Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1Xji-J2yTybJrkaHaCu2BmIHqX4.roa
File: 1Xji-J2yTybJrkaHaCu2BmIHqX4.roa (raw, json)
Hash identifier: sTaV5jWXDdRnmxTrj8h3zQxDxncN5whrzQi2Ocysccg=
Subject key identifier: D5:78:E2:F8:9D:B2:4F:26:C9:AE:46:87:68:2B:B6:06:62:07:A9:7E
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A103AF7821B7B307F9DA942A7E28A
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1Xji-J2yTybJrkaHaCu2BmIHqX4.roa
Signing time: Mon 01 Jan 2024 18:29:51 +0000
ROA not before: Mon 01 Jan 2024 18:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216085
IP address blocks: 2a12:bec0:570::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:10:3a:f7:82:1b:7b:30:7f:9d:a9:42:a7:e2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d578e2f89db24f26c9ae4687682bb6066207a97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:9a:cc:22:af:de:17:1b:c1:8c:b9:92:01:
3c:21:41:2f:a5:ee:1b:9e:0a:76:c3:d7:bc:a5:ea:
2d:34:9c:0b:36:4c:c1:e7:76:8e:5a:3d:8f:b0:80:
01:7b:c9:4c:05:f5:81:d7:04:4b:41:01:97:25:1f:
90:59:72:5e:d3:60:ab:4f:8e:3f:85:0c:2a:87:26:
0b:30:2f:62:f0:96:a2:ba:8c:7b:16:f4:6b:ce:61:
8c:66:57:40:75:1a:77:18:c1:d4:44:cc:ca:e1:f8:
5d:f7:4d:03:fe:20:a5:21:cc:b0:83:91:35:5b:a9:
71:69:4c:e8:98:1a:db:61:3a:f6:e2:eb:50:88:69:
25:ef:bd:5a:41:d3:1b:cb:88:dd:c0:67:65:aa:ac:
4d:fc:b2:b4:a7:3a:22:61:64:84:fc:68:be:ca:5a:
8a:19:64:2c:41:74:6d:03:58:9a:f6:ab:fa:66:12:
56:a6:c6:9f:89:3a:6c:e4:ba:31:78:dc:9a:af:ed:
3c:4a:0e:2e:34:1f:9c:69:72:b8:5c:87:9e:91:fe:
9c:7a:c8:7b:24:32:79:18:f1:90:55:a1:60:e7:43:
47:ae:77:10:2d:17:87:12:7a:61:cc:c2:06:8b:a1:
a1:6a:d2:1b:69:b4:f8:c6:32:2f:5a:ae:2f:f8:21:
d6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:78:E2:F8:9D:B2:4F:26:C9:AE:46:87:68:2B:B6:06:62:07:A9:7E
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1Xji-J2yTybJrkaHaCu2BmIHqX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:570::/44
Signature Algorithm: sha256WithRSAEncryption
24:d7:7b:1a:47:62:2c:ca:9f:37:a6:d2:6c:ee:47:58:94:f4:
e0:1a:ff:58:96:b7:14:56:5f:80:26:32:c0:6f:8c:3c:59:00:
fd:70:a9:36:0f:a2:ec:8c:66:8b:18:32:59:d8:b2:8e:4e:7c:
67:0b:4a:2e:e7:d1:f3:74:de:75:f3:42:2a:f1:ec:48:aa:73:
91:d5:3a:c4:1e:c1:df:6c:60:ba:1d:20:56:2f:a8:2d:2f:ff:
d5:36:52:2a:dd:63:de:7d:2a:26:0e:c7:4a:50:16:4d:14:34:
12:71:e2:27:f9:67:dd:bf:42:0e:1b:98:e3:5e:53:70:79:be:
fa:ff:e6:ea:2d:b0:cd:c0:ee:4c:2d:79:71:00:ce:c1:dc:f6:
66:f9:28:40:ca:ad:f5:ee:56:0e:cf:b6:48:d9:db:07:15:2f:
39:05:ea:43:ce:d5:dd:db:9c:a8:cf:40:d5:63:9b:30:73:d6:
ed:37:05:b7:b8:be:fa:f9:9b:75:ce:81:09:f9:6c:32:5b:b0:
73:28:16:9d:3c:a1:d6:46:8c:e3:11:0c:05:2b:56:9f:f0:da:
7e:53:a7:25:f5:3f:ac:8e:1e:49:0b:94:a7:18:f9:f6:81:70:
07:95:92:d5:34:ff:ed:fb:8f:93:72:8b:b5:eb:24:66:52:fc:
21:35:41:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:46:59 2024 by rpki-client on console-fra.rpki-client.org