f:45:4e:5b:03:b1:3f:31:74:f1:
0d:23:1f:af:c2:fc:3a:7e:d7:d9:40:12:d5:1a:1e:c1:18:4b:
bc:d5:54:d0:e0:73:4a:06:31:88:4f:1b:c4:4f:87:e6:cf:b3:
40:07:af:c5:ae:87:01:1a:a6:cd:f4:9b:a8:45:4a:8d:e7:fd:
db:ea:e5:18:aa:8b:09:74:e5:9b:98:74:70:2f:d7:05:5f:8c:
c9:2e:1e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:49:39 2024 by rpki-client on console-fra.rpki-client.org