Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/b3zyzN_UjZO7TcRUxkcW1rI3GMI.roa
File: b3zyzN_UjZO7TcRUxkcW1rI3GMI.roa (raw, json)
Hash identifier: gyz3yW3seCzlp1kvbl7SAvWZYdHYkB87kYGj+l/qZ9o=
Subject key identifier: 6F:7C:F2:CC:DF:D4:8D:93:BB:4D:C4:54:C6:47:16:D6:B2:37:18:C2
Certificate issuer: /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Certificate serial: 01930741EF689B1FE7EF895ECD92871867B2
Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/b3zyzN_UjZO7TcRUxkcW1rI3GMI.roa
Signing time: Thu 07 Nov 2024 15:33:01 +0000
ROA not before: Thu 07 Nov 2024 15:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208421
IP address blocks: 2a12:7a40:9906::/48 maxlen: 48
2a12:7a40:9916::/48 maxlen: 48
2a12:7a40:9926::/48 maxlen: 48
2a12:7a40:9936::/48 maxlen: 48
2a12:7a40:9946::/48 maxlen: 48
2a12:7a40:9956::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:07:41:ef:68:9b:1f:e7:ef:89:5e:cd:92:87:18:67:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Validity
Not Before: Nov 7 15:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f7cf2ccdfd48d93bb4dc454c64716d6b23718c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:9a:1b:fc:bf:aa:45:65:83:12:5e:76:3e:
92:8b:b8:52:3b:54:cc:8b:ca:a9:3b:df:26:f0:97:
5f:8c:0f:4d:0b:40:17:5c:07:28:89:59:4c:57:ff:
5d:f4:4f:ef:20:9d:72:78:b9:bc:9a:f3:46:70:86:
5c:f0:82:72:5e:c8:4b:d9:d9:22:ab:6b:e1:af:87:
d7:14:83:b3:4c:4c:c4:d5:57:ed:17:6b:91:7d:dd:
e7:dd:3f:ae:98:7d:a0:dd:37:86:1c:70:37:d9:e3:
04:c4:52:15:91:53:eb:c1:92:2c:77:7c:c4:66:1d:
eb:86:18:58:bd:b5:f8:15:96:67:63:c2:eb:33:77:
b3:44:ff:99:71:ef:3c:9d:56:d1:c8:6f:2d:dd:76:
76:4e:8c:7b:95:59:6c:5b:98:9f:fd:7a:e0:5a:39:
69:40:3c:9b:93:66:3a:7f:5e:ee:a6:53:3f:0f:81:
aa:3f:eb:d6:06:81:52:d7:1b:6c:b2:2a:63:b5:5b:
62:81:d1:a9:9a:d8:22:02:59:7a:d1:88:4f:46:eb:
99:12:81:f9:ae:7f:3b:ac:9f:7c:2b:bb:09:4e:fd:
78:5f:04:d0:b5:38:ca:b8:c1:01:b1:0e:cc:d5:2a:
4d:10:28:9f:11:83:b1:f6:5a:95:2b:af:75:a5:c8:
f2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7C:F2:CC:DF:D4:8D:93:BB:4D:C4:54:C6:47:16:D6:B2:37:18:C2
X509v3 Authority Key Identifier:
keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/b3zyzN_UjZO7TcRUxkcW1rI3GMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7a40:9906::/48
2a12:7a40:9916::/48
2a12:7a40:9926::/48
2a12:7a40:9936::/48
2a12:7a40:9946::/48
2a12:7a40:9956::/48
Signature Algorithm: sha256WithRSAEncryption
be:52:a4:37:99:f6:68:0f:7a:f2:c9:c0:86:84:fa:f3:8c:35:
e7:d6:18:3b:41:83:ea:28:ff:de:f5:9d:c3:d2:60:e4:f6:f7:
41:c5:a2:42:6d:bd:2a:ee:7d:cd:4a:81:b5:6d:64:9e:a7:a7:
ad:7a:09:e1:e9:cd:9d:bb:b9:50:ff:60:62:6a:69:42:29:45:
98:56:aa:b0:e9:dc:a0:7a:e6:c9:d5:bc:ba:64:1b:70:9a:bd:
c0:80:43:55:72:62:b5:69:53:4f:62:09:1a:c4:68:3e:81:fa:
53:c4:30:e4:fb:08:f6:fc:fc:3f:26:4d:27:0c:a7:44:44:4d:
1c:ae:95:77:58:4f:f6:54:91:c2:4d:e7:f9:3c:c8:c9:31:ce:
4a:a7:ea:d3:aa:bb:52:c2:96:21:c7:97:49:42:10:5d:8b:0b:
86:01:3d:de:81:71:77:ca:4a:27:83:5b:b6:b2:6b:38:d1:d4:
f8:d5:7a:3d:29:8b:a6:9b:74:7a:37:29:3a:b3:0b:ca:92:80:
37:ce:87:03:1a:10:01:9c:12:15:fa:a1:a9:c3:aa:6b:58:19:
b8:9b:bb:76:fa:c1:10:e1:ef:0e:65:03:40:33:72:9c:03:38:
d8:25:f9:a3:8d:57:ef:9a:e5:4e:f8:4e:8f:47:26:60:ba:29:
7f:cc:be:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:51:07 2024 by rpki-client on console-ams.rpki-client.org