Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/P8tWF-9Z3LsjOEPUI0cWwNIlcWg.roa
File: P8tWF-9Z3LsjOEPUI0cWwNIlcWg.roa (raw, json)
Hash identifier: Kv9SK76F6uDH3eeCe5pp0vqrZ0wPNb4cOa0mrfkvzlk=
Subject key identifier: 3F:CB:56:17:EF:59:DC:BB:23:38:43:D4:23:47:16:C0:D2:25:71:68
Certificate issuer: /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Certificate serial: 01930741F0605DBE04886E7A3CF9DA87E826
Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/P8tWF-9Z3LsjOEPUI0cWwNIlcWg.roa
Signing time: Thu 07 Nov 2024 15:33:02 +0000
ROA not before: Thu 07 Nov 2024 15:33:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208749
IP address blocks: 2a12:7a40:9908::/48 maxlen: 48
2a12:7a40:9918::/48 maxlen: 48
2a12:7a40:9928::/48 maxlen: 48
2a12:7a40:9938::/48 maxlen: 48
2a12:7a40:9948::/48 maxlen: 48
2a12:7a40:9958::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:07:41:f0:60:5d:be:04:88:6e:7a:3c:f9:da:87:e8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Validity
Not Before: Nov 7 15:33:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fcb5617ef59dcbb233843d4234716c0d2257168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:7b:24:0d:35:2c:e3:05:61:54:95:35:0b:
98:d2:da:98:e4:62:4a:2f:52:96:b4:59:9b:da:92:
c5:e2:24:86:33:be:97:c3:1c:ec:3d:f4:7a:d5:2d:
10:61:01:a2:06:fb:90:c4:b4:40:d7:6c:e7:cb:8d:
61:e1:03:5e:9d:ff:29:7a:fa:d9:ff:f1:2d:6e:65:
79:2f:8b:f6:76:57:4e:67:5a:cc:f2:05:e3:93:0c:
0a:7f:41:10:97:87:7f:7a:72:41:b1:90:f6:fb:60:
94:a0:32:44:91:aa:da:fa:fe:b6:d3:00:2b:7e:10:
86:81:90:50:7d:f1:3e:94:61:49:b9:20:de:e9:86:
4c:99:94:17:6a:7a:3f:1b:3d:aa:26:f0:2b:2a:20:
ed:aa:a7:5d:fa:d6:47:9b:a5:38:41:4f:52:9f:a5:
84:ca:56:20:c5:0d:04:4f:5e:1f:ec:a4:06:e1:50:
26:07:a3:32:2b:38:b4:d0:30:69:fc:4c:2c:a1:df:
cf:4e:4f:ba:52:92:1a:a7:07:b7:20:a0:27:8e:68:
27:6a:3b:d3:b8:e5:90:3d:f8:09:72:ee:09:f4:ba:
cf:d6:7b:6f:63:09:d2:70:b4:ca:0a:8d:e0:5f:e5:
a1:d7:8d:65:c2:1a:5e:00:e2:57:e5:00:9a:87:9b:
6d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CB:56:17:EF:59:DC:BB:23:38:43:D4:23:47:16:C0:D2:25:71:68
X509v3 Authority Key Identifier:
keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/P8tWF-9Z3LsjOEPUI0cWwNIlcWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7a40:9908::/48
2a12:7a40:9918::/48
2a12:7a40:9928::/48
2a12:7a40:9938::/48
2a12:7a40:9948::/48
2a12:7a40:9958::/48
Signature Algorithm: sha256WithRSAEncryption
78:bb:48:db:51:37:6f:96:bc:0f:72:65:e4:91:b2:a7:4a:0a:
ae:b0:b7:ac:7b:46:ce:74:93:a7:c5:0a:b1:02:eb:ea:6d:72:
b5:9e:d1:ae:29:2f:3d:b5:a5:50:f4:6c:94:c0:46:eb:b9:b0:
3c:b6:25:f0:8d:14:b7:a4:ac:4f:8c:8f:01:d1:40:92:da:ab:
af:c1:ef:14:6d:04:84:0f:bc:64:54:57:ff:75:35:8e:24:1e:
69:84:dd:89:7f:9b:3e:bd:86:33:2a:cb:a1:54:23:b5:89:b0:
78:cc:d2:57:39:55:6d:8b:a8:38:10:9f:06:96:bf:00:7b:de:
45:42:db:96:76:01:aa:3e:f5:c7:d1:fb:0e:59:a6:d6:b5:83:
6c:c9:20:dc:79:b3:d6:16:88:be:87:f1:52:8b:ca:e1:7e:2b:
7f:ea:2c:20:64:c1:40:2e:fc:8c:74:71:d4:40:e9:82:26:4f:
5c:be:6e:32:f6:0b:51:b0:4e:c5:3b:56:5b:59:ae:bb:25:ac:
5e:52:0e:c4:6a:0e:7e:b6:17:cc:2b:41:36:b8:4e:34:e3:07:
d5:78:00:ed:90:22:7c:c9:b2:63:c1:e8:23:b3:73:de:20:ab:
0e:af:6c:e9:26:f9:ad:4a:52:5a:a7:0c:7e:e0:9c:e1:e1:7b:
4e:fb:57:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:01 2024 by rpki-client on console-fra.rpki-client.org