Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/RupV1bSCj1c5ZYNpAGrId8JQGM0.roa
File: RupV1bSCj1c5ZYNpAGrId8JQGM0.roa (raw, json)
Hash identifier: gOGuV80SJPlkuWjHmxo0emXgLrJIzevelHqmI8dJ7VQ=
Subject key identifier: 46:EA:55:D5:B4:82:8F:57:39:65:83:69:00:6A:C8:77:C2:50:18:CD
Certificate issuer: /CN=23b29accd4c0d5f5f8377ea7f46343b7606bab7c
Certificate serial: 018CC64ACA1FA373F1DD45A04EB9E13586D9
Authority key identifier: 23:B2:9A:CC:D4:C0:D5:F5:F8:37:7E:A7:F4:63:43:B7:60:6B:AB:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/RupV1bSCj1c5ZYNpAGrId8JQGM0.roa
Signing time: Mon 01 Jan 2024 18:30:39 +0000
ROA not before: Mon 01 Jan 2024 18:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206459
IP address blocks: 2a12:bd40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ca:1f:a3:73:f1:dd:45:a0:4e:b9:e1:35:86:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b29accd4c0d5f5f8377ea7f46343b7606bab7c
Validity
Not Before: Jan 1 18:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46ea55d5b4828f5739658369006ac877c25018cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9a:53:e8:28:f8:26:ff:23:d9:62:ea:19:4d:
e1:b6:80:ec:ac:d4:37:4f:73:8e:bd:c3:4f:17:c6:
cc:cd:64:8e:26:44:45:be:3f:22:de:13:b0:5c:b3:
ef:1d:cc:69:47:f0:f8:d2:48:99:e6:8e:2b:75:33:
4c:0d:f7:e2:d2:f6:b7:48:96:e9:1c:11:36:58:16:
61:a1:f4:8e:dd:34:a5:23:d1:81:b1:f7:3e:b9:af:
a9:17:f0:89:bd:d3:18:6a:fe:dc:2e:56:a7:d0:6a:
7a:44:61:e4:a5:eb:3f:79:28:32:4e:40:bb:9d:ca:
93:e9:8d:ec:10:c4:ff:a2:e8:75:e3:21:79:9a:44:
cb:5f:e4:8d:fb:0b:bb:dd:7c:8e:81:d4:7c:16:ea:
9d:39:16:60:ad:c0:ed:3a:04:bb:33:b2:d0:62:95:
4a:a2:69:49:75:bf:6b:58:43:56:a6:15:58:ae:21:
4c:d1:b4:b2:5f:65:21:a8:27:ec:8b:72:ef:70:a9:
26:b5:c9:13:9d:df:80:98:46:b7:fc:2d:1c:06:06:
25:58:3b:72:91:5a:19:33:6d:d7:e8:0c:ba:76:c1:
36:d5:38:5e:e2:3f:bb:3c:77:1e:50:54:df:f5:bd:
34:44:b8:a4:54:aa:52:f4:e8:eb:14:43:24:23:d2:
67:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EA:55:D5:B4:82:8F:57:39:65:83:69:00:6A:C8:77:C2:50:18:CD
X509v3 Authority Key Identifier:
keyid:23:B2:9A:CC:D4:C0:D5:F5:F8:37:7E:A7:F4:63:43:B7:60:6B:AB:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/RupV1bSCj1c5ZYNpAGrId8JQGM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bd40::/29
Signature Algorithm: sha256WithRSAEncryption
35:bd:ca:bb:54:fa:a3:7f:c4:bc:28:b9:58:cd:2e:58:40:e1:
75:78:1b:d9:4b:cc:40:db:96:b5:ab:a6:45:b5:c5:60:45:e8:
29:6f:f3:58:66:77:a7:93:26:6e:cd:ae:ff:57:8f:6d:4c:68:
4b:ef:b1:c7:64:5f:98:a0:a1:05:06:db:bb:1d:da:df:27:5d:
b8:da:b9:5d:3f:92:bb:25:79:e5:5b:d3:e4:3a:ec:fc:15:31:
87:bd:bc:b4:3c:4d:e0:a5:4a:b8:7e:e8:94:24:a4:d5:58:1a:
b1:02:2d:55:55:11:e9:dd:56:da:af:ff:9d:f4:ce:22:32:74:
fa:3a:68:c4:34:9e:53:e0:ef:f9:20:d5:c8:3d:79:d1:18:7a:
57:1b:56:dc:0c:4d:50:32:51:6a:73:db:ef:68:db:c8:d2:f0:
ce:0f:4d:87:ca:5c:1c:09:06:5c:8f:69:ae:4a:09:7b:9f:80:
6c:07:b5:ce:22:3a:d2:b6:f1:de:f8:68:59:f1:94:53:62:b8:
92:59:e7:69:4f:12:71:ef:88:a1:dc:36:70:20:87:94:02:05:
c0:b4:c7:c6:2d:29:10:78:5e:4d:d9:30:c9:3d:0d:d6:fa:0f:
e2:04:b6:b6:de:a9:ad:1a:a1:7f:a0:c2:5d:aa:3a:d2:82:65:
1d:12:9d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:38:56 2024 by rpki-client on console-ams.rpki-client.org