Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/bLiDi6czciTucLu2NWD18et2GK0.roa
File: bLiDi6czciTucLu2NWD18et2GK0.roa (raw, json)
Hash identifier: WBWekoeQreuxysMK/ZbtP5FeElaKHXQ3XFltJiNZ7Ew=
Subject key identifier: 6C:B8:83:8B:A7:33:72:24:EE:70:BB:B6:35:60:F5:F1:EB:76:18:AD
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 018CC64B4034BA462D1E4B5134C7B836E409
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/bLiDi6czciTucLu2NWD18et2GK0.roa
Signing time: Mon 01 Jan 2024 18:31:09 +0000
ROA not before: Mon 01 Jan 2024 18:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211051
IP address blocks: 2a12:3fc2:ab50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:40:34:ba:46:2d:1e:4b:51:34:c7:b8:36:e4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 18:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cb8838ba7337224ee70bbb63560f5f1eb7618ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:17:b1:67:5f:be:a4:79:b2:54:ed:72:0f:
df:62:a4:d5:e1:25:3d:80:eb:1f:b4:ac:af:58:24:
81:0b:71:27:fc:8b:e8:4b:f8:ef:74:46:5c:99:0a:
b6:a2:7a:47:32:af:91:fa:41:b6:89:2b:13:19:33:
82:1c:ee:9f:6d:8a:5e:01:ef:33:b2:9e:61:4e:46:
e0:bd:5d:2d:b0:a9:05:4e:0d:29:95:05:45:25:38:
2c:62:6b:fc:d0:5a:69:81:d3:e9:fa:f4:a3:09:c8:
11:9b:d9:5d:a3:0e:48:5b:65:5f:79:de:e0:47:74:
c1:fe:dd:92:9f:c2:b6:bd:7a:17:4c:ff:82:6f:e6:
bc:3b:1f:7c:34:c1:10:60:69:da:5d:7f:81:30:7e:
30:3a:0e:ec:11:f5:3a:55:84:4a:98:8e:17:03:23:
ad:d7:8c:92:51:1a:85:48:30:0b:01:dc:b0:69:86:
dc:ba:c1:6c:0c:42:ff:c7:07:de:b4:40:20:b5:57:
2f:02:f1:9b:f1:b5:82:7d:d7:92:44:fa:2b:8f:53:
34:72:95:32:13:19:c1:95:bb:d8:a2:fc:2f:8b:bb:
58:98:84:1e:c9:79:75:9d:39:c1:89:2a:d0:8f:1c:
b2:6a:b9:a6:8c:3c:52:f2:d4:4b:e2:3b:e2:37:20:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B8:83:8B:A7:33:72:24:EE:70:BB:B6:35:60:F5:F1:EB:76:18:AD
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/bLiDi6czciTucLu2NWD18et2GK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:ab50::/44
Signature Algorithm: sha256WithRSAEncryption
1a:96:54:12:f3:45:44:29:2b:72:ea:01:96:bc:bb:da:72:e1:
5f:66:49:6c:65:ea:b8:21:75:ac:74:a2:ae:e3:6a:c9:a6:21:
25:3b:aa:21:df:e7:21:fb:21:72:a3:c9:93:41:6d:f3:fb:1f:
bd:df:44:86:b6:3b:2b:b4:72:79:a4:73:43:51:b8:e2:4a:1f:
e9:5f:21:0f:ce:34:50:ec:0d:dd:4c:83:4e:7a:9d:d8:9a:0a:
88:5d:8c:3a:18:83:c5:14:ae:2d:d5:e9:76:64:74:28:41:11:
90:6f:1c:b4:26:3e:7b:4e:79:c5:f2:70:1e:4d:33:f3:7e:83:
b4:66:d1:00:63:15:32:80:e8:44:55:ea:46:59:4e:1b:5f:e2:
fb:11:36:aa:3a:55:dd:63:30:0e:36:80:77:c1:37:15:51:61:
ca:a1:88:f2:70:b6:11:7a:d1:0a:1e:1c:b2:3d:b9:90:4f:53:
9a:0c:1b:78:2b:6f:c8:11:b5:52:eb:8e:87:28:77:bc:96:51:
f8:98:bf:f2:50:aa:f9:f2:b8:3f:ff:3d:7a:82:a1:c9:c0:e4:
fb:00:2e:e3:be:bb:75:45:12:4d:a7:c4:7b:71:b3:2d:f6:d7:
d1:52:52:ab:10:4f:2e:a8:64:ff:f2:da:a4:17:d7:79:f2:3d:
5e:ed:d8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:50:01 2024 by rpki-client on console-fra.rpki-client.org