Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/0I7qx0oUGxK1DL_vstFlVPTWwek.roa
File: 0I7qx0oUGxK1DL_vstFlVPTWwek.roa (raw, json)
Hash identifier: fU7gkFsbjhM32IXMOILixmFJEubkOBdpX23m0bs0pr0=
Subject key identifier: D0:8E:EA:C7:4A:14:1B:12:B5:0C:BF:EF:B2:D1:65:54:F4:D6:C1:E9
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A064512EFE86250D5C1C841EF1A57
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/0I7qx0oUGxK1DL_vstFlVPTWwek.roa
Signing time: Mon 01 Jan 2024 18:29:49 +0000
ROA not before: Mon 01 Jan 2024 18:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200636
IP address blocks: 2a12:bec0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 19:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:06:45:12:ef:e8:62:50:d5:c1:c8:41:ef:1a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d08eeac74a141b12b50cbfefb2d16554f4d6c1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:df:ed:62:0b:59:0e:e2:c7:33:73:64:9f:
35:af:f1:df:b8:7d:7f:02:2f:53:30:5e:27:2e:af:
7e:53:ca:0a:eb:d5:36:8a:7d:68:74:74:cc:ee:da:
ce:2f:39:72:38:76:71:b1:1e:8b:22:f8:80:8e:a4:
75:2c:31:f4:4d:e6:9c:0b:dc:0f:f1:1f:99:47:1f:
bb:56:36:90:f7:cc:f6:c5:89:6a:70:f9:70:f6:dd:
20:53:eb:7f:66:26:59:05:80:a0:52:4f:12:19:45:
16:12:d4:f3:9d:c8:47:c9:20:db:a6:3a:0a:96:35:
53:19:8d:14:7f:19:0b:42:58:aa:53:80:c3:b8:c8:
74:d6:de:b6:2c:e5:d2:d3:72:87:a1:c4:8e:de:47:
ef:7b:e5:84:ef:be:d0:7f:e2:73:2f:0f:c3:50:cb:
13:10:67:23:83:3a:57:2f:9c:e2:3f:11:b6:8d:f5:
af:c3:c5:11:e2:d9:3a:fb:b1:85:eb:22:1a:cc:32:
20:ad:77:e5:ac:b4:7a:be:24:cf:1a:fd:e0:48:b3:
36:08:94:a9:68:7b:57:38:38:a1:b0:94:b5:c8:d6:
44:b0:bc:ba:b7:86:91:92:f4:53:1c:2a:62:93:80:
fd:32:64:cf:a3:56:0e:1d:6a:31:e6:b0:f3:ec:2c:
fc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8E:EA:C7:4A:14:1B:12:B5:0C:BF:EF:B2:D1:65:54:F4:D6:C1:E9
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/0I7qx0oUGxK1DL_vstFlVPTWwek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:1::/48
Signature Algorithm: sha256WithRSAEncryption
81:a7:07:33:fa:bb:69:df:ab:03:c3:6c:f0:ac:b4:9d:f0:4f:
d7:f2:f4:35:73:c1:8d:a1:04:55:a8:bb:16:ad:23:ba:23:d4:
b5:f9:a4:09:31:06:59:11:00:25:95:b5:86:07:79:95:53:e8:
df:26:8e:5e:df:ac:8d:e4:cd:18:1a:d8:d6:0c:da:80:95:aa:
2a:39:9d:94:7a:8d:cc:62:07:f2:eb:2c:62:71:6d:df:c7:59:
ed:2e:53:31:07:7f:77:97:10:b6:67:ca:66:c5:c8:f6:56:45:
c3:c3:32:59:06:d8:0f:a7:4b:ce:5c:c7:fb:ae:60:c7:33:91:
be:f0:ca:19:c0:a3:fa:f5:40:78:8d:e7:05:2b:dc:f8:ba:3a:
6e:bb:e8:72:3d:90:50:6e:60:ea:90:08:77:f3:99:fd:57:4a:
6c:14:a5:f9:85:88:f1:f4:ed:66:46:84:97:c8:29:65:b0:3f:
71:b3:4f:65:8f:fe:a3:68:6d:c7:78:78:15:67:18:f0:80:e6:
80:30:b9:a3:1f:ab:15:1a:5b:1b:b9:e4:96:b5:85:98:5c:99:
77:ef:fd:db:20:0c:ed:58:91:08:f8:5e:15:0a:a9:c3:f5:a6:
64:83:31:65:db:2d:d6:c7:14:a6:55:9f:fd:30:ea:a7:3c:40:
70:18:f7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:55:16 2024 by rpki-client on console-fra.rpki-client.org