Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/4RPy0lDIq5HZjffa1Okl0hWT3rY.roa
File: 4RPy0lDIq5HZjffa1Okl0hWT3rY.roa (raw, json)
Hash identifier: mdX88oE0oBjO25pPw3gYmYkn0cRMummJEaJcbZOcOqU=
Subject key identifier: E1:13:F2:D2:50:C8:AB:91:D9:8D:F7:DA:D4:E9:25:D2:15:93:DE:B6
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A00AD1ED6E944781142C06AF79435
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/4RPy0lDIq5HZjffa1Okl0hWT3rY.roa
Signing time: Mon 01 Jan 2024 18:29:47 +0000
ROA not before: Mon 01 Jan 2024 18:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199187
IP address blocks: 2a12:bec0:1c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:00:ad:1e:d6:e9:44:78:11:42:c0:6a:f7:94:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e113f2d250c8ab91d98df7dad4e925d21593deb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:11:d9:74:63:d7:43:c3:33:e0:36:6b:b3:6b:
92:c6:9b:db:01:62:ff:11:85:02:ae:9f:3b:aa:69:
26:9c:f4:8b:63:7f:22:97:a7:9e:a3:6c:d2:47:32:
99:4e:0f:3c:04:31:85:f6:b4:9c:98:09:43:92:ba:
dc:c0:b6:0c:46:35:bd:b9:31:e7:d5:cb:74:c0:3c:
6c:68:44:69:8c:02:ae:44:fa:86:25:af:05:a4:ce:
10:69:6e:64:56:4a:73:a9:f7:44:57:8a:ce:83:0b:
e7:fb:ff:c9:d5:45:32:b1:9e:ca:9b:ce:77:a0:27:
ba:af:8b:ed:f3:94:24:34:e9:2e:96:79:62:5c:ad:
d7:12:31:98:6d:49:da:08:5c:9f:71:0a:ab:d5:e4:
f0:87:85:b1:8a:55:c3:9e:e3:33:f9:be:f7:31:0f:
75:4b:9d:54:b1:32:4d:00:ec:38:12:f2:dd:bf:14:
93:3a:e1:e5:4e:f0:b4:85:13:c7:81:18:8b:3d:26:
bc:95:c7:d3:34:1a:51:e3:ae:8c:9d:9a:8d:99:2a:
09:b2:29:f3:a6:54:86:9f:ad:43:35:53:3e:3f:42:
7b:87:06:b9:e8:15:4a:bc:3a:b3:7c:98:64:aa:65:
e2:79:19:57:64:d0:e8:a8:ae:de:f3:c7:0b:2e:a0:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:13:F2:D2:50:C8:AB:91:D9:8D:F7:DA:D4:E9:25:D2:15:93:DE:B6
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/4RPy0lDIq5HZjffa1Okl0hWT3rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:1c0::/44
Signature Algorithm: sha256WithRSAEncryption
79:3c:e5:45:97:f3:cb:e2:70:27:cc:cb:2e:1a:df:3e:d7:10:
b1:24:66:03:00:c7:0a:24:f8:cb:27:0b:16:c4:a6:3f:da:37:
e2:e5:24:70:01:28:37:a1:27:ab:ef:33:81:43:97:31:9a:47:
a8:7e:63:b6:be:6d:50:1d:fe:30:0b:bf:fb:82:06:82:fc:90:
e7:9e:bc:6b:83:12:0e:df:bb:64:50:e0:ec:e3:2a:0f:d3:2b:
7e:c3:a0:d3:db:2d:21:70:35:7c:25:79:2e:2b:0f:54:1d:9d:
d9:7b:bf:39:f1:69:da:eb:04:f7:c7:d3:dc:3d:d3:da:02:ad:
c7:a5:d7:0a:ad:16:8d:88:e4:9d:ca:f1:c1:8e:27:ea:85:6e:
6a:09:0a:36:ec:07:79:50:d9:33:c5:e6:0a:4b:25:b4:92:99:
c3:ae:d8:4a:99:7b:48:3b:72:76:45:8d:46:4e:05:06:ef:c9:
d9:aa:b7:dd:61:3c:ff:bd:a3:8e:50:c9:dd:b9:e1:f1:01:d6:
09:59:1b:38:32:5f:a5:1f:60:87:b3:e5:7e:af:9f:88:7c:d3:
63:54:59:14:3e:69:e5:8b:56:ac:e0:10:95:41:54:65:bc:c7:
8e:58:cb:59:95:ed:e7:97:bf:03:2d:84:35:5c:06:d4:0e:e6:
b6:21:55:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:52:31 2024 by rpki-client on console-fra.rpki-client.org